Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
File:                     k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json)
Hash identifier:          ggcofikuHPkUwIoYxwu1Vr1Q1+IxMLCpZ5RsmLDteFM=
Subject key identifier:   00:5B:DA:20:99:9A:2F:53:BB:5E:ED:E3:6C:92:48:26:EC:CC:76:FF
Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
Certificate issuer:       /CN=93dc4bf1f8912beb7cdee409302988c611388e91
Certificate serial:       01962DF44A173CE45EBE33DA6189C71E0A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: aEy_zqNzomjBOnysb7pwIws5H9M.roa (hash: 5K5cuFuAW+cdRm7n0/ZKC9QHmYwbcOfw6xnQYUg53PE=)
                          2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: Aa7rHkTlQsYYs/DOloNeeOCQ9ReVU/1VKrtPlBGXtKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4a:17:3c:e4:5e:be:33:da:61:89:c7:1e:0a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=005bda20999a2f53bb5eede36c924826eccc76ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:35:2a:bb:d0:eb:27:31:eb:20:da:49:7b:07:
                    43:ed:06:f9:86:02:81:aa:80:08:e2:06:81:3b:39:
                    3f:a2:71:71:3e:ee:5b:30:c2:3f:9b:f6:21:2a:b4:
                    92:13:e9:bb:8e:fd:fe:b2:8e:25:b0:47:ed:1e:f8:
                    ab:0d:15:57:b5:07:af:7a:73:4d:e3:2e:6b:2d:05:
                    f9:0f:a8:d7:c8:bf:1a:0f:c7:37:e6:e9:57:f3:d4:
                    ad:23:41:e8:40:a5:fe:f0:48:4c:59:04:32:fb:01:
                    c9:b1:9c:85:e1:73:18:c5:92:8d:ae:23:2b:95:a2:
                    3c:5c:fc:33:30:e5:68:a0:3d:c4:e4:2e:ea:bf:6b:
                    06:f3:ff:c4:61:e2:83:0f:ca:80:a4:51:41:46:2c:
                    6c:cd:f9:d1:da:f7:83:40:29:a0:e9:72:3c:8a:e6:
                    7d:29:36:df:8d:53:04:79:6b:22:b1:9e:9b:7d:32:
                    bd:1b:37:39:94:69:64:1c:33:da:fe:12:b0:ad:37:
                    c5:85:7f:b5:f1:de:44:10:d7:f3:83:c3:0e:a9:d3:
                    f6:fc:c2:3c:1a:4a:4a:e8:90:a3:85:a8:44:3a:82:
                    eb:20:ba:82:91:85:7e:c7:22:96:5e:80:47:66:0d:
                    d0:fd:9c:cc:e4:dc:5b:c5:99:ab:1b:a6:e5:da:a5:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5B:DA:20:99:9A:2F:53:BB:5E:ED:E3:6C:92:48:26:EC:CC:76:FF
            X509v3 Authority Key Identifier:
                keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:ee:e4:0e:5e:6b:89:df:2e:21:f5:ea:35:18:11:26:a7:
         78:40:2d:cc:77:16:53:3e:5e:f7:7d:d9:65:9b:46:89:aa:eb:
         bd:37:bb:c3:c4:30:ef:73:1e:79:fd:62:86:20:35:45:45:2c:
         05:7e:8d:77:3c:18:c6:25:7f:a0:2f:0a:d4:4c:64:17:ce:87:
         9b:15:c4:c6:48:30:8e:94:20:5a:db:71:56:20:51:64:96:04:
         03:7f:16:3e:29:dd:c5:c1:12:2d:14:ee:91:9b:eb:ab:3d:f3:
         0d:43:66:9d:43:d2:95:66:16:dd:55:73:36:26:7d:13:db:c8:
         a8:fe:dc:99:90:ec:5c:58:39:b0:58:96:9f:34:0c:6f:48:b3:
         cb:b2:88:ff:a5:f7:0d:c5:96:1d:37:94:8f:d4:86:d7:6d:e0:
         17:da:b7:98:4a:48:49:6d:ad:c1:8b:66:20:10:3b:c6:17:5e:
         a2:0a:8e:a9:8d:82:29:d8:cb:32:a1:29:02:47:e0:cf:58:06:
         e0:da:54:45:f0:2d:0a:42:1f:ca:8a:09:1e:92:98:45:fe:09:
         35:c8:03:cb:e8:89:0c:03:12:65:cb:ac:3b:7d:48:07:0b:76:
         24:d0:87:9d:45:a3:d0:71:7e:9a:ba:dd:81:c9:19:91:cd:e9:
         4e:7d:f2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----