Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File:                     mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier:          Dq51FdlFYM/MXorns+4Lfw5aJkjjSh3wDJBRzz5XRzQ=
Subject key identifier:   C0:09:78:7C:F1:41:D1:48:9E:5D:0D:90:64:3E:BF:96:0D:A0:92:09
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer:       /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial:       01962F74B2C80CD092359D541ECB1B8F8CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: UxU055m6SYgLYJdY0EIHyH-buK4.roa (hash: L8Prey4FtmmkUZS9Fb3qw934vxOuIVmwZLaUrRs5uYI=)
                          2: g-ueJOZ8CrwpGCeGD3tl16S98d0.roa (hash: bDoSFJsdsspb9o+5HCKGnMJFTdCyV6X4FzTImtyv2cE=)
                          3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: nchFGD5ip3RQ0vAfKoeNqwb0xjedD76gtmTts73m2vQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b2:c8:0c:d0:92:35:9d:54:1e:cb:1b:8f:8c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=c009787cf141d1489e5d0d90643ebf960da09209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d2:6c:26:b1:f4:71:95:cf:c1:33:f2:69:7e:
                    4b:c4:16:cd:ba:7c:fd:e1:5c:65:8d:17:24:0a:d7:
                    ef:e3:a9:5d:8e:03:36:31:92:19:f9:b4:b2:53:46:
                    50:9a:79:77:a1:82:1e:ab:7c:77:15:7e:e9:25:92:
                    14:25:71:98:20:b3:c6:05:44:32:4a:67:68:02:cb:
                    00:22:14:b1:d1:7b:66:80:87:f5:21:d2:72:88:b0:
                    f5:2d:2f:c1:fa:4b:50:b2:c8:30:8a:00:c9:33:9f:
                    c2:c3:7f:23:7c:e2:76:fb:c0:b6:96:c2:83:44:00:
                    72:37:af:0a:9a:bd:ff:9a:97:82:7b:5a:00:c6:aa:
                    f9:74:8f:8a:9f:e4:91:98:3a:59:a5:98:ff:f2:0a:
                    08:c9:31:2e:f0:aa:31:4a:46:92:1d:f3:52:ad:fa:
                    e8:28:38:4d:a9:86:f0:6c:a5:40:55:ed:77:17:b5:
                    e4:5c:c4:bd:46:4e:94:4c:90:6e:54:65:13:5b:b1:
                    fe:cd:81:ae:fe:67:fe:6e:15:8a:3a:04:f7:c4:6f:
                    d5:14:e3:20:a4:d8:24:f2:56:43:e7:2c:11:93:f0:
                    cb:3b:3c:ae:95:7d:a1:af:2b:b1:a5:1a:cc:b5:3f:
                    a3:0e:19:1d:37:b2:b8:89:0d:73:94:9a:6c:60:60:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:09:78:7C:F1:41:D1:48:9E:5D:0D:90:64:3E:BF:96:0D:A0:92:09
            X509v3 Authority Key Identifier:
                keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fa:d6:88:83:3b:a8:24:87:4e:ee:bd:69:6f:d4:b2:f7:ee:
         32:36:0f:74:6e:06:a9:e7:37:f5:f2:b7:10:6b:21:14:c5:67:
         06:8f:82:f1:11:14:49:00:ec:03:2a:a4:db:2d:63:b8:51:e0:
         28:1e:c2:1f:fc:74:c4:e0:65:6f:23:1d:68:2f:1b:78:30:ca:
         b7:b7:3d:4c:83:fd:9a:8f:b8:be:c2:2e:29:4d:2d:d2:3a:ab:
         88:5f:c0:14:b0:0b:a1:73:6e:ba:84:b5:bb:a4:c6:21:03:86:
         8f:d0:9e:ae:fe:d2:ec:82:46:54:92:bb:1a:5a:f1:a1:71:9d:
         92:43:68:47:34:6f:9a:9b:d7:2d:81:14:e2:6d:45:fa:b2:89:
         22:fe:eb:0a:9a:9c:15:fc:78:f7:23:e0:8e:81:24:e1:77:91:
         9d:68:90:e3:fe:17:a2:ce:2d:b5:e1:ea:17:40:7d:aa:71:35:
         0f:58:f7:fd:c0:b0:24:0a:36:5f:8b:fa:95:61:1d:37:3f:54:
         e8:aa:09:e2:5a:b4:42:fb:cb:97:8c:9e:37:fa:55:7e:b3:37:
         8b:47:1d:d3:21:2a:c3:73:59:4f:eb:09:00:09:b8:c9:de:58:
         e1:d9:67:de:37:43:9e:81:35:34:91:c1:3d:07:95:57:c5:ef:
         4f:84:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----