Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File:                     9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier:          1xRV2za0TEVJOtuk8TLOWbBkrE3WD462rmF5mREClng=
Subject key identifier:   A0:A6:77:92:D4:C5:4A:D9:E6:7C:89:57:4A:50:1F:8E:F9:48:B5:AC
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer:       /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial:       01962FAB53F53912D4C71F7D2EE3E142A371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number:          1398
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: RM69lOYhV5ltP2p7eF74niewTrPU5GYy5AFdtD4UNiY=)
                          2: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:53:f5:39:12:d4:c7:1f:7d:2e:e3:e1:42:a3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=a0a67792d4c54ad9e67c89574a501f8ef948b5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:11:0d:50:17:e9:72:18:bc:99:a3:8b:c6:
                    ed:7b:d7:3e:a2:dd:2b:af:31:97:0c:48:1b:2f:93:
                    c8:0c:4d:d6:d3:ff:d9:34:5f:ad:97:1b:7f:11:5c:
                    39:06:48:f8:aa:87:6c:b6:91:c3:8b:5a:c4:a0:3c:
                    d1:fa:ea:5d:87:53:49:8a:8b:f2:29:e2:6f:ca:00:
                    3c:5e:23:d3:cd:e7:12:24:c1:38:c8:69:fa:d5:bd:
                    0e:a8:8b:dc:af:4b:38:37:e5:48:d1:fa:db:31:0d:
                    55:c1:e4:af:6d:2f:f7:8c:95:c3:36:17:77:4e:6e:
                    36:6d:3e:2c:9f:19:0a:ab:3a:cc:0f:f2:30:a3:43:
                    d7:2d:39:9c:04:01:e4:3a:8a:67:59:46:fa:cc:a6:
                    9d:53:78:98:81:09:d1:74:72:87:c0:1b:dd:cb:1d:
                    39:42:d3:b3:6c:39:94:c4:2c:64:08:77:60:99:c9:
                    42:d2:dc:df:be:53:b5:b3:b7:b8:f7:c3:d8:55:6a:
                    b2:02:73:e3:5b:e2:c8:dc:09:45:1a:61:d0:7e:27:
                    95:be:56:10:5e:65:1d:57:0b:c9:cf:ab:bd:e2:9d:
                    b3:d6:12:ac:1d:34:ba:9f:33:3a:4c:e6:72:09:c0:
                    e5:88:79:92:46:a3:70:52:9d:25:6d:88:52:52:df:
                    33:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A6:77:92:D4:C5:4A:D9:E6:7C:89:57:4A:50:1F:8E:F9:48:B5:AC
            X509v3 Authority Key Identifier:
                keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cc:2c:85:48:d5:84:de:dc:dd:33:0f:5d:71:6c:00:7d:27:
         00:15:ff:d8:8f:fb:04:33:84:f0:fc:6b:26:54:13:32:48:7d:
         b9:f0:45:0d:74:9b:3d:a9:1a:5d:fc:5c:a8:c5:42:1a:78:ef:
         a2:ed:cf:9f:16:3d:b4:3c:23:22:7f:fe:2d:fc:9d:a6:4c:f0:
         1e:0b:c1:af:6b:7a:be:36:c4:67:e7:7c:64:6b:a1:bb:17:09:
         8f:11:95:46:e0:90:12:99:c8:2d:67:aa:b7:d9:eb:39:ee:b2:
         11:3c:b4:d6:f1:8a:dd:ad:67:06:a9:3f:dd:89:3a:7e:4d:20:
         7b:71:ed:ad:9c:92:97:5f:ec:d5:74:be:17:1c:33:90:de:b8:
         87:52:10:89:bc:0f:52:82:b8:95:e9:8a:06:ce:bf:88:ab:b1:
         5a:f1:d1:aa:e9:ce:d9:eb:51:36:f2:be:80:33:7a:4f:3e:6d:
         a4:6e:ca:9f:ab:03:de:5f:f5:1b:d4:16:e2:17:de:35:8d:ae:
         67:33:a1:33:4f:ec:9e:f5:8d:7b:c9:5c:34:81:4d:23:61:e2:
         89:7c:03:83:22:2b:70:cf:c6:d9:d1:d9:36:54:f1:a3:aa:dc:
         de:cb:5d:1b:a0:a9:10:a8:af:1d:20:fe:de:40:ab:7d:3c:5d:
         07:8a:7e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----