Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File:                     i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier:          G5dyDtujQd/r0TCUfwdUt5rU77hrDcZLJ/j7PURrAHI=
Subject key identifier:   78:C0:F4:DA:0B:D3:DC:08:2A:3C:7B:49:C8:8A:95:37:B9:71:1A:0D
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer:       /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial:       01962E2AD05EE6A2D9FEC732A73DC8FBBC49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number:          12B6
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
                          2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
                          3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: 3vHSXKWG7XLamsCYJxLR2/sEMHxY/ZNcR+EPT1LE+Y4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d0:5e:e6:a2:d9:fe:c7:32:a7:3d:c8:fb:bc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=78c0f4da0bd3dc082a3c7b49c88a9537b9711a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:86:f9:d3:b9:ad:4a:c2:ef:69:c8:00:37:
                    25:95:b0:51:d5:bc:b2:b3:91:30:74:3a:ec:a9:e0:
                    16:8d:cc:e2:d9:db:3a:bb:20:51:2d:2a:39:b4:4f:
                    c1:b0:e1:28:aa:71:ed:27:ee:06:c9:1e:b5:79:4d:
                    c4:4b:69:d5:65:44:50:55:55:b6:23:36:b6:92:bd:
                    a9:8f:05:77:76:0b:13:0f:b5:1f:ba:fa:81:77:ea:
                    6b:3b:3d:d2:30:ca:ab:27:33:57:61:eb:bf:d1:79:
                    ab:8e:48:cf:4c:35:4d:9e:78:98:1d:2b:18:57:23:
                    6d:ab:00:06:2c:52:70:59:1b:a2:1b:bf:5e:c9:88:
                    24:aa:5e:2e:32:5d:f9:09:8d:4e:95:b7:87:11:1f:
                    42:a1:49:e0:a2:db:44:5b:26:da:68:90:6a:99:b1:
                    5c:2c:6f:5b:64:02:c2:59:0c:ab:ca:9a:21:85:5c:
                    99:af:7b:b0:eb:99:10:76:a9:a4:30:bc:c4:30:fc:
                    44:0a:77:27:18:ac:62:a0:f6:25:a8:16:9c:c4:34:
                    0a:b6:a9:35:63:fa:11:9f:bf:7c:1a:15:91:0e:ef:
                    24:d9:f5:50:34:88:e5:06:09:70:56:dc:09:e7:1f:
                    9e:97:38:2c:00:a9:28:3f:71:71:6c:ab:bf:0a:e1:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C0:F4:DA:0B:D3:DC:08:2A:3C:7B:49:C8:8A:95:37:B9:71:1A:0D
            X509v3 Authority Key Identifier:
                keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:52:d7:67:ba:f9:97:a3:e8:9a:e6:5c:e6:4b:2e:fc:71:5a:
         3d:45:56:fd:66:a4:e9:83:eb:7c:af:85:4e:13:cb:79:4f:f9:
         86:aa:af:b7:40:4d:d1:0d:23:e8:cc:7d:b6:52:b3:9b:75:b7:
         45:1e:53:76:ff:46:e8:a6:41:86:8a:b4:ea:c5:27:56:98:8a:
         3c:8c:23:f2:99:dd:7a:19:f5:a7:85:cb:31:ee:45:d2:ca:7f:
         ef:f2:21:e0:1a:21:b8:28:6e:d3:b6:8e:77:5b:d2:ab:a8:57:
         1b:be:ba:8d:aa:50:0c:d4:56:88:29:98:a4:22:a9:36:24:9d:
         df:e5:b3:aa:4e:70:9a:d2:84:61:0d:28:19:0d:4f:d8:3d:1e:
         17:76:09:4d:b2:b0:96:b6:c4:2f:c5:b3:bb:c6:4a:dd:c5:cb:
         35:4e:54:7e:ed:d2:38:d2:60:dd:aa:7a:2b:81:5b:c7:bb:cc:
         84:e0:58:fd:c9:9d:ac:da:6f:cb:91:2f:7a:e5:2f:98:3c:c4:
         4a:e6:17:a3:b9:fe:c6:5b:35:3e:d6:12:2d:da:98:03:29:19:
         1b:e2:d2:e3:88:90:4c:15:4a:39:d7:ce:d6:af:6b:40:aa:73:
         d7:22:3f:d4:ef:6f:3e:65:16:68:e9:57:fe:99:a9:ae:5c:74:
         96:53:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----