Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File:                     idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier:          ebLLduyxZlf0mzAOnYgcJMLvAmQuHxJrNNbPVj9NVaE=
Subject key identifier:   E9:F9:F5:84:C5:AF:BF:04:74:67:96:83:E5:F4:C0:A2:90:BE:9B:56
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer:       /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial:       01962E98DA6049BAD6D98BD1CADD614E7007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number:          0E09
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: GGEyxBH+TzNSJTO+MWR5rlRzlq2jhM28jO30k0fy/xA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:da:60:49:ba:d6:d9:8b:d1:ca:dd:61:4e:70:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=e9f9f584c5afbf0474679683e5f4c0a290be9b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:fe:f4:e4:dd:c9:c9:96:41:bd:ec:ae:52:
                    4e:c9:db:4f:9a:16:42:98:25:c9:53:c6:da:8e:aa:
                    82:f6:28:41:90:8b:3c:d3:fe:34:a0:0b:37:c2:bc:
                    71:7a:2a:21:9d:6e:e2:56:6d:19:12:78:5f:34:b1:
                    8d:ad:25:c7:f6:f9:b1:16:ff:5c:6d:a8:d8:65:bc:
                    2a:be:43:d7:e5:58:41:5b:52:d0:a5:23:13:f3:e7:
                    67:b5:37:44:ec:c5:fa:35:00:0b:66:95:6d:79:79:
                    71:ee:7e:78:a1:a4:d3:2a:fe:45:df:77:4f:51:a2:
                    27:e1:0d:5c:ff:d8:90:47:97:47:a5:a2:72:be:65:
                    07:8c:90:3d:2d:9f:0d:16:a5:73:85:7a:a4:d5:d3:
                    5c:61:44:ad:85:91:39:bd:60:fd:00:48:e3:13:9f:
                    d4:67:c9:8e:6c:ad:81:3a:83:b7:3d:9e:0d:5a:77:
                    f8:5f:3b:6c:ea:5f:6e:fc:38:c5:36:c3:a1:37:3c:
                    b5:2a:77:45:b5:1b:01:28:1a:0a:d3:85:d3:b8:71:
                    70:0e:22:3c:bc:1d:b8:cf:b1:83:60:4b:ac:b7:0d:
                    3f:63:f5:20:dc:61:0d:45:c0:6b:09:0d:3d:5d:a2:
                    6f:b8:26:3c:4f:b2:1a:b0:af:48:2b:a4:4c:bd:be:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F9:F5:84:C5:AF:BF:04:74:67:96:83:E5:F4:C0:A2:90:BE:9B:56
            X509v3 Authority Key Identifier:
                keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:73:b2:3c:3d:3b:13:89:b9:cb:df:83:e4:50:08:c1:ad:9d:
         99:6f:ba:83:e0:be:a8:f4:c2:fb:c5:67:a5:db:91:71:7c:8f:
         e5:84:fb:de:36:44:9c:d7:a4:a0:bb:c7:14:b7:33:9b:91:35:
         4b:47:21:5a:34:ed:0d:72:c5:9b:fc:5e:24:9f:64:bb:21:c6:
         5f:d2:e8:99:dc:21:c2:b8:3b:7b:de:f4:da:34:ef:4f:4a:03:
         81:93:73:a1:80:d4:d5:bc:98:98:da:17:2f:4b:75:41:84:bf:
         b5:ae:cd:51:3c:09:04:ae:57:8c:12:4b:d2:cd:d4:12:b7:c7:
         b0:5f:d2:8b:31:13:0b:d8:0b:84:62:13:94:bb:5e:dc:b9:9e:
         87:09:7a:5b:ca:52:6a:0d:2b:46:6a:6d:a6:c5:85:77:77:03:
         f3:ea:4b:8c:91:15:91:10:9b:26:2d:92:37:ad:57:76:d1:d4:
         0e:71:f4:9e:8f:20:3e:94:f0:e5:5e:1e:a6:af:a2:bf:94:b2:
         ae:05:99:32:8f:60:62:6d:6c:5b:e0:31:98:f5:1f:63:69:29:
         54:ac:b0:6b:8e:cf:78:06:b6:ed:4c:55:50:63:d8:c8:e0:22:
         61:6a:a1:c9:4d:4b:72:02:a2:37:46:bb:60:9c:af:0f:20:cb:
         13:55:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----