Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File:                     156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier:          KPCMvzrwfiUDMWQovngOuOavyAU5sak4vDsUCPmNK78=
Subject key identifier:   B8:F9:64:85:C3:C4:B1:CA:91:68:ED:08:68:DB:30:3D:F7:E7:C3:DD
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer:       /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial:       01962DF42505830E56D9FFA79AAEF15D90B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number:          0B91
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: MPvlRWq1eBEJUmzQSPxeG9vGXyylWjJHV5EDqfaV8so=)
                          2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=)
                          3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:25:05:83:0e:56:d9:ff:a7:9a:ae:f1:5d:90:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=b8f96485c3c4b1ca9168ed0868db303df7e7c3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9a:0b:75:fc:09:0a:8a:6b:2d:b6:88:c3:4c:
                    b2:1e:98:ec:8a:1f:e4:3a:2d:63:b2:7e:e4:34:f9:
                    33:b6:5d:0c:4c:42:11:c1:64:44:f4:c7:5f:57:25:
                    3f:cf:2e:f8:cb:25:3f:d2:d4:04:07:75:3a:9d:96:
                    7c:87:d3:7f:33:75:22:33:3d:00:8b:5d:1c:28:53:
                    74:c2:8d:42:06:d0:41:8e:8b:7d:cf:1b:a4:4a:f9:
                    d9:5f:29:f4:bd:41:10:41:18:a7:e9:8b:88:56:78:
                    ca:4b:35:cd:36:e4:3d:27:89:ae:a7:20:ee:69:68:
                    aa:6b:36:06:23:e1:bd:84:05:5e:69:83:53:18:22:
                    06:0f:75:bf:72:88:74:7c:05:7b:12:06:24:db:88:
                    a7:62:3b:a8:f4:05:2a:22:72:4a:69:8b:1a:85:8e:
                    2c:36:19:c4:03:54:5e:9a:0e:22:7c:f2:02:ec:17:
                    45:c1:15:0f:de:c4:f3:f0:d7:95:5d:ce:25:35:1e:
                    31:c6:2d:00:d3:fe:51:56:6e:4b:41:91:b1:7c:a8:
                    60:52:fe:3e:e4:cd:09:af:73:26:a7:bc:01:d5:92:
                    04:22:28:0f:04:5d:49:f5:5c:e0:76:b9:2a:85:9a:
                    16:25:ef:62:69:7e:37:a8:bd:a7:c5:39:de:37:79:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F9:64:85:C3:C4:B1:CA:91:68:ED:08:68:DB:30:3D:F7:E7:C3:DD
            X509v3 Authority Key Identifier:
                keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f8:64:3d:76:4f:89:1d:d7:89:a5:6f:c2:1b:d6:a5:bb:80:
         4f:db:25:07:e3:ec:29:0b:c2:9c:56:fd:03:88:d3:26:9d:45:
         0d:ec:52:c3:a9:06:b4:ed:fa:1f:2c:47:0e:87:6f:76:ec:78:
         9c:c4:7c:6b:b9:42:9f:a4:e1:48:9b:72:60:56:4e:cb:5d:91:
         89:89:a9:ca:80:fb:2a:34:a6:43:7f:4f:6d:e8:00:c7:5c:11:
         6c:2e:60:81:4e:66:5d:6b:33:74:77:2d:ae:02:8f:1b:4d:f9:
         10:df:1b:99:3b:57:72:86:cb:cf:a2:76:66:d1:fc:2b:89:7b:
         fe:48:08:72:bb:cb:d6:7b:cb:e8:77:2e:6a:a6:c3:da:be:f8:
         77:59:e4:14:c2:f6:ad:5d:46:d1:bd:d4:b7:8f:87:85:9d:67:
         f1:64:2a:3c:53:09:a8:3b:26:0a:f2:9d:0e:4b:ce:65:7c:64:
         eb:72:e8:da:c6:d4:67:ea:bd:15:26:87:21:a2:ce:65:33:67:
         4c:96:da:15:50:64:22:ee:64:e1:9c:eb:0f:40:3c:ff:27:cc:
         bb:c5:11:f2:b3:25:d2:91:b8:7a:d3:e5:54:16:5d:09:5e:4e:
         89:61:b2:40:23:29:0a:07:b1:e1:b2:6b:58:84:37:ef:17:0b:
         03:14:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----