Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
File:                     9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json)
Hash identifier:          IxfYxlyoJlitijVZQbrX3+En0ZpOf0JnWO6daJNaXBc=
Subject key identifier:   16:ED:89:D8:43:0D:43:D8:05:E4:F0:7D:64:8B:33:90:53:36:EA:F0
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Certificate issuer:       /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial:       01962F3D807588D8FAB0D35630FA25672551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: /I9/Kv9gb4Oy3uqfE0uzroxR25ZfSIyAa8+xM8Sa8hE=)
                          2: ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa (hash: jFdtASpUm3buRvq9o0f0zIeX/wlw5jgk9wy5omlh1/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:80:75:88:d8:fa:b0:d3:56:30:fa:25:67:25:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=16ed89d8430d43d805e4f07d648b33905336eaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:71:f5:41:26:94:d1:fb:53:e2:62:1b:93:
                    94:2c:2a:cf:d6:53:87:6f:72:71:4e:b0:c0:00:d7:
                    2c:1b:58:70:1e:bd:9c:0d:66:1b:26:7d:40:76:8f:
                    f7:07:a5:17:c0:ae:66:d3:9f:f2:5d:6f:36:99:11:
                    e3:5c:6d:26:ab:ef:04:22:7c:36:d4:43:af:f3:48:
                    24:2a:ec:e6:ed:8e:18:f2:a7:7c:6c:fa:c0:55:f0:
                    0a:e3:5b:5f:76:1c:b4:d4:f8:b5:55:2d:dd:9e:18:
                    1f:6f:e0:71:58:6b:3b:83:17:4e:23:82:c3:d5:7a:
                    b0:d1:b4:cd:c8:3d:ee:43:dc:6a:b3:c9:b9:57:49:
                    75:6f:a1:fc:8a:34:00:9e:73:80:45:02:2d:9a:2e:
                    84:f7:36:7d:ec:68:c7:3f:74:61:fc:87:27:60:41:
                    2b:83:f8:16:2a:f6:f4:4c:8e:44:eb:2f:4e:6c:56:
                    8d:34:8f:6c:a6:21:7d:08:f6:67:fb:c3:85:8a:20:
                    a6:c2:44:63:1f:4d:a1:b4:8a:02:9e:89:b6:bd:ee:
                    dc:ac:9d:f1:d5:1a:8f:57:b9:bb:8b:5e:8c:eb:c4:
                    81:ef:4c:f0:0b:05:63:ee:8b:1d:2f:f8:82:11:54:
                    ff:b5:c2:25:e2:af:22:96:77:2d:a7:1e:3f:98:13:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:ED:89:D8:43:0D:43:D8:05:E4:F0:7D:64:8B:33:90:53:36:EA:F0
            X509v3 Authority Key Identifier:
                keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:56:1a:ba:b6:00:12:99:70:1a:3c:75:56:5a:15:cf:bd:29:
         d3:18:c5:29:3e:78:c5:67:9e:d5:44:a5:c7:3b:59:8e:d8:33:
         c7:55:46:8b:3f:23:3d:81:3d:61:53:15:64:3d:48:ce:f5:b6:
         8b:a0:fd:dc:04:3b:87:e2:4b:55:57:7f:56:1d:5b:19:66:2b:
         33:85:bb:4d:c4:5e:c1:e6:11:78:cf:e3:56:8d:72:bb:81:c0:
         e4:de:b4:84:2f:83:bb:00:2a:ee:7b:39:16:ab:35:62:84:51:
         80:1e:54:00:77:ac:5d:93:af:99:fd:74:34:cb:d6:b3:f0:3b:
         8c:8a:83:fc:f8:13:32:5b:1d:29:92:f3:b8:7e:d7:ff:56:12:
         7c:68:89:13:26:34:87:bb:ea:b7:9c:4c:b9:59:0d:8e:b9:66:
         86:82:46:e0:9e:1a:b0:8e:61:4a:ce:1e:4c:e7:6e:fa:99:cc:
         8c:ed:ed:3e:81:74:b1:f0:4e:a7:2c:62:e0:e7:c7:07:30:66:
         d6:4a:9e:4f:b3:83:cd:45:20:e2:f4:30:eb:76:10:13:af:e9:
         81:d9:83:bd:44:2f:f7:0a:29:fc:8d:08:26:cd:7c:15:e9:59:
         bd:d9:66:56:d3:7a:c0:24:78:73:4e:4d:99:74:1d:a3:42:07:
         6b:20:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----