Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.mft
File:                     9vT-urM3YEdXVXVRIrnyAmI5G5I.mft (raw, json)
Hash identifier:          3rIeOALFKhH+uVPzAv0GaALIKgL74Ho0ApBL+4SIjOE=
Subject key identifier:   68:1E:B2:54:60:1D:89:C5:BC:77:49:11:05:6D:0E:2F:B4:1E:36:25
Authority key identifier: F6:F4:FE:BA:B3:37:60:47:57:55:75:51:22:B9:F2:02:62:39:1B:92
Certificate issuer:       /CN=f6f4febab33760475755755122b9f20262391b92
Certificate serial:       019515117548ED9674D3C10919D644C497BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vT-urM3YEdXVXVRIrnyAmI5G5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.mft
Manifest number:          145C
Signing time:             Mon 17 Feb 2025 18:00:20 +0000
Manifest this update:     Mon 17 Feb 2025 18:00:20 +0000
Manifest next update:     Tue 18 Feb 2025 18:00:20 +0000
Files and hashes:         1: 9vT-urM3YEdXVXVRIrnyAmI5G5I.crl (hash: HQyYg+8aZtjPYkbTRYeRYlOCm90q+OCNuE3XtouDgFc=)
                          2: hjx08CbWNVb-AMGbwL0-5Sf_ifk.roa (hash: 6C02koWDYB7dLeFI8ibJ+LhMKomu57ibOfSN2wKtslA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:15:11:75:48:ed:96:74:d3:c1:09:19:d6:44:c4:97:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f4febab33760475755755122b9f20262391b92
        Validity
            Not Before: Feb 17 18:00:20 2025 GMT
            Not After : Feb 18 18:00:20 2025 GMT
        Subject: CN=681eb254601d89c5bc774911056d0e2fb41e3625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:79:d8:ce:bd:29:9a:c1:50:93:ba:83:e5:
                    1e:f3:66:12:62:41:67:fb:9b:aa:c2:24:f1:23:2b:
                    2f:8a:5f:22:59:12:7f:c5:9f:74:5e:d1:bb:3d:b6:
                    ef:3c:cb:4e:06:18:3a:4c:40:60:64:1b:7f:77:5d:
                    50:d8:12:46:e7:08:fd:cf:8c:d5:2d:1e:50:67:64:
                    01:6f:1c:99:6b:ca:12:86:38:8a:28:bd:e9:fa:85:
                    f2:da:63:33:42:ef:09:95:d3:1d:80:e8:38:48:78:
                    26:0f:59:c6:01:4c:a6:97:ed:04:f9:5c:8f:25:f9:
                    0b:e8:83:12:21:9a:07:e6:2d:df:8b:ea:e4:b9:95:
                    c2:7a:2c:c1:90:0f:e4:fe:12:b2:9e:16:17:c6:64:
                    cb:50:42:db:fc:e4:ae:08:41:5c:6a:f6:15:af:a0:
                    49:21:f5:8e:7e:83:12:4c:1f:75:29:a7:0a:3c:6a:
                    39:a3:be:4e:7f:14:0e:a4:35:91:41:78:03:fa:31:
                    53:68:38:80:30:19:36:13:a4:59:30:9f:81:45:4a:
                    cb:de:ea:39:0b:c3:90:3b:60:6f:0c:7e:45:47:ae:
                    39:23:a3:f8:71:9b:dc:ce:8f:bc:e9:51:4a:29:f4:
                    00:26:49:71:a3:25:1d:fc:99:b7:d2:28:be:83:b4:
                    3d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1E:B2:54:60:1D:89:C5:BC:77:49:11:05:6D:0E:2F:B4:1E:36:25
            X509v3 Authority Key Identifier:
                keyid:F6:F4:FE:BA:B3:37:60:47:57:55:75:51:22:B9:F2:02:62:39:1B:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vT-urM3YEdXVXVRIrnyAmI5G5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c29a1c-244d-44d4-bf1b-db843340f3d5/1/9vT-urM3YEdXVXVRIrnyAmI5G5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:a5:e2:8d:bd:5f:cd:ea:e5:f4:f6:52:54:c5:d0:6d:6a:7a:
         0b:db:88:5a:db:09:78:f6:e8:b5:92:4f:4d:9e:6a:87:1a:6e:
         bc:45:19:b9:dc:33:24:e3:66:39:5a:ac:be:24:26:10:51:51:
         05:2b:99:b7:f3:31:f4:73:82:57:f6:37:b7:86:79:22:c3:6d:
         90:38:fe:2c:d5:e9:74:8f:fb:de:b0:6e:9d:2e:53:7f:fd:e7:
         a9:84:02:4d:e0:67:6d:93:25:4a:76:aa:a9:78:c7:c2:a7:0d:
         a7:8b:83:c8:74:93:0f:fb:90:ae:52:2f:a1:db:8d:7f:cf:c4:
         e8:9e:6d:ca:02:86:50:e3:5e:5c:23:4e:9f:bb:b7:7d:4c:fc:
         b2:20:dd:77:89:36:67:e1:f6:7f:68:f1:a6:a5:c5:8c:6a:ab:
         b7:24:a2:1e:ee:f5:dc:07:f1:36:a5:ba:a1:c7:cc:5d:5b:85:
         8f:a2:70:b2:e0:b6:26:7c:99:fc:23:13:9b:4f:b6:09:e9:6b:
         12:32:8e:c2:8e:36:e5:79:3f:92:e3:55:8a:ce:8d:0e:e3:91:
         22:89:c4:d2:4e:96:e5:df:28:55:cb:57:f9:a8:b1:48:40:5a:
         84:5b:aa:18:c4:ff:b1:ae:a2:1f:a4:8e:37:da:d2:6c:aa:97:
         f5:94:53:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----