Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File:                     9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier:          D2I9pOl3V87U+TDgCBIGLkc9FvsrMHRweJzb/trlL6Q=
Subject key identifier:   BC:F8:72:BC:0D:5A:9E:F9:68:5D:37:5B:C5:A7:CA:A9:CE:FF:45:4F
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer:       /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial:       01962FAB6FADC60ADC9C01B8F6220432FE2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number:          0461
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: weOdnWFxNlR2kAzo/oAsxsc5pLUiAcFwNPSCzzGsjNQ=)
                          2: zYg006i-1WUWweE30u-SYPbT9Pw.roa (hash: Z8k/zZnitgyMfHbzB0hfDTUSf1BlauNSPllDbsEjoIM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6f:ad:c6:0a:dc:9c:01:b8:f6:22:04:32:fe:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=bcf872bc0d5a9ef9685d375bc5a7caa9ceff454f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:3a:37:f8:31:53:c1:7e:7d:32:f8:15:dd:
                    a5:e9:80:83:79:dc:b7:b9:43:36:48:a8:dc:94:b3:
                    2b:22:53:e5:ba:46:b6:43:6b:98:e2:b0:82:a9:c9:
                    1e:88:bb:46:a0:ab:cd:71:f3:d0:5c:98:3a:14:39:
                    c5:e7:45:e6:11:26:52:0e:fb:5a:57:c1:e1:71:9c:
                    11:32:91:67:96:b1:fb:83:5d:5d:45:69:8b:4e:08:
                    c6:40:c2:cf:a4:dc:38:77:d5:0b:e3:d8:6a:7b:e6:
                    fc:41:75:96:48:69:de:a3:92:df:b0:b8:52:5e:ba:
                    19:07:e0:67:49:b7:47:45:53:a6:d0:4a:bd:25:b1:
                    40:d3:46:0b:d0:cf:ab:f7:94:37:60:59:a4:ca:ae:
                    9c:7b:5c:3b:65:19:8d:00:4e:fc:e1:2d:bc:bd:17:
                    ea:8b:04:bb:24:e9:61:28:30:51:34:75:80:dd:80:
                    8e:9a:69:43:48:77:6a:35:a6:9c:73:c0:d7:bd:77:
                    76:8f:51:df:cb:cc:57:6c:55:ce:df:64:e2:a5:8e:
                    fe:0a:95:de:78:ee:28:24:6a:f7:c6:b7:00:b2:60:
                    1e:25:e7:60:ef:60:9b:df:ee:d5:63:35:1f:ce:ea:
                    bd:84:d7:92:f7:d7:05:29:e4:5f:b8:50:90:79:33:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F8:72:BC:0D:5A:9E:F9:68:5D:37:5B:C5:A7:CA:A9:CE:FF:45:4F
            X509v3 Authority Key Identifier:
                keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:e6:6b:91:28:07:5b:b9:a5:01:be:df:db:2e:2e:77:b8:
         3a:71:71:73:07:f4:a2:ca:24:8b:e6:ea:19:ff:95:83:4b:db:
         c2:65:95:80:f0:e2:01:f6:94:32:35:67:ca:c8:d6:11:b4:97:
         41:ac:03:5a:d9:cc:87:58:04:bc:65:dc:95:ec:af:9f:fa:8d:
         06:79:27:5b:4c:dc:fc:56:51:93:aa:2d:ba:84:38:b9:ea:00:
         87:bc:c1:b7:e8:f5:70:97:35:5c:3b:08:22:1c:16:9d:a9:f1:
         47:bd:f0:b3:a2:42:fb:f3:71:4f:22:0e:fe:ef:a6:56:3c:83:
         56:36:71:f1:6f:68:e6:6e:b4:70:0a:c2:77:91:9c:f6:74:a6:
         fd:c8:34:49:b2:d6:f4:e2:3f:54:de:91:86:30:43:a2:29:2b:
         6f:bc:58:82:b3:29:24:22:5f:89:17:eb:30:88:53:82:17:a9:
         69:af:ff:96:82:8f:f6:0f:1c:81:b5:40:f2:5e:33:71:b8:49:
         3d:83:1a:1f:51:b6:cd:10:fe:59:35:10:7a:2f:fa:1a:a0:2a:
         c5:a5:16:34:53:8f:cc:d9:e6:d9:fa:1e:cd:9f:0f:86:3f:63:
         d5:c7:cd:c9:96:ce:47:05:7d:40:ff:06:83:74:09:00:ca:4b:
         4e:d5:6a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----