Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
File:                     9RKnWcZemEm7fFMtXrtESZpRW_8.mft (raw, json)
Hash identifier:          0463CcZVsuEE393P7Jm6b8itccOMm4kuM+X0hyP7VLQ=
Subject key identifier:   5D:DD:C5:F7:ED:5D:B7:6B:03:EA:84:DE:60:B4:01:40:5F:39:5D:83
Authority key identifier: F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF
Certificate issuer:       /CN=f512a759c65e9849bb7c532d5ebb44499a515bff
Certificate serial:       01962E2B11ADC513431CB2A0C8439E6F22DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft
Manifest number:          04B7
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: 9RKnWcZemEm7fFMtXrtESZpRW_8.crl (hash: ynf9j6YxbhPf+bXjYBXxf8+EgNwnj192uxx6E5L4iqg=)
                          2: PHx_cn3cwOP0zIbd-tSOarri2jU.roa (hash: jvXJa9wGshKFR0UvbJd8wg24Fv3g0IRm/OGSnIujd88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:11:ad:c5:13:43:1c:b2:a0:c8:43:9e:6f:22:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f512a759c65e9849bb7c532d5ebb44499a515bff
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=5dddc5f7ed5db76b03ea84de60b401405f395d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:0e:8d:cc:88:4a:58:4e:50:ec:90:28:26:
                    66:1b:e4:af:66:4a:2e:46:f0:54:d5:80:1b:cb:b3:
                    cd:00:47:ac:e4:be:13:1c:ca:5e:f1:f1:26:79:6f:
                    49:d9:c2:3b:0a:88:a2:2d:85:0f:40:a3:e8:69:e4:
                    5e:e6:94:0b:93:20:07:9a:b8:88:2e:1a:35:ce:5e:
                    e7:2d:b6:f6:78:d2:80:67:ff:6d:96:6b:38:ab:d8:
                    b7:c7:4d:9c:50:9e:09:78:dc:5b:e9:d4:c4:f3:b9:
                    a0:f6:33:1a:fc:5d:50:3a:06:59:ce:3e:de:57:a6:
                    ab:d6:ba:13:8f:3b:f0:d6:c0:fc:d2:a3:cd:62:d5:
                    fa:dc:fb:d1:62:62:f0:b6:9c:d2:ed:14:4d:2a:18:
                    9c:4a:58:a2:a4:7c:3a:b2:55:c9:89:b5:01:a3:e8:
                    1c:34:4a:7b:ed:23:07:6e:58:93:d5:c7:f0:72:6f:
                    69:a8:22:b4:37:b4:f8:5a:2e:71:73:96:0e:60:be:
                    20:2f:e4:0b:b1:0f:cc:1f:99:5a:2e:ef:fc:25:67:
                    7f:92:56:4b:20:3f:cd:ff:ee:a7:49:3b:ae:fa:41:
                    4f:fa:6f:47:ef:4f:5e:99:7b:67:8c:7e:0e:a6:eb:
                    69:17:0d:36:4c:fb:ea:75:ec:44:31:4b:fe:9c:31:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DD:C5:F7:ED:5D:B7:6B:03:EA:84:DE:60:B4:01:40:5F:39:5D:83
            X509v3 Authority Key Identifier:
                keyid:F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:58:d7:76:82:11:b9:81:1d:0a:b1:18:56:e7:3a:7f:c2:8c:
         1f:d9:3e:4c:41:eb:1b:14:5f:27:1f:8d:3e:34:81:b2:c6:5b:
         73:27:3d:f5:20:fa:75:d5:89:37:ff:f5:d0:af:84:dc:1a:72:
         36:c8:a7:ef:64:28:76:be:e2:93:bd:6f:a6:06:71:aa:53:06:
         98:ab:3c:03:b6:d5:50:f2:34:31:06:02:fe:28:07:f3:af:2c:
         d2:f2:14:d0:26:be:5d:73:db:d2:93:c4:b3:66:48:60:e3:af:
         a0:e9:da:83:ca:fb:21:55:7a:67:43:4a:b7:36:17:7c:40:9a:
         c7:ac:83:77:7e:55:0a:6c:ef:20:e9:d1:f0:65:63:51:03:78:
         a5:72:71:97:a5:b5:f5:4c:c2:9a:db:1a:78:11:aa:0e:6d:c3:
         54:4b:c2:bb:34:f3:9a:ab:e8:b6:23:66:08:ae:ab:6a:e9:2c:
         31:35:65:c3:bc:91:a3:58:58:73:e8:4e:a9:8f:00:7b:0b:cc:
         cc:43:29:8c:e2:51:6e:08:7c:0d:eb:31:43:17:e7:c5:27:1b:
         bf:db:a6:3c:1c:ce:56:fa:4a:71:e1:5c:dd:e1:d3:d6:d5:6c:
         ca:70:87:03:21:93:bb:ec:74:d0:7b:d2:6e:27:5f:f1:32:75:
         1e:af:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----