Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File:                     9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier:          Ta7PdfPMk1sK4MXAg8/bsHvOA8LCb/8ZLAEItA3GVVU=
Subject key identifier:   BC:E7:40:04:B1:EB:30:B0:70:35:64:0C:BF:FC:5A:39:01:95:D4:20
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer:       /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial:       01962E61CFFEADEFED3C336067E2F14DFAEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number:          0934
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: Ge3e/8dU/t7SH6zFPJdD+zIaXvTn82MJz6UKSbQ0+Yo=)
                          2: Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa (hash: gJwQTQJlZO5UonEbd+MqbZuAtcvQedjepcRUTfg3vec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cf:fe:ad:ef:ed:3c:33:60:67:e2:f1:4d:fa:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=bce74004b1eb30b07035640cbffc5a390195d420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:81:a8:a6:5e:65:4c:b5:ab:c0:4d:6d:71:
                    1c:bf:8c:59:21:22:33:e9:95:e4:ce:d1:f0:a9:78:
                    44:5c:0a:55:87:e5:36:64:35:ca:16:38:03:c4:72:
                    12:ac:98:85:98:e4:d6:cb:3c:29:38:79:37:1c:85:
                    a2:14:a8:15:cf:57:ac:71:df:cd:47:84:2f:ef:fe:
                    de:97:e6:82:16:47:0c:90:e8:bd:9c:cf:81:f1:44:
                    b9:14:59:07:be:25:08:3f:9f:c3:8d:22:a9:6a:5c:
                    06:1d:c2:a3:e6:c9:dc:45:bd:b0:9c:af:90:83:76:
                    20:a4:61:db:73:d0:3c:6a:63:57:9b:25:ad:43:6e:
                    fd:e3:4a:7e:86:df:f0:d9:33:e5:40:4f:ae:37:a8:
                    78:7c:f1:95:86:14:4c:ba:32:ef:b8:4d:86:07:6c:
                    fa:4a:21:2e:0d:2f:56:e7:9e:f8:ae:00:f6:4e:6e:
                    e7:e4:d7:c1:18:17:a7:52:2d:3b:8d:48:3b:ad:35:
                    29:2b:ce:13:75:f2:5e:98:a6:34:85:14:fc:70:21:
                    37:f0:37:74:04:61:0a:c1:37:b6:f2:12:d4:41:39:
                    20:8e:e5:73:6f:cd:d4:ff:b8:02:aa:80:25:b9:22:
                    92:d7:cb:ec:99:a2:87:78:7c:44:e7:b7:ff:68:f3:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E7:40:04:B1:EB:30:B0:70:35:64:0C:BF:FC:5A:39:01:95:D4:20
            X509v3 Authority Key Identifier:
                keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ba:23:8e:cf:b8:0c:87:f5:e7:c3:e7:8e:1b:6f:a3:d1:1d:
         38:a6:d3:3a:1b:52:03:c8:29:b9:30:7f:68:0f:04:cc:61:7d:
         f6:a3:1a:d4:7b:46:a0:b9:da:84:b8:c2:85:30:41:0a:5d:6f:
         ad:93:54:39:98:c8:08:43:d5:e2:d4:46:92:d2:35:e3:dc:d2:
         e4:5a:79:1a:6b:1c:a9:d2:87:f5:9a:8c:93:ea:74:99:93:27:
         ed:f2:a3:27:11:b0:3a:d2:d3:f3:7d:a9:68:a2:6c:85:42:15:
         f3:6f:bd:c9:5e:ae:90:63:7b:86:c8:0a:b4:25:b8:97:2c:c2:
         8d:de:c5:ae:e0:12:b8:d2:0d:e4:6b:dc:92:5b:28:e1:b3:69:
         56:4f:ee:61:42:0c:f3:0c:4e:a1:d4:c4:fb:75:0d:0d:19:1d:
         11:c7:5d:bb:a0:cb:13:70:a0:9e:66:67:cb:29:92:6c:19:c0:
         9c:af:b7:e9:03:2d:23:f8:97:de:a7:a6:80:e5:4a:e9:93:7f:
         14:17:2c:eb:38:c0:a4:25:f7:28:2a:82:16:10:c0:13:dc:a4:
         b9:1a:bf:55:db:cc:22:c4:3d:50:49:28:97:09:77:1c:16:0f:
         78:cb:04:c4:25:c8:bd:87:f2:d8:4f:50:53:d5:6a:64:0c:9e:
         1b:a4:98:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----