Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File:                     P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier:          eyEbkjUkaH+vhpuutwkuwtsgjW2rpd2c0SeLlg2m/PE=
Subject key identifier:   61:0B:30:64:4A:52:EE:DA:82:3B:08:99:2F:00:12:82:8E:9E:8E:DA
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer:       /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial:       01962FAB5F2FB2819D3D83BB8F68796C704E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number:          1100
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: 1-SAfEHIPvpIzjeCy5Q8AoZxny3k.roa (hash: B/T0TK6WDLMTtz5a/Y6n6GO2yVmrFuy+pcNqZ8mftfA=)
                          2: KaQg1luFqQeXclQWU31ivATaEMk.roa (hash: bbZb4Op2H462Hn18DoohrEF0+UuFJwTPdqnyeROhfe8=)
                          3: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: Aeiy319IP/CFEmgL2e2NuZVVTC5HYFy4qilqy3ztusQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5f:2f:b2:81:9d:3d:83:bb:8f:68:79:6c:70:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=610b30644a52eeda823b08992f0012828e9e8eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:6d:d1:2e:63:e6:b0:e6:39:13:6a:43:09:
                    32:3c:14:86:dd:de:c1:8e:c0:fe:44:58:ea:3d:89:
                    74:58:0a:61:47:91:8b:98:e3:72:3f:b4:97:a8:dc:
                    95:04:e5:b5:6f:e0:0c:dc:a2:57:81:d6:0f:a4:c8:
                    e5:72:35:d4:c8:b9:f5:a7:09:e8:ba:d4:a3:9d:42:
                    4d:f1:59:d7:6b:05:e6:6f:59:91:a6:eb:e9:e1:88:
                    d4:14:69:25:e8:51:73:7d:83:2b:d7:de:e1:da:30:
                    61:f8:f5:23:5c:3d:9b:36:44:77:21:cd:8c:cd:05:
                    de:8b:69:13:32:bd:46:fe:37:59:63:db:7d:66:ab:
                    a3:a4:01:43:3f:27:53:bd:65:5d:8c:5a:ef:e4:5d:
                    60:f4:a6:6d:ff:94:2c:21:a1:e8:ad:43:c3:a9:6e:
                    32:75:2c:c5:3a:9c:3f:c4:50:e3:0b:6f:79:5c:61:
                    37:2f:57:1b:0f:95:cb:bc:75:ea:25:49:ea:a1:80:
                    08:73:63:c7:f2:bd:48:fc:11:d2:d6:ee:51:95:e5:
                    48:2f:f0:7a:45:50:f1:b2:fd:2a:9b:48:20:b1:c9:
                    cd:82:ac:90:5d:af:b5:44:2c:1a:38:1e:de:bf:e7:
                    91:a6:8d:13:b2:13:4a:09:73:1f:7c:9c:8a:c7:19:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0B:30:64:4A:52:EE:DA:82:3B:08:99:2F:00:12:82:8E:9E:8E:DA
            X509v3 Authority Key Identifier:
                keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:15:0e:0e:08:52:68:8d:aa:f8:2b:18:88:b6:9a:dc:3b:
         94:3d:cb:cf:0a:eb:55:28:01:b6:4b:5c:54:48:ee:21:1a:4c:
         45:f2:db:45:72:03:08:4e:56:21:de:4b:68:65:22:79:e0:32:
         15:c4:d4:2f:ba:94:0f:40:85:95:ba:72:93:e4:18:95:2d:de:
         76:13:25:a2:b2:c6:6e:f5:40:95:22:4e:eb:dd:ed:17:71:77:
         64:57:53:78:8e:c8:e3:cb:f1:06:bf:3e:ee:e1:ab:57:00:20:
         aa:45:e9:25:b7:70:32:80:fd:42:90:90:26:68:3a:c5:93:5c:
         a9:0c:77:ee:00:f1:9b:b9:b9:58:63:92:ba:0f:55:67:7c:04:
         90:85:6f:ba:27:e5:19:48:40:b7:8b:33:e7:ae:f5:97:d9:de:
         ec:28:9c:1f:ca:61:b8:e8:8a:b5:a9:56:ad:e7:df:aa:bf:7e:
         3a:42:89:56:93:ba:d7:f6:4a:b5:ab:30:c4:ce:5c:a0:5f:f7:
         35:cc:26:7c:f5:5f:ce:f2:91:58:48:74:90:ef:b7:1d:c4:48:
         09:e3:15:07:ec:f0:bd:aa:a9:cf:5a:cd:2c:84:6f:8d:68:6d:
         0d:d4:7e:98:37:84:5d:3e:77:34:fe:27:0c:4c:c0:fa:fd:11:
         98:a1:c4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----