Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
File:                     I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json)
Hash identifier:          BMBI59c1PwtOeKX2W2uWwvRR1Uxc2F2B8SRIoP8+VTo=
Subject key identifier:   B1:7A:53:78:D3:FC:A3:30:E7:01:1A:CF:31:51:FC:3F:C5:C8:3A:BD
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Certificate issuer:       /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial:       01962ECFB801654CB13B310BA8F49222090A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
Manifest number:          1373
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: eIe3Ax0WlEanQvsUwVnFzcqhYUGRvIxvBJ6vfvJfECA=)
                          2: aLLfQWJh4e8MWIBxW7MrVPCtfI0.roa (hash: b2SmcSH4KOG2Jvamzo/dYIoESNg2kaU1WJmva5O/UBE=)
                          3: i2GfKnioIrK4DFco2liFl7JEt9U.roa (hash: Ib8ibm5kzCYxk8mp5/206nEi8+cY3/XjnCkQAxAJBU0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b8:01:65:4c:b1:3b:31:0b:a8:f4:92:22:09:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=b17a5378d3fca330e7011acf3151fc3fc5c83abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:23:9e:25:4c:bc:2e:56:b6:2f:94:fa:54:
                    45:73:34:87:b7:31:33:6a:88:1b:b1:26:fd:e0:6d:
                    b5:25:4d:f5:20:06:7e:06:55:0b:ec:b9:ce:7c:8d:
                    2a:c0:bc:16:c1:2f:38:32:5b:36:f6:3d:3a:62:e3:
                    3a:f6:1f:f7:e5:c5:02:fb:75:67:be:be:e6:43:19:
                    dd:45:ac:58:40:d8:a8:85:99:e1:12:b3:d7:15:ef:
                    41:09:8a:d7:d7:bd:87:b2:00:1c:00:8e:a2:50:f1:
                    b9:03:cc:ed:7b:7e:06:db:82:00:d9:85:f7:17:34:
                    6b:fc:0a:b3:7f:d2:57:50:0a:77:04:cb:42:c0:67:
                    01:ba:31:69:ab:af:14:8f:b0:74:7a:78:71:e7:08:
                    75:e2:42:3b:82:c7:dd:18:29:be:8a:68:ea:d7:fd:
                    7e:e8:8e:75:e4:c7:0e:c7:3b:d5:c1:42:21:ec:8a:
                    0b:ec:6b:fa:22:3b:5c:08:3f:1d:74:69:68:8f:3e:
                    fd:a5:ba:62:7a:c2:10:f5:1f:2d:39:98:d9:72:bf:
                    81:84:0d:5a:90:d9:65:26:f5:4b:42:14:2b:d4:9c:
                    a0:cd:f7:6d:32:aa:6e:d6:88:8d:12:be:49:21:34:
                    95:27:22:3a:47:db:13:86:be:58:22:5d:df:2f:5e:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7A:53:78:D3:FC:A3:30:E7:01:1A:CF:31:51:FC:3F:C5:C8:3A:BD
            X509v3 Authority Key Identifier:
                keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a6:d4:77:68:68:69:c4:ef:35:86:d0:75:de:e2:9d:ae:a2:
         50:39:8b:2b:3a:19:9b:1c:21:99:fc:88:07:c7:27:40:09:32:
         a1:a8:60:e3:0e:72:c4:d6:31:fb:ca:3c:1a:9a:e1:c1:5d:f2:
         58:30:e0:e9:06:b6:15:09:c4:96:b1:f1:9d:84:b0:01:2f:58:
         a1:f3:1c:9e:0b:96:16:82:1a:91:c1:c6:38:a8:6c:35:a7:8b:
         01:91:47:e5:ed:ff:b9:7a:3e:b7:d7:82:f7:8b:f1:3f:73:30:
         0a:63:37:48:21:f0:b0:5a:af:14:fa:80:2b:b7:ab:6f:af:94:
         c7:69:13:1e:ad:31:55:63:79:5d:7c:ff:c3:c7:e8:6e:96:4a:
         b2:80:4d:dc:42:74:24:bd:fa:1e:83:dd:df:d8:31:98:24:be:
         b5:f1:89:ff:33:ca:07:3b:35:ed:2d:9a:26:18:30:5f:1a:60:
         e9:95:e0:55:b5:1f:bf:b2:fb:c3:35:c8:40:15:ec:5f:bb:48:
         c3:ec:b2:c0:ae:07:48:8a:09:f0:40:6c:d1:7c:42:42:8b:f6:
         70:64:82:18:82:f7:18:51:13:7b:ed:52:37:6e:8c:52:83:03:
         02:df:90:f7:56:a6:a4:48:33:55:3b:3f:f8:38:19:62:59:c1:
         fe:66:d3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----