Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File:                     s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier:          a9mcR2CeTPo2zglUvjdrbsigcfEH4VcASCZECPsw1O4=
Subject key identifier:   1F:5A:D8:63:CD:CA:24:09:BD:B9:EB:CD:7A:08:E9:75:77:37:A9:0D
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer:       /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial:       01962F3D7EBBA1575181D50CBA64D3A8D298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=)
                          2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: yXtsvIcleum1lRqW0OWztrL7cZB9J6ZcbopOhU708lU=)
                          3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7e:bb:a1:57:51:81:d5:0c:ba:64:d3:a8:d2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=1f5ad863cdca2409bdb9ebcd7a08e9757737a90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d7:83:14:45:38:e9:8c:3f:f9:68:1c:8e:9b:
                    7c:47:b6:42:50:1f:94:e7:b5:ff:85:f2:ec:a7:6d:
                    a3:85:5c:a7:68:92:c1:3c:33:75:5c:72:41:ff:3f:
                    4f:21:a2:28:ee:a6:53:dd:4b:f7:cf:f1:45:7d:72:
                    da:f3:77:59:c8:aa:b7:06:b1:d4:c7:87:0c:e7:26:
                    bd:17:b4:1d:20:8b:af:ae:11:cf:9c:0f:79:0d:52:
                    58:e5:9d:f1:e6:89:4c:8e:9e:1e:3b:fe:46:40:2d:
                    c3:27:e3:e0:0f:a7:ad:d8:27:8b:71:cb:28:46:1a:
                    89:2c:de:c0:cd:2b:8c:50:4a:de:bc:31:d1:56:90:
                    92:bb:be:0f:d7:5c:bd:f5:dd:25:e9:1c:11:96:4a:
                    29:3d:22:99:25:68:05:60:a7:62:32:9f:79:e4:d0:
                    c9:06:b3:48:f9:89:be:7a:0b:c6:bf:dc:66:ab:bf:
                    00:f2:72:af:7a:04:ba:2c:00:7d:b7:c6:e5:e8:f0:
                    6e:8d:14:eb:1c:8a:e1:71:4c:a5:8d:6b:b7:fd:4d:
                    e8:49:c0:4e:04:5c:f6:49:b8:05:91:f8:0c:54:77:
                    2f:d1:89:79:cd:71:85:c9:5f:4d:28:37:be:b7:03:
                    4b:40:fd:98:e6:09:29:30:2a:41:29:40:df:c8:fa:
                    a1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5A:D8:63:CD:CA:24:09:BD:B9:EB:CD:7A:08:E9:75:77:37:A9:0D
            X509v3 Authority Key Identifier:
                keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1f:49:89:30:50:36:ba:3b:8a:65:f2:0c:1c:d2:40:41:ec:
         bd:65:bc:ba:e1:6e:1b:c0:86:99:49:a4:96:57:66:35:4d:39:
         f2:89:c6:26:98:ff:63:c9:41:92:9b:f6:d7:07:7d:eb:35:e5:
         b0:80:7b:bc:c6:3a:27:5c:09:dd:63:53:fc:e0:cc:00:d4:80:
         25:1f:de:01:9f:5d:fb:14:1d:64:dc:23:dc:6c:6d:f5:06:22:
         34:22:c0:18:3b:a5:6e:61:81:23:84:b9:ce:e4:50:4e:59:6b:
         2b:5f:b2:11:ad:86:96:60:2f:61:b6:39:98:54:ae:aa:e8:8a:
         3e:51:e6:11:82:3d:bb:53:ba:26:76:2e:41:c4:27:cc:2f:e4:
         9e:a9:5a:39:6e:93:bc:1e:dc:c7:97:21:48:8d:fb:e9:d6:37:
         b3:32:c9:09:25:72:3a:35:d7:3e:6f:c7:3f:aa:e7:0b:0e:1c:
         13:41:81:33:31:df:a6:fb:30:c8:4d:0b:50:a9:d8:f8:ae:76:
         26:e4:8a:ff:a0:f3:eb:a8:5c:ed:a5:1d:78:98:52:36:ea:cc:
         ca:09:35:70:42:d6:0d:94:0f:f3:c8:a7:e1:2b:b9:d5:4f:f1:
         0a:b2:a2:1c:77:3a:9e:33:81:dd:f5:01:b5:78:ac:7a:72:d7:
         b1:5c:7a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----