Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File:                     9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier:          CcY7VXziKO5XiOkyIQ+eXeDXrOJKjJO6jQdlt3HJ+jg=
Subject key identifier:   47:BA:58:7F:50:99:8B:69:1E:B9:40:56:6C:EA:B0:D2:8A:85:3D:D7
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer:       /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial:       01962E99B357758DC5A868D5EFAEF9F779C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: LvjhcSvGOIyeTcv4dSy2lSTTl9CNqegqFFrsI8oUQ0c=)
                          2: DSwyNAuAz2bJdfrLonxlYBob04I.roa (hash: 3+/CvQ/0iqsF5SqvqkyipksHlcWBh/rqDJFf0zM3tC8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b3:57:75:8d:c5:a8:68:d5:ef:ae:f9:f7:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=47ba587f50998b691eb940566ceab0d28a853dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:83:4c:da:80:8d:62:18:a1:98:a5:e6:9f:
                    4e:c6:77:fe:a7:61:d0:f4:1c:a0:b1:f8:d0:72:c3:
                    3b:ad:5c:9b:e5:73:7c:9e:5a:af:15:33:7f:cb:a1:
                    58:9b:28:ab:50:06:2f:6e:a9:b1:c3:77:e4:27:84:
                    30:c5:3c:cf:26:70:6c:80:de:cf:dc:06:bf:f8:ca:
                    63:97:db:a1:0c:e2:7c:05:93:a3:d8:c3:2c:ee:a1:
                    18:3e:f4:64:52:3d:2a:6c:1f:12:41:61:83:00:7c:
                    e3:10:17:eb:01:52:8e:ce:8a:8d:ec:07:44:4c:b8:
                    85:62:31:f4:6f:19:a3:10:2f:2d:e6:ae:6f:09:fc:
                    2b:e2:d3:ba:22:05:f4:dc:b6:fd:57:e4:b4:64:c6:
                    15:ec:59:fd:57:19:7b:e6:ec:fd:0b:ff:71:fd:77:
                    7c:c3:82:1d:6e:5d:5d:23:d8:ab:ec:10:3a:fd:65:
                    24:45:84:d0:68:52:a8:38:9f:90:c4:9f:af:65:41:
                    ab:ef:d4:34:dd:15:41:98:ed:2c:c2:77:71:38:b2:
                    c8:72:7a:da:0e:fc:ed:30:91:17:8a:a0:c3:77:91:
                    4f:cc:2a:97:90:85:7d:e2:78:9d:5e:5d:b3:2f:92:
                    6a:f7:f6:44:24:fd:13:62:89:1b:7e:ef:8b:a2:ab:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BA:58:7F:50:99:8B:69:1E:B9:40:56:6C:EA:B0:D2:8A:85:3D:D7
            X509v3 Authority Key Identifier:
                keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fa:a0:37:a1:aa:3b:d9:e4:ac:b2:c8:1a:e3:04:09:c7:ef:
         3d:de:23:70:c8:1f:5e:e2:5c:7d:ef:17:04:68:c1:a0:82:69:
         43:05:4d:0a:47:de:9e:84:9e:4d:e6:2c:ef:4f:74:e4:21:2a:
         30:de:09:7c:99:ab:5a:c9:9d:4e:6b:a4:10:a6:a3:21:0c:98:
         b7:37:1c:a5:95:fe:21:04:dc:c5:7f:f1:8d:c8:f0:ab:26:a0:
         3c:4b:03:fe:2c:f1:4b:e3:9d:fc:5e:1d:e1:61:43:dc:f4:5b:
         c4:d5:3d:aa:09:eb:63:cb:8e:0c:89:62:7c:80:03:17:b8:65:
         78:25:19:75:52:e7:ad:5f:4e:18:4d:0c:52:5c:ed:65:be:82:
         4a:2d:b2:48:07:f0:0a:eb:be:fd:44:2a:f0:0b:77:ac:17:66:
         b3:0f:9a:3f:e0:9d:fd:52:88:47:20:ac:fa:fd:c6:c2:fc:9b:
         28:ca:d9:fe:f2:d2:2a:87:4e:a2:c8:f1:e6:62:2a:25:30:54:
         df:11:8f:1d:3f:1b:1e:ab:a7:dc:b0:73:2d:65:ca:6d:64:0f:
         d3:d3:6f:8a:4f:3d:2f:aa:f8:81:8f:04:5d:37:ae:c1:d4:ea:
         2a:df:e1:08:1a:c2:bd:90:22:08:7b:67:18:a4:07:b6:10:c8:
         c7:54:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----