Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File:                     C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier:          LGmVfm54E29uzQhhmj6C9ExpOImor8CAi/JG3aZrsxw=
Subject key identifier:   7D:D8:38:CE:86:EF:3D:57:CA:9A:EB:53:54:46:70:09:88:00:F3:68
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer:       /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial:       01962E61E85D9E770AB8E4EE3F48D915CC04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number:          11F8
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: oFiha/vY6nIJA9YPtJb8APjlE3MlA6QPppfglzrqzcE=)
                          2: ef1IFXBRyUc_UhmQBLKR_kqjP-k.roa (hash: ReaiOea67yb8AgzXCMfyIi9G3e09LCQ9vM+znmfetZM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e8:5d:9e:77:0a:b8:e4:ee:3f:48:d9:15:cc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=7dd838ce86ef3d57ca9aeb53544670098800f368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:79:e5:a6:ce:67:fb:40:f4:42:a7:3e:e6:
                    d9:63:b8:e2:7f:7b:b3:97:42:fc:bb:40:c9:40:34:
                    14:b0:bc:e9:71:20:84:dc:f8:7d:36:a8:c3:c0:de:
                    81:7f:16:e6:1f:bf:d7:b2:c9:9a:0c:07:a9:83:50:
                    5d:ee:bb:79:da:81:d2:61:d2:9b:86:57:ed:f9:27:
                    5e:d0:71:09:5d:0f:c8:f4:2b:9e:db:ab:24:74:ca:
                    ea:0e:a1:98:db:28:0a:95:6e:a2:12:a9:14:fe:14:
                    75:83:69:42:e7:1c:bc:88:cd:2b:ed:a8:9f:4d:23:
                    60:cd:b7:4d:d6:c6:7a:f6:10:e6:bb:17:90:5a:73:
                    22:ca:62:b5:9c:12:97:8e:86:b8:d4:cd:6e:d1:22:
                    d7:60:11:64:ef:17:c2:a9:05:02:4b:31:9d:64:24:
                    77:5b:72:b4:60:98:0d:9a:89:21:13:e0:a1:eb:1b:
                    37:4c:b4:14:d5:a2:8c:a8:f3:70:a6:e0:7d:0f:23:
                    2e:9f:97:43:8c:c0:50:a4:9f:f7:c8:82:ea:72:3a:
                    56:df:1a:6c:b0:90:e0:ca:62:96:8b:e1:74:51:a2:
                    6c:5b:32:55:9a:97:b8:cd:ad:7b:62:66:ff:e0:13:
                    67:0f:90:76:e0:97:04:f3:2e:f9:42:e6:16:2b:e5:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D8:38:CE:86:EF:3D:57:CA:9A:EB:53:54:46:70:09:88:00:F3:68
            X509v3 Authority Key Identifier:
                keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:4f:ba:a2:a4:79:96:1b:51:6a:38:d2:d0:44:13:34:46:
         ff:da:56:20:41:44:25:70:2a:02:24:ff:d6:7e:71:e3:2c:a4:
         37:6d:02:42:22:8e:62:40:35:15:d7:16:dd:c4:df:55:f7:04:
         d6:b4:56:08:8a:3c:59:7e:a9:e2:6f:e5:77:3d:ce:e3:57:ca:
         c4:f5:a7:71:2b:d7:61:2d:06:1d:d0:25:00:44:c6:a2:b9:f4:
         45:8c:5d:d7:6f:4f:5d:c2:76:e8:04:e6:b7:c0:04:ee:f8:5f:
         2b:68:95:1e:4e:66:25:c3:9a:69:08:50:48:6b:7d:71:d8:8a:
         9b:22:15:06:49:2c:b8:e5:4e:71:57:2a:61:66:a7:39:4b:ec:
         cc:04:3a:e4:26:c3:c8:fd:32:fe:a0:43:9f:31:85:b6:f5:d1:
         3c:56:60:c7:f4:db:87:e9:ac:04:a0:db:4d:62:05:bc:ba:56:
         34:bd:ba:00:be:69:1e:37:b9:87:44:28:7c:4f:61:a3:46:72:
         66:b6:97:fe:8c:96:40:9b:05:3c:2e:2f:72:70:4f:52:c1:6d:
         78:e2:4e:98:54:4e:8d:d5:09:69:5e:d7:b0:3e:18:7d:fa:4a:
         56:ca:98:b5:97:31:46:51:9b:82:3d:86:ae:08:ab:cb:36:11:
         e9:16:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----