Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File:                     9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier:          Ksrzy/lvLi5gmcfRgsZZ3wu4Jl/VJwPCVeUr6V7ca2w=
Subject key identifier:   A5:60:75:3F:3D:98:C0:FA:C9:4E:08:BD:19:68:2F:E1:94:78:F6:5D
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer:       /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial:       01962F74782C2A47B148F70FA82679BCB471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: dOvKrM1TD5NUXrvnj2yjIGNzlpYaDkmgndwBiWgAGf0=)
                          2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:78:2c:2a:47:b1:48:f7:0f:a8:26:79:bc:b4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=a560753f3d98c0fac94e08bd19682fe19478f65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:5d:f1:80:ba:d6:bb:9b:98:66:d4:49:01:
                    d8:02:77:31:20:24:43:a0:6e:b6:ef:11:94:e9:ee:
                    a3:de:40:66:28:3d:7c:45:7b:70:37:0b:fc:e2:c7:
                    4c:d7:42:24:cf:8e:bc:3f:d8:7c:23:d9:f0:2b:68:
                    c2:8c:ca:d4:45:4f:f2:bc:14:dc:c4:5c:c5:fe:1d:
                    2a:05:98:9f:47:44:18:39:70:db:84:2a:5a:a8:0b:
                    ec:30:2d:22:29:22:cb:06:88:67:8e:c2:58:c1:0f:
                    c8:f1:a3:8d:1c:c5:cb:8d:53:67:c0:23:65:65:6c:
                    92:b2:bb:aa:d3:ef:7b:fa:1c:77:3d:3c:51:d2:1f:
                    0a:9f:27:a8:b3:ea:d7:af:e5:74:a6:25:98:f4:49:
                    47:ec:52:21:b7:9f:cc:35:32:5b:9d:ff:34:46:91:
                    ec:2d:2a:44:dd:40:49:33:48:16:b3:bb:be:6e:01:
                    06:93:66:40:ae:82:95:e3:8a:b5:86:73:b4:a5:af:
                    83:aa:e0:26:7b:8b:e5:75:4d:da:58:ce:f3:8c:98:
                    23:f7:98:10:21:85:ce:50:2d:89:b1:58:b6:8a:9d:
                    fd:db:bf:b4:ce:47:7e:97:72:e9:a9:be:0a:94:a5:
                    55:7a:9d:45:94:13:00:87:19:b4:a9:5d:6e:83:e7:
                    9f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:60:75:3F:3D:98:C0:FA:C9:4E:08:BD:19:68:2F:E1:94:78:F6:5D
            X509v3 Authority Key Identifier:
                keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:91:35:d2:bc:f1:71:81:19:85:0e:27:32:3b:55:06:6a:e6:
         23:d5:81:12:a4:76:51:11:f1:bc:a4:6b:47:f1:86:bf:26:e5:
         75:ba:29:c6:56:82:62:ee:7b:c5:ec:f1:b7:ac:37:fc:93:ef:
         83:44:91:01:5e:d9:d4:bb:c4:04:a3:ee:6e:64:bf:25:55:fd:
         83:1f:23:33:93:de:19:e1:57:4f:c4:06:04:d9:5c:15:77:0a:
         f5:2f:5f:09:40:c6:c5:fa:7e:e3:ee:20:ac:2a:1c:b3:3f:84:
         96:dc:4b:eb:6d:01:0a:80:31:6a:54:98:50:fa:de:78:74:7b:
         46:28:59:95:54:bd:f5:23:c0:76:b9:56:df:98:96:b8:c9:4e:
         36:9e:c5:ad:55:d0:de:08:2f:9b:17:d3:90:f4:13:7c:e7:75:
         18:58:c1:e2:27:ae:f5:2a:d3:fe:39:73:19:df:b0:51:4e:99:
         bf:95:64:52:90:be:0a:29:94:ad:b9:f1:d7:1e:64:fc:cc:7a:
         28:ed:6b:6d:d8:fb:ea:6e:7e:97:df:6c:8f:66:1e:5d:4b:9e:
         1e:a6:fb:15:66:7c:85:71:5b:89:3e:1f:d7:40:7f:7f:b2:12:
         f1:c3:1b:e8:a5:0d:16:0c:53:82:a5:60:8f:b7:b5:e0:22:15:
         9b:89:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----