Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File:                     9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier:          2FaL8hn66UXGRoHQtVI+HSPOsSuPOu+8w2wEdTEIKPQ=
Subject key identifier:   9D:38:B2:63:31:AD:19:A7:5C:39:D8:6B:E0:9C:8D:99:38:61:09:A6
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer:       /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial:       01962F06D68A393537375B0DE874024023FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: lIBZrh8YtDT0sbo9MEaOkV74uWVvCVvSkr8+evHcshg=)
                          2: FNrF4gJ9GeSqn1QNR00c9Q4ygYg.roa (hash: 2ncm1gP0ao8l2RvVLkDskRllvyDwCE2AZXVvFGp+UKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d6:8a:39:35:37:37:5b:0d:e8:74:02:40:23:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=9d38b26331ad19a75c39d86be09c8d99386109a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0d:39:2b:75:e0:07:94:57:e4:63:49:e8:52:
                    5c:45:67:de:c4:9f:1c:aa:98:7f:c2:5e:b2:03:cb:
                    2b:82:38:a8:97:4f:4a:18:10:3b:a8:e7:3a:e9:66:
                    04:26:5c:44:7f:94:af:75:77:fe:72:8f:0f:e2:18:
                    db:8d:28:75:74:58:75:63:3b:4b:87:bc:c6:21:f9:
                    e5:69:d4:e8:b1:65:21:74:f2:7d:1f:68:07:0f:a9:
                    86:9f:54:20:cc:20:8a:d5:15:b1:62:40:67:10:78:
                    62:62:7f:ce:3b:54:dc:70:1e:63:97:97:be:2b:be:
                    b9:6c:3d:4b:b8:07:5f:01:34:14:a6:b6:11:c4:df:
                    75:40:7f:ec:d0:70:2f:7c:cf:5c:1f:d0:03:73:e1:
                    13:53:81:f7:cf:d7:ce:71:2d:ce:dd:a9:96:b4:3f:
                    e4:97:24:ba:ec:4a:79:f4:58:08:4a:73:71:e7:0f:
                    08:47:c0:d2:02:80:47:48:e0:f8:8c:03:13:a4:06:
                    f3:d1:c3:97:37:61:9d:f7:ed:26:60:64:5e:ba:2a:
                    3c:7b:ce:f5:7b:e6:92:5b:bf:89:63:a8:2a:54:4d:
                    62:55:67:33:79:08:36:c3:e6:1c:d1:e8:8a:4e:ee:
                    63:6b:a8:5d:23:5d:5b:f9:aa:c7:06:13:ed:e9:ce:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:38:B2:63:31:AD:19:A7:5C:39:D8:6B:E0:9C:8D:99:38:61:09:A6
            X509v3 Authority Key Identifier:
                keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:cf:75:66:06:ae:76:08:d7:84:32:2a:dc:12:a5:64:03:9c:
         39:5c:66:f1:b8:89:79:4f:41:d1:09:7a:86:95:f3:24:35:63:
         7c:08:9f:a0:ed:f5:77:ed:d5:13:2c:51:de:a6:de:08:ef:ca:
         14:5c:40:e6:e2:15:29:16:f2:b0:42:c5:c1:ca:92:1e:c9:63:
         8e:c6:74:f3:a5:cb:07:a5:67:ab:d0:c2:28:eb:80:f1:d5:72:
         f9:86:21:34:69:15:8c:8a:46:a3:a1:d1:31:6b:be:90:60:ff:
         a9:73:76:47:df:6e:9d:bd:23:77:cb:b9:e1:c1:63:ba:c9:86:
         28:a2:9d:9e:4c:6e:e8:ad:da:f3:82:d0:8d:d7:a1:44:b6:d5:
         68:62:94:43:51:11:98:85:85:f8:01:8c:b3:98:ea:d0:b5:95:
         31:50:48:93:1f:a0:37:1b:0e:d9:ed:cf:dd:a0:b1:6a:4b:d8:
         a7:a2:82:6e:5c:13:ba:5c:28:49:41:c7:25:6b:ba:6a:03:ae:
         30:14:4f:72:03:8d:27:76:c6:70:b7:2b:5f:cd:66:36:15:c7:
         99:26:3e:78:67:3e:f9:df:3c:59:59:96:73:99:20:63:0b:c2:
         28:9e:b1:78:41:f0:77:4e:fa:da:b2:37:08:cc:46:b0:03:46:
         cb:09:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----