Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File:                     iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier:          Ui5pja25irmwih7n/szCWiik8y5/J5Am2AOUF+7tGE8=
Subject key identifier:   FA:9A:FD:C1:76:2A:65:C2:5F:94:80:B4:87:1D:0C:C3:D5:20:F6:6B
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer:       /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial:       01962E9873BA0D0B5A06BAD3B5A905E4D15C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number:          0526
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: RTCvuX6SWSk4siHJM8Y4z54yCh0UxSFO/BVfKpFC0Gw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:73:ba:0d:0b:5a:06:ba:d3:b5:a9:05:e4:d1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=fa9afdc1762a65c25f9480b4871d0cc3d520f66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:7a:e7:5d:50:cb:f2:34:93:74:2f:00:b4:
                    f0:a6:af:2c:9f:ba:53:b0:97:62:1a:65:b5:bd:d6:
                    20:aa:b5:6b:12:8f:17:bb:c8:50:ad:b6:89:87:83:
                    b3:08:f9:b8:92:c2:8c:1f:15:2b:68:4d:67:91:a1:
                    69:73:0d:f1:12:a8:05:87:1c:6e:b4:da:4b:84:3b:
                    0f:ef:b2:49:66:fa:58:77:6d:01:1d:58:8c:9f:76:
                    ba:9c:db:b0:b3:60:74:70:45:a6:81:d5:f0:73:80:
                    68:47:2e:0c:80:4a:46:3e:be:71:e6:76:bf:ed:48:
                    49:1f:bc:dc:f5:aa:f0:c3:ec:d8:b8:15:61:a2:ae:
                    9c:fe:af:b7:b8:be:3a:5c:3b:aa:18:f9:0f:d4:29:
                    ea:4d:e4:69:45:ca:9a:0f:e7:f5:c3:11:cc:5e:66:
                    be:bc:22:a0:46:c8:95:55:cd:cb:22:87:3a:f8:38:
                    a4:e6:4a:94:af:9d:26:80:54:98:a8:78:51:77:ba:
                    33:14:d5:48:e0:87:06:b3:a2:43:40:01:44:e2:fc:
                    b5:45:32:04:89:60:b6:5e:ad:04:e0:89:34:4e:8a:
                    ea:89:d2:2b:03:d7:88:14:01:0c:50:5d:0c:88:07:
                    7a:4d:36:6b:50:6a:0b:f9:69:2b:fb:3e:de:b4:61:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9A:FD:C1:76:2A:65:C2:5F:94:80:B4:87:1D:0C:C3:D5:20:F6:6B
            X509v3 Authority Key Identifier:
                keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9d:e2:39:3c:ae:27:f9:1c:77:ee:52:5c:01:27:54:0b:3b:
         e4:81:1e:cc:d2:06:93:a8:47:c6:cf:b6:95:47:42:44:b4:7d:
         b3:4b:b2:48:35:51:81:4c:c1:b6:43:4a:c5:d8:6a:2d:26:2f:
         2b:e3:d1:65:e2:cf:5c:62:9c:c6:a0:1c:ed:49:ca:d3:dd:b4:
         92:0d:f5:bd:f0:16:c4:6e:6b:3e:36:0a:65:1b:b7:db:eb:82:
         6b:bf:1e:b3:3b:d2:5e:b9:9f:db:7d:5e:b8:e5:76:0b:62:e1:
         0b:43:75:b6:d3:eb:4c:b3:c5:b9:97:b2:01:0b:2c:b0:64:b2:
         90:d0:0f:73:b0:0a:46:bd:b1:58:7d:ae:bd:76:95:dc:e6:2a:
         72:2c:95:70:21:53:bc:b4:8f:e1:07:5d:69:1e:99:bf:b0:ff:
         0d:5c:63:64:d3:59:ca:8a:11:0b:23:17:97:95:4c:22:fd:96:
         0d:83:25:42:9f:97:2f:a0:10:ee:33:6c:be:6e:c1:e1:a3:e2:
         4f:65:cd:29:21:8a:3e:80:36:76:a5:71:75:a3:4a:1b:cf:68:
         f2:5d:5b:bf:c7:bb:1a:34:1e:ff:1b:e6:2e:c0:7f:95:1d:c9:
         0b:e4:05:c7:7a:9e:03:7d:ce:a8:cd:eb:aa:ab:19:41:2d:d9:
         a5:1b:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----