Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File:                     9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier:          vnk9rRaoCTEPIrtcIItni4q+wPX65Su6DQaldkm/UPQ=
Subject key identifier:   F4:FD:72:55:A1:EA:E3:1E:84:9E:02:BF:F2:53:B0:C4:B9:01:B9:18
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer:       /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial:       01962FAB97E427836ED912FFC872DA20461D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number:          11D8
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: tCXYQ//j07KIcScUtTWkn9IC5JcueG8+ZDvHtTFn8Nc=)
                          2: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (hash: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:97:e4:27:83:6e:d9:12:ff:c8:72:da:20:46:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=f4fd7255a1eae31e849e02bff253b0c4b901b918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:f2:9b:fc:cd:cf:37:84:2f:52:21:29:01:
                    70:2b:db:12:a1:94:4d:5e:b9:3c:a7:d6:e8:00:8b:
                    2b:64:73:a0:cc:7a:11:8d:89:9d:0e:15:e5:4c:7a:
                    d9:60:f7:0c:2a:d4:e1:61:37:fa:42:a1:01:33:33:
                    cb:68:ea:fd:a4:c9:32:6c:71:b9:57:c7:f1:d4:f5:
                    cd:0e:7f:a1:46:a2:5c:aa:f0:54:df:5a:3d:96:ef:
                    8e:93:90:4e:f8:87:49:6e:54:d5:6e:59:83:2a:96:
                    d3:44:bc:be:1e:5a:93:c5:3d:d9:7d:c7:62:ae:1b:
                    b5:96:dc:0e:32:72:3b:e7:83:4d:6b:14:70:f7:d4:
                    98:ba:3e:dd:1b:70:ad:8b:1a:93:29:d4:ff:c2:b7:
                    88:d3:b2:e6:02:93:57:c5:c1:e4:30:8f:73:98:97:
                    f6:f8:e7:df:a4:a2:b8:f3:f0:86:e1:06:e8:a1:05:
                    61:c1:fe:9a:c9:c9:63:b7:16:cb:50:8c:81:e4:23:
                    02:11:ea:d1:bd:82:dc:f2:b2:28:5d:9f:13:2b:f6:
                    f3:86:48:3d:75:3e:0d:90:0d:e1:14:31:99:05:91:
                    2c:19:32:7d:2d:d6:94:e8:df:ae:95:87:69:53:50:
                    22:a5:a3:11:12:7c:a4:ce:ab:dc:5e:fe:dd:8c:35:
                    0a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FD:72:55:A1:EA:E3:1E:84:9E:02:BF:F2:53:B0:C4:B9:01:B9:18
            X509v3 Authority Key Identifier:
                keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a5:cd:09:62:ef:7f:51:a6:dd:7b:ba:aa:62:67:0f:26:0f:
         29:36:34:f9:ea:f1:51:30:b5:16:f9:e6:45:a5:7f:9d:c6:70:
         86:9e:d4:e2:ea:fa:c7:f6:73:4f:98:56:5a:dd:9b:a4:7f:ed:
         f0:0c:ef:c5:bb:b9:87:ad:55:4d:fc:ed:75:67:d4:08:bc:c9:
         63:34:43:03:98:06:b6:a8:e0:e1:9c:2a:b3:97:71:7d:c1:7e:
         81:a6:d6:56:4c:a8:20:ff:b6:67:b1:c9:90:11:0c:81:57:d2:
         51:ce:6d:a0:79:aa:14:a6:5f:5d:26:29:45:d3:8a:52:a4:55:
         d3:b6:d2:1e:83:96:3c:2b:5b:78:59:bc:9b:7b:d7:7a:4a:8f:
         9f:89:7d:02:08:d5:1a:81:66:45:44:57:56:b8:f5:1d:5c:7d:
         b7:5f:46:41:5a:83:2c:e9:c7:0c:1f:ea:1a:10:51:c1:ea:f7:
         79:f5:ca:f7:5c:40:95:31:c2:55:1c:f8:f0:b4:a2:83:98:9a:
         20:bd:cf:31:c2:8c:e0:ac:d2:7c:d9:e5:f5:d0:61:63:13:61:
         68:25:73:22:d1:88:8a:93:1f:8b:e0:39:82:ec:01:86:2f:71:
         47:3b:76:ed:b5:d9:7c:b8:8f:5a:bd:2f:ee:4d:e5:48:5f:f8:
         39:35:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----