Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File:                     1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier:          4WChQbMosDZrPrftPjoJBp5QTrbyAio2U61Yyl7ExNo=
Subject key identifier:   85:97:B4:C8:47:DA:45:98:C8:24:4D:FD:49:72:4A:63:45:C2:C2:65
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer:       /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial:       01962FAB7148786F5C5C527A771D1101E43A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number:          13BD
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: ib724V2aUb6ZXzFULQpjN/hcgQYZGmDuAsOE7nTZuFY=)
                          2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=)
                          3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:71:48:78:6f:5c:5c:52:7a:77:1d:11:01:e4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=8597b4c847da4598c8244dfd49724a6345c2c265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:a9:c0:c9:fe:55:e9:4d:5e:43:39:18:58:
                    55:8e:5c:c9:cc:a3:c5:66:bf:db:97:a3:82:55:cf:
                    e6:c4:cf:f8:4b:e3:77:d8:20:5c:64:20:68:8d:8b:
                    91:a7:cd:c7:58:62:3e:90:5f:be:cc:42:9c:0e:c4:
                    7d:8b:de:25:ed:3b:72:0c:af:44:d2:15:c9:ae:b1:
                    25:7f:c3:7a:61:ac:eb:a4:ec:88:2a:83:f8:c1:5f:
                    6e:ea:47:9e:81:18:7e:9d:2d:fc:43:4e:63:a1:eb:
                    5e:89:90:b6:78:b1:b2:dd:f0:33:f0:3a:8c:16:3b:
                    96:04:ca:63:d3:83:f0:f9:a0:37:0e:4b:88:b9:1f:
                    97:ed:ce:0c:fe:03:7b:f9:8c:92:6d:02:f7:1d:c6:
                    4b:cf:1c:4c:85:51:0a:3d:89:92:e8:78:2c:24:ca:
                    52:d4:70:91:52:6c:67:21:70:c1:92:94:f7:28:1e:
                    d2:63:21:ef:c1:2e:d3:73:72:6d:ea:84:d7:50:7c:
                    85:b8:17:e8:87:99:a1:03:11:f1:8d:df:bb:6c:34:
                    ba:e1:19:ee:59:9d:3c:ae:2c:ed:5c:d2:78:5d:39:
                    4d:5b:0e:45:32:5b:1b:c6:54:80:c7:0f:b9:f1:f8:
                    33:87:be:35:4e:bf:fe:3f:63:cd:48:dd:6e:84:b2:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:97:B4:C8:47:DA:45:98:C8:24:4D:FD:49:72:4A:63:45:C2:C2:65
            X509v3 Authority Key Identifier:
                keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:92:9d:2c:e8:d2:43:7f:fa:02:6b:9f:c6:78:d1:93:b5:71:
         a9:ff:c0:86:bf:51:61:42:72:dc:1b:2a:3d:df:ef:bb:a1:50:
         2d:a1:16:1e:0b:da:5d:d0:f1:91:52:f8:d3:8a:fe:d2:17:c6:
         6d:f9:88:a1:4b:79:ee:f1:ef:35:04:32:c9:01:af:41:fa:54:
         5c:2a:62:43:e2:59:61:e9:9d:3f:0d:54:ef:c6:7f:4c:ab:2e:
         a5:71:97:53:84:77:c6:23:f7:06:7e:fe:1f:79:80:73:e9:66:
         8c:39:79:7f:62:ca:97:64:01:60:24:d9:1c:53:78:3b:07:ca:
         3a:44:ea:f7:07:0b:51:55:be:1a:69:01:f0:da:28:ea:05:a4:
         ff:5e:63:c5:3f:81:6d:76:90:d3:cd:f9:67:8e:d3:c0:49:67:
         a1:3a:e6:fa:fc:8b:8d:9c:a8:99:99:f4:96:fd:3e:33:2c:17:
         58:55:9b:e0:33:6b:33:74:87:bc:c5:b8:21:26:82:82:8c:1c:
         f0:a8:cb:f2:78:32:42:88:24:4e:d4:3c:6f:30:39:0f:1e:28:
         c6:f5:96:4c:ec:b3:00:27:0d:51:fa:c5:e7:a4:b0:2d:85:d1:
         9b:e7:85:74:8f:08:59:ee:89:e2:cb:11:b0:39:c2:4c:b4:a3:
         0f:65:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----