Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File:                     9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier:          MYw9DwHVHMY4yyvTaJcVa+bTt4WSWcpwuS118s459OY=
Subject key identifier:   65:F5:AB:8F:B4:5B:A8:33:B0:B6:8A:53:A3:6B:D8:36:7D:34:47:62
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer:       /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial:       0195E0EB6D77CF8B079C0A95823014A417B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number:          14C6
Signing time:             Sat 29 Mar 2025 08:01:20 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:20 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:20 +0000
Files and hashes:         1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: Ep8ASBKhEwD21fic0WIp3FQOGsSGCuQmHGPImVdezyE=)
                          2: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=)
                          3: g7wXivy3539LtXi_LoOdOIVbDx8.roa (hash: +5hEq5/dYKWbMKLOksJvPEMNRWQVyUVWOFEW1b0Bio8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:6d:77:cf:8b:07:9c:0a:95:82:30:14:a4:17:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
        Validity
            Not Before: Mar 29 08:01:20 2025 GMT
            Not After : Mar 30 08:01:20 2025 GMT
        Subject: CN=65f5ab8fb45ba833b0b68a53a36bd8367d344762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:b0:4b:07:a0:be:05:44:15:0c:fb:4e:0f:
                    53:02:4e:c9:00:f1:82:16:f1:1a:03:a5:3e:01:2f:
                    0d:ea:b5:f5:8a:cd:bc:7d:29:f2:58:5a:ea:17:ad:
                    5b:d0:32:77:76:19:f3:4e:6d:e5:3b:13:4d:f7:3d:
                    2a:4f:39:d0:8c:1f:df:b1:87:e4:d0:4e:d9:72:a8:
                    cc:0b:16:03:0a:04:fc:c0:34:3e:6a:9e:76:91:ac:
                    bb:25:dd:51:e2:67:a6:ea:87:75:6e:c1:b0:52:72:
                    d8:f2:de:00:51:c1:11:a4:70:9b:62:33:b5:4b:ff:
                    70:a0:27:7d:6e:36:86:a5:40:90:22:cb:c3:1d:82:
                    4b:a0:ff:56:a7:39:4a:ac:85:d5:b3:6b:bc:8d:33:
                    62:72:17:fa:33:9c:2e:dc:86:c5:a4:57:fa:fe:9d:
                    5b:f6:7b:1c:1e:59:25:98:d2:e6:7c:8a:b2:66:c2:
                    ac:74:3e:d9:65:73:d1:e3:a0:13:3d:7d:4d:37:74:
                    0e:36:32:7c:35:0c:e8:3d:6f:d8:c9:ce:f3:7e:56:
                    53:95:bd:d6:1c:02:4b:e2:63:fe:1e:ad:09:b2:6b:
                    a9:37:67:e1:86:73:5a:71:59:62:8c:65:77:4a:81:
                    6e:e7:a7:f7:b0:72:07:e3:7f:5b:d5:70:6d:94:17:
                    56:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F5:AB:8F:B4:5B:A8:33:B0:B6:8A:53:A3:6B:D8:36:7D:34:47:62
            X509v3 Authority Key Identifier:
                keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7e:19:62:b1:c2:c7:33:11:9d:ff:a7:65:ad:25:3a:c9:c3:
         bb:f6:e6:86:eb:44:8b:2c:3b:ee:10:6c:cc:27:87:37:eb:90:
         32:a6:94:7e:f5:83:d2:d6:6d:28:bb:1d:34:e9:0f:6d:66:27:
         82:f9:ee:7f:a5:73:4d:9a:c3:f0:96:38:61:be:cb:9e:0f:55:
         31:64:39:5f:46:93:72:e7:18:bf:38:54:4b:04:c0:99:dd:9c:
         9a:ff:dd:25:7b:40:29:44:e9:6f:70:1d:7d:5d:40:69:6b:0a:
         75:24:29:b8:4a:6f:15:75:a0:0d:8c:a8:27:a4:0e:2f:34:26:
         9b:61:79:f7:30:7d:8f:50:ee:37:75:93:0f:f2:af:c2:4a:8b:
         35:1b:ca:67:c8:16:ab:03:83:ad:96:e3:26:af:44:7a:b0:a8:
         1d:86:6a:fa:0d:06:58:6c:b1:7d:c7:3f:37:6e:f9:de:38:e3:
         b6:9d:03:5f:23:56:be:08:63:24:91:21:85:9f:b5:25:cc:6b:
         38:93:c9:40:22:30:75:b2:9d:91:9e:19:22:5e:82:f9:c4:05:
         62:b0:90:49:d3:e1:77:f7:00:42:ec:ec:d8:35:5e:98:44:fc:
         2e:ef:37:1b:4a:c6:94:2b:32:75:2d:79:a7:93:63:87:8e:06:
         75:0b:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----