Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File:                     9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier:          L62/+70LqTS8RX0DjMcj5VA6BdV6Cwo5HPD+Xf30/SM=
Subject key identifier:   67:CC:60:45:0F:77:6E:D1:B0:2B:42:25:F0:CE:AE:A2:E5:3C:43:CF
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer:       /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial:       0195E07D583DEE29FB08092168BC0D8F1D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number:          14D5
Signing time:             Sat 29 Mar 2025 06:01:05 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:05 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:05 +0000
Files and hashes:         1: 6mcjFHoCEfRcUMyjZ6xohWP4_n4.roa (hash: SVipuhy3Ehx0A2p8/qYN8eYS0y6FZ2XI+LhGjs2fICo=)
                          2: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: DmZfutEDnm2cgVGmtL/bljmsFIDWHzuXdOYyHBCw8Sk=)
                          3: DY7axdNUahmM11yaDw51VfAp67s.roa (hash: bUYyC3SF16Sa424fYOC0qhaN4vyFKANSqCH+D1gEZQg=)
                          4: HEoZmTdVM-DeFe9X3PrPHHx8iEk.roa (hash: 9udpTWaNqTHQ+GFwYOitrLQw23wqjYK6MW1sHvnpqd4=)
                          5: PrNUxz0yba76t8wY55c1zKXm_Oo.roa (hash: m1KBoMWL6Rj5bP0aLVgjFWVkvzcAuAcBVIFoqutIMt8=)
                          6: oAbqR3kG7LoiZXxF1UQ_LftT7BQ.roa (hash: 5h2TCAddmyCEmv2EclM4C4a677ny0YxlmBdSG7ml6N4=)
                          7: vmadOBoOk6niwocbLQBsll2qRrw.roa (hash: zQDs58AuBVhnIjhnpftladMye3nflU9pDFBdocMEldo=)
                          8: z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa (hash: ccA776YRey2wE5rLtAhOmx43QdG5Twqc3fRZfQPAbDo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:58:3d:ee:29:fb:08:09:21:68:bc:0d:8f:1d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
        Validity
            Not Before: Mar 29 06:01:05 2025 GMT
            Not After : Mar 30 06:01:05 2025 GMT
        Subject: CN=67cc60450f776ed1b02b4225f0ceaea2e53c43cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:2b:7c:ba:eb:b6:7f:cc:c6:bc:ed:ae:49:
                    b2:40:fd:85:0e:8b:14:e1:7c:b5:2e:1b:e8:6d:1b:
                    33:6a:c6:22:ce:a8:4a:d1:9a:93:1b:15:75:3a:16:
                    54:c6:e0:00:dc:50:ee:78:75:74:e2:19:c3:e9:ef:
                    30:b2:17:c5:10:09:53:53:02:11:d8:8a:a3:dd:f4:
                    7c:65:61:6b:11:ad:03:61:bd:73:6f:7e:aa:13:e0:
                    73:78:a8:5f:3b:be:a8:07:0a:60:ed:4f:04:48:01:
                    e6:c6:6c:18:29:a8:f0:e2:8b:1c:02:48:a8:bd:a2:
                    ab:53:5f:3a:45:34:e7:f9:d4:9b:68:84:9a:48:aa:
                    4b:2a:ca:db:5d:2d:63:8a:80:18:fb:28:03:36:bc:
                    4b:8b:a3:a9:42:de:2d:fe:ea:a7:b2:90:4f:71:34:
                    ac:46:39:f1:af:15:90:38:25:02:26:3c:d8:e9:d4:
                    09:24:d9:cb:2d:1c:90:12:83:e0:7e:32:dc:2d:46:
                    d3:b4:31:d9:48:f9:c6:4a:a2:e3:71:d8:21:7c:7a:
                    14:b2:ed:a9:9b:bb:de:d1:a2:00:67:8d:6a:33:c6:
                    25:cf:42:6c:8d:6b:57:79:3f:2c:d2:34:95:e4:cf:
                    1d:e1:9b:32:a5:bd:67:be:48:02:9d:ba:f3:b3:7b:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CC:60:45:0F:77:6E:D1:B0:2B:42:25:F0:CE:AE:A2:E5:3C:43:CF
            X509v3 Authority Key Identifier:
                keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:53:59:5b:35:a1:ff:35:7d:42:78:9a:24:d9:d2:46:89:8b:
         82:3f:ff:1a:83:09:15:4e:b6:bb:a4:5f:d0:e4:79:f8:1f:e9:
         40:f9:fc:09:eb:0e:43:23:29:f6:85:98:35:96:d7:e0:4b:1b:
         77:e7:b0:f2:aa:67:23:7e:2f:41:f4:da:5e:63:02:83:67:03:
         f3:ff:62:27:b7:54:3d:b2:58:19:63:6b:ed:0d:33:b5:54:f1:
         e4:7d:38:7a:49:ef:6f:15:d7:79:f2:61:f9:f4:b5:d8:7d:27:
         8d:c2:6e:6d:b9:85:fa:d0:25:6f:fe:c2:0e:4e:be:92:dd:25:
         26:47:64:8d:14:52:60:13:7a:9a:90:e2:98:27:ad:5b:e4:e0:
         fc:51:16:70:8f:ae:f1:8e:13:94:2e:84:24:f0:6d:95:78:99:
         cc:52:78:79:b4:6c:83:2c:1c:d0:27:b4:bb:49:5c:3e:c1:c4:
         f9:88:f8:8b:32:82:61:ff:5d:bf:09:dc:ca:8a:92:de:84:21:
         9d:94:fb:ee:2d:6e:89:e9:2e:e2:64:a9:66:7f:76:b5:d5:77:
         9e:65:6d:40:96:ba:99:cd:f1:16:c5:48:f3:bd:8e:c6:e9:85:
         de:72:9d:0f:8e:47:db:50:d8:68:c2:5c:e0:0d:19:70:c5:1c:
         64:d9:1f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----