Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File:                     1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier:          t3yoxeLAWvgEV7Xp9OvSW5Mp9giEv7bh7PMGUnPA6EQ=
Subject key identifier:   04:67:FD:24:7A:A1:35:26:EB:5C:C5:60:07:3E:CC:99:CA:09:B1:96
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer:       /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial:       01962F070B88D4B8652A8A56ABB88A0AF89F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number:          121F
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: v9oDSQI192apSfv7mIC1tUA9oky2Yyc/kX6yk7p9pHw=)
                          2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0b:88:d4:b8:65:2a:8a:56:ab:b8:8a:0a:f8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=0467fd247aa13526eb5cc560073ecc99ca09b196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:f0:9f:48:fc:e3:0a:af:9e:5d:93:dd:5a:
                    79:47:37:db:30:b2:ff:8e:1d:61:e3:a3:9f:9c:c4:
                    4d:4b:7d:9e:c0:f0:14:c0:e8:b6:20:b9:0a:1c:c6:
                    b9:9f:03:04:1d:f8:a8:a2:23:59:09:9e:e1:75:1b:
                    24:85:77:a9:51:24:65:02:55:6e:ff:bb:e9:47:dc:
                    c9:3b:71:79:d1:66:00:4c:eb:fa:be:2b:40:24:12:
                    4d:3d:1f:d5:dc:06:43:24:32:a5:dd:3c:04:04:69:
                    dd:3c:25:6b:90:0e:9c:4a:cb:b5:fa:9d:11:a4:17:
                    aa:7a:15:17:ee:58:74:07:ce:c1:2d:a5:06:46:90:
                    f7:99:e5:36:a6:fc:54:39:9d:56:fd:9b:e0:01:d2:
                    d4:78:48:ca:1b:84:8a:8e:d1:5d:dc:7c:38:93:24:
                    19:7c:64:2c:c8:50:da:3a:f0:e8:a4:8b:2f:7f:9e:
                    a4:97:8d:8c:21:f9:2b:8e:37:ac:a7:17:d0:ad:53:
                    0a:70:1e:50:5d:38:e6:8c:1d:0c:94:b0:76:06:bd:
                    29:3f:a8:71:d7:f5:8d:1b:0f:8a:b3:88:c0:94:36:
                    3a:f7:82:cd:75:69:c7:13:50:15:6b:bf:7d:5a:38:
                    dc:13:11:40:2a:df:1f:cd:5f:53:bf:3b:47:4c:98:
                    f1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:67:FD:24:7A:A1:35:26:EB:5C:C5:60:07:3E:CC:99:CA:09:B1:96
            X509v3 Authority Key Identifier:
                keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:57:32:4b:e4:30:99:3f:40:70:66:27:b9:af:19:03:7b:29:
         94:e0:a2:69:3c:39:d9:dc:67:32:ce:5c:56:df:8a:cd:b9:a1:
         77:42:13:dc:aa:3b:b9:b2:6e:c5:a6:28:e2:e1:13:41:9d:43:
         67:d1:62:91:79:9c:9a:9a:68:8c:9c:cc:50:d6:77:db:ba:15:
         b2:6a:23:6f:81:ed:af:eb:6e:2c:44:c7:a6:60:46:99:85:c1:
         32:18:7a:cc:75:c5:d5:f3:15:f1:69:e4:22:c1:83:ef:2c:b1:
         98:68:91:6f:17:dc:85:18:04:16:2c:fb:bb:2f:ed:d7:fe:02:
         94:fc:da:57:7a:be:5e:e9:4d:c4:04:59:b2:d9:16:f9:81:8c:
         15:ec:6c:dc:17:7e:93:56:0a:70:c9:09:d3:ca:58:41:66:c0:
         bf:13:20:4b:a2:a0:99:87:1c:89:80:ee:1f:6c:34:de:66:76:
         e9:33:bf:5e:ab:6d:11:7b:af:f8:08:81:4c:3d:91:f3:65:8e:
         c5:ca:8b:0e:5a:7e:e6:18:aa:1c:a2:d1:3c:c9:03:df:a3:44:
         ad:76:b3:ea:11:b5:e7:e2:e6:12:94:4e:b5:7c:34:17:1f:44:
         67:fa:d6:37:73:46:5a:6d:e4:e9:8d:53:0f:d8:27:43:35:9f:
         19:07:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----