Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File:                     9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier:          5Z2XiKp6g9C0y/usvlFhhXWmoBEH7NVIhRXjTj2v09E=
Subject key identifier:   7B:41:23:B6:38:33:EF:63:00:CC:EA:85:06:DC:BE:43:4C:61:DC:32
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer:       /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial:       01962FABA243F5C25D8E685961C34F07A9BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: ypvYOUJ/7jGGkg9qLk9/lx4qZXeDsOD4Yi/8Tyoxvg8=)
                          2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a2:43:f5:c2:5d:8e:68:59:61:c3:4f:07:a9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=7b4123b63833ef6300ccea8506dcbe434c61dc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:25:22:41:e8:7d:36:d6:eb:70:9f:6b:20:
                    8e:d0:b2:93:82:2b:a8:83:dd:2d:2c:83:01:11:ec:
                    83:94:5e:57:4a:51:77:c4:06:d6:ca:ab:ba:e9:88:
                    50:c3:e3:62:29:01:9c:97:92:90:ae:2c:1f:40:85:
                    f5:86:8d:84:f8:38:95:30:33:6e:8f:10:7c:2e:1e:
                    dc:6d:eb:fd:29:b0:e2:af:69:37:90:8a:be:ca:1f:
                    13:7c:c5:58:b3:dc:6f:6c:b3:d5:66:dd:11:e7:97:
                    81:ee:06:a6:b9:ad:40:1d:37:85:bc:86:3e:a7:5c:
                    5c:47:37:7d:78:26:00:46:52:82:ce:c9:23:14:a4:
                    a2:d3:14:2b:a1:a8:b8:b7:77:5d:ef:ff:7e:92:47:
                    e2:99:76:0f:46:5b:4a:36:f3:be:c6:64:05:de:8b:
                    cd:9c:4b:ec:84:35:53:61:53:1d:4f:32:02:ba:1f:
                    b8:7e:a8:4a:fb:fd:79:54:37:1f:46:90:2d:e4:09:
                    d0:33:c7:51:6f:8d:26:96:c2:a0:d7:26:39:09:a4:
                    6c:86:35:0e:35:b6:9c:b7:98:3a:6d:51:77:70:f0:
                    77:12:6f:1a:b2:08:e2:27:1b:00:73:f5:95:ee:c3:
                    76:30:10:54:ea:28:1b:37:49:f4:91:f0:10:e0:0c:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:41:23:B6:38:33:EF:63:00:CC:EA:85:06:DC:BE:43:4C:61:DC:32
            X509v3 Authority Key Identifier:
                keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:fa:cd:9d:c3:90:76:51:b0:2a:17:54:b1:3c:d3:69:fe:
         0f:63:55:84:4c:88:86:ff:bb:a5:4a:92:ca:20:60:56:17:01:
         a0:87:07:f7:e6:f6:0d:93:a2:48:7e:a9:81:94:e2:59:6a:e3:
         18:41:1f:e1:e7:47:d4:3c:81:32:51:c5:90:fd:f5:a4:d9:f4:
         98:63:c2:79:80:8d:1e:e7:9a:45:3f:92:c5:7f:89:90:48:f6:
         d7:c9:62:e1:67:88:59:c9:9b:7c:4b:c4:ce:32:2e:52:94:f3:
         60:0b:94:68:c2:f1:72:41:97:90:05:82:a2:1a:21:f5:6f:d9:
         31:3c:a9:6a:9c:00:77:fb:0c:46:d7:15:dc:fd:b8:02:06:61:
         2e:78:dd:ad:73:00:dd:fd:60:3f:95:bf:f5:29:ba:f5:a4:c2:
         57:48:6d:c1:1a:57:cd:f7:68:7c:cc:a4:74:bb:ac:9a:17:b7:
         3d:b1:b2:3f:6c:b7:1f:1e:88:c4:27:a9:ff:f1:ac:b5:a2:09:
         e5:f9:e6:56:42:01:59:a7:a5:1a:05:7d:ca:64:64:66:6b:50:
         e1:63:cb:99:83:64:97:a6:6d:a2:f9:68:e9:9f:d3:45:03:70:
         32:5a:87:7c:0e:ae:cf:34:bd:18:c8:5a:98:55:8e:bb:4b:56:
         05:42:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----