Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File:                     9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier:          Zs4wcYHBeAYw4jgPLCGLt5gNzd1HmGgv9MNr4Ejq/v4=
Subject key identifier:   33:87:A0:E2:7B:DA:AC:81:CA:6F:66:09:73:2F:3C:97:F2:55:70:AF
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer:       /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial:       01962E99405F5DC2DCA7B7430AB16E712250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number:          1387
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: 2I_gyEpNZ4JuV81yJRUXBVu-KOA.roa (hash: r49ywNskr+Vb41Ou7x0XARQgE2G5ZH5biPRfE9u4cAc=)
                          2: 2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa (hash: 9Uhvy9O+l0zHDpQPVkCj98q8JIdj7ZhjiR3rxLVvfII=)
                          3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: E00HfvWuAMS+Vlii/9KvgBQ4Uv2V6KYqWxtq7Vr8hDU=)
                          4: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (hash: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=)
                          5: QvUi-uUyEPClIhL14Tjl4e8kcJ8.roa (hash: JHsP9SRn0z74odoNftVjEsPtUj5FZk/4tMrWE3fymP0=)
                          6: RW6wxE8PmfS_l7583dlKYTuULiM.roa (hash: NA5N2aFRPb0HCLNpvXiULoI8i28V3/zHm+oTFj2hW9U=)
                          7: XViXWtM4Qca08fEngqnKAjV8_6k.roa (hash: FX1LXPYDV9yZbUiSRuPd/ffSUdla1CU7pMstvEpaovA=)
                          8: YcddWRNkcNBtg2GRMDNHHw9mFJ4.roa (hash: G/xopPnzXkAvpcbYnZmulnHRu0yyJM+YK09jXPq59tw=)
                          9: t292OmKp-GnX0MyFpL72FnDc9MA.roa (hash: uIDL5vQGM8ia+mjLC9CmEE4toRqUWbIawZ8YzQbIFpY=)
                          10: vyCGGnsFvqliTEx12jYp6lwRAek.roa (hash: l5raYrCV5cZJwg0Ik6+6Zpw1vWa9xl0dKA9pFd0Ksa8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:40:5f:5d:c2:dc:a7:b7:43:0a:b1:6e:71:22:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=3387a0e27bdaac81ca6f6609732f3c97f25570af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:a1:ad:7c:b0:c1:49:4f:9e:8b:9f:c6:6e:
                    ba:e2:c7:10:73:82:e2:ea:8b:97:ae:69:cc:4e:96:
                    79:87:ca:b2:89:1f:0f:57:97:f1:aa:8f:a6:30:12:
                    5f:94:c8:f2:12:ce:b6:54:13:41:c6:65:51:33:39:
                    79:fb:d4:05:84:c4:a4:cb:20:fc:70:8e:3b:99:ee:
                    47:6c:37:3c:f4:a7:68:c1:dc:b0:7d:0b:4c:98:2f:
                    19:19:b5:11:f1:7d:55:ed:14:2c:7d:11:9c:37:fd:
                    c1:58:84:df:b3:88:db:1c:8d:66:aa:68:d3:ab:ae:
                    03:2a:2a:bb:04:ee:13:5f:09:d8:2f:0e:fd:95:a7:
                    22:77:a0:d4:49:40:f2:20:f0:46:ed:9d:ac:98:13:
                    7e:4a:2a:25:3f:22:f6:f9:58:ac:b0:41:42:9d:b9:
                    e2:0e:94:78:0b:b6:a3:58:a7:62:de:73:55:d8:2c:
                    65:94:73:85:e9:8b:46:4a:1b:9a:cf:59:d2:a5:7d:
                    d5:02:0c:12:22:20:14:66:f7:ed:8d:eb:b6:df:10:
                    b9:45:0e:7b:02:d1:a3:7b:5c:e3:6c:a9:79:14:87:
                    0e:e8:d4:74:3e:25:bd:bb:16:c2:51:b8:de:41:18:
                    c9:58:4b:11:f5:25:19:28:7e:f6:b0:62:d8:7a:4d:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:87:A0:E2:7B:DA:AC:81:CA:6F:66:09:73:2F:3C:97:F2:55:70:AF
            X509v3 Authority Key Identifier:
                keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a4:3b:ad:db:3b:07:0b:81:85:53:95:f2:49:11:6d:13:92:
         9a:11:c1:1f:24:ee:22:20:1f:86:27:39:aa:91:47:f8:8f:3b:
         78:05:74:a8:ab:ef:9d:42:68:cf:99:c3:6b:b8:84:f7:8a:0c:
         a9:72:22:49:c1:1d:62:8c:24:3d:6b:33:0f:7e:27:06:25:9e:
         45:41:81:07:da:13:b9:88:06:83:c9:96:1c:61:5e:20:b2:96:
         f2:28:81:ff:ff:85:c9:56:a3:3f:ee:e5:f6:28:41:d9:f8:5c:
         e1:5c:10:76:cc:0d:76:53:55:9e:2c:9c:ff:03:12:ec:b6:e2:
         26:42:f5:a3:cc:59:2d:ee:e3:09:2b:46:3a:10:0d:8a:28:d1:
         b0:92:8e:75:ce:6c:4a:47:91:fa:d4:b6:1f:6e:dc:b4:30:59:
         29:c9:63:85:0f:ea:f0:5b:16:f7:d3:97:2a:9a:f0:c1:96:4a:
         9f:d0:a0:a1:5d:df:94:39:34:6f:66:66:64:27:0e:bd:82:9b:
         6e:85:91:4b:93:81:47:43:71:69:10:59:3d:34:16:57:79:af:
         42:ca:c8:23:6b:be:13:11:b5:a7:0b:5e:d0:9e:8c:ac:77:64:
         d7:71:d5:cc:41:7a:a0:13:8a:64:34:cd:d6:87:cb:29:7f:f5:
         b0:9e:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----