Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
File:                     obfHtAmGdKBPsXeELOxO65v4nh4.mft (raw, json)
Hash identifier:          pr9sl/9//GTBtxTuNrZXmcZX0WHeAUlxic7i0rKPTRs=
Subject key identifier:   9C:4C:59:DB:EC:51:DE:0F:A9:6F:70:DF:76:C8:69:80:F2:45:1B:37
Authority key identifier: A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
Certificate issuer:       /CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Certificate serial:       01962E99A805C10A2F3A539DFB2828F1266D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: obfHtAmGdKBPsXeELOxO65v4nh4.crl (hash: gJgT8eUvfiFh6k5t7Z6vjANBtFujxyLJ6PW4nKPt+EA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a8:05:c1:0a:2f:3a:53:9d:fb:28:28:f1:26:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=9c4c59dbec51de0fa96f70df76c86980f2451b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:33:9b:b5:05:87:a9:f4:d0:9c:5d:2f:b9:
                    90:a3:ed:3f:ed:28:bc:13:f7:25:9e:4f:a3:2d:18:
                    6a:9a:f1:df:bd:90:c7:ce:8f:38:80:17:a4:69:25:
                    9b:b8:20:62:31:b4:d1:1f:a4:69:5c:40:e8:28:73:
                    cc:67:8c:61:9b:28:fa:92:7d:0b:10:16:af:7f:9d:
                    13:0a:66:29:42:c9:07:e3:b7:25:78:24:b1:fd:3b:
                    5e:fa:0d:d1:05:e5:48:3e:95:e8:e2:f7:ed:43:62:
                    c5:3b:a9:a3:f5:b2:0d:d3:8e:a1:e9:9e:7d:eb:42:
                    1d:37:e1:71:92:c1:87:44:39:8f:bd:d9:b2:da:1d:
                    ca:64:47:44:20:e5:e2:56:44:16:52:3b:bd:6e:93:
                    c4:e7:61:48:8b:71:e8:6a:c1:4c:c9:58:a1:43:47:
                    07:58:48:38:8f:c5:de:0f:d4:17:b5:9b:9d:13:b3:
                    f4:14:47:98:16:0d:30:ea:01:1d:89:ef:4a:ff:2d:
                    ee:ab:75:5e:17:8b:39:17:ea:ac:23:45:45:48:1f:
                    bf:3a:6c:59:5e:29:db:ba:58:1a:d7:fa:12:27:5d:
                    0a:7b:50:b8:47:df:8f:88:07:78:4c:2e:c9:2b:bd:
                    89:9e:99:28:91:90:ee:74:99:af:98:44:ae:e2:8d:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4C:59:DB:EC:51:DE:0F:A9:6F:70:DF:76:C8:69:80:F2:45:1B:37
            X509v3 Authority Key Identifier:
                keyid:A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ee:f7:2c:02:e7:9b:69:44:cc:e4:2e:cf:84:a4:95:d3:21:
         05:20:97:3c:8f:90:d9:a1:56:ce:4e:ba:40:3d:f2:ba:fb:cd:
         63:00:28:3c:66:5f:c5:0c:6c:36:bf:94:7a:6f:ab:12:06:45:
         56:a8:69:c5:7d:32:65:d7:68:64:98:69:c3:46:13:2f:e0:90:
         dc:3c:7d:66:d9:a5:f3:f7:2d:ed:fc:2e:c2:dd:f2:6b:df:6c:
         4a:ed:13:20:1f:14:ff:41:d5:e5:38:a5:d7:08:4f:98:dd:c0:
         ef:40:1e:2e:bd:03:a6:fd:fc:4e:71:71:98:65:12:28:82:94:
         95:08:3e:ea:16:0f:d9:3d:d2:d1:10:88:cb:5a:f7:46:7f:b4:
         9c:4e:f9:fc:6d:a0:fa:1f:2c:2d:a7:f5:42:d7:d0:ea:51:de:
         86:8b:94:df:56:24:69:07:40:34:d7:90:91:6d:d9:77:06:49:
         81:bf:a9:27:68:bb:7d:0d:54:8d:37:3b:35:8e:7c:13:fe:9b:
         a4:58:1b:ab:d3:ec:e6:f1:f5:11:dc:9e:35:d6:b6:11:60:d3:
         5f:c6:ec:66:37:d0:4a:43:0d:69:d7:57:ea:36:03:11:c2:9b:
         77:f5:2b:5b:dd:d3:13:3e:f2:32:89:a1:7e:42:24:2e:77:06:
         6c:f3:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----