Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
File:                     2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft (raw, json)
Hash identifier:          Ed+HYX94bQckmUAPtS2gxkTpWCAu8fzH7mc8+gGvfnE=
Subject key identifier:   9D:F7:84:61:88:37:5F:EE:FF:DF:95:27:91:6C:D1:7B:F2:3D:F2:2A
Authority key identifier: D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
Certificate issuer:       /CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Certificate serial:       01962E61F8199C7106A58034CD267A28C1C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl (hash: VOdr8y1g6dIRc9j6kEq7IOM2BpLkwGOVakBJTMZlEBs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f8:19:9c:71:06:a5:80:34:cd:26:7a:28:c1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=9df7846188375feeffdf9527916cd17bf23df22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9f:b4:fd:ee:53:d4:ca:77:0f:db:c9:25:f4:
                    71:94:1e:55:0f:d1:dc:78:82:d7:43:cc:e8:90:8e:
                    64:a3:0f:15:70:f2:83:94:56:d9:36:27:b3:bc:2d:
                    53:71:c0:2e:53:26:6c:6d:89:d8:24:18:ad:10:b6:
                    8b:49:02:bc:58:94:01:b1:a8:3a:1c:8e:a7:55:f7:
                    34:0a:7c:72:f5:19:6b:11:12:cf:e0:a8:0a:a0:9c:
                    64:61:af:d8:82:f9:f0:43:07:7c:02:09:35:66:ae:
                    80:29:b1:b9:b4:3e:24:d1:ae:ce:10:77:5c:78:e7:
                    12:0c:6a:2f:bb:ba:2f:13:6b:ea:2b:5a:fd:f4:c5:
                    29:65:00:90:b5:4c:9d:13:07:32:89:3d:a7:4c:67:
                    3e:d2:ba:92:23:7d:df:f5:19:f8:a6:57:2f:7a:07:
                    a6:29:58:ef:5e:15:47:9b:32:be:e1:b1:d6:bd:71:
                    dd:bc:df:58:a1:4b:b4:45:b1:f7:99:f3:f6:d8:f6:
                    df:33:1d:c4:e9:c3:75:fe:72:16:55:26:be:90:0e:
                    51:7a:86:8a:f3:8a:2a:00:c4:a4:3d:73:bb:c5:8b:
                    ed:02:e2:fc:6b:9d:4b:95:78:73:4c:4f:f9:9e:92:
                    6b:24:2f:49:c2:be:9a:3a:8a:bc:26:b9:b9:61:13:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F7:84:61:88:37:5F:EE:FF:DF:95:27:91:6C:D1:7B:F2:3D:F2:2A
            X509v3 Authority Key Identifier:
                keyid:D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4e:62:c6:de:83:21:64:13:ad:83:83:d7:32:2c:71:ea:d9:
         83:3e:ae:2a:cf:b5:7d:5e:28:5a:64:d5:8d:3c:51:76:b6:b8:
         59:ae:e2:88:45:eb:60:72:ef:45:07:97:ed:82:5a:cb:63:e3:
         eb:7c:79:b2:35:5d:61:2d:72:6d:07:e7:82:08:e5:d0:c1:31:
         33:f0:e9:e0:9b:69:dd:4d:09:a7:cd:f4:3e:69:83:d3:4d:d5:
         aa:af:42:1d:cc:8f:6f:12:6a:05:51:ce:d6:5f:ef:e4:62:28:
         ef:e9:5d:7c:6f:5e:9a:63:55:16:0a:ba:9d:99:73:c8:47:d4:
         81:c6:6f:73:f5:ad:7c:ba:68:fb:0f:c0:80:93:23:a2:43:f8:
         82:4d:63:46:d0:da:fe:96:63:8c:17:62:54:39:b4:38:26:90:
         25:f6:2b:c6:06:c2:b3:73:8c:fa:ec:a7:4c:c0:c2:fa:9f:bf:
         25:9b:29:c9:83:61:27:02:40:a0:35:d7:b4:19:07:bc:f8:22:
         39:95:67:28:df:e5:51:3d:29:cf:34:f7:d4:2f:fe:d1:fe:c8:
         3a:2d:3b:b5:78:ad:49:56:7d:dc:de:f2:0d:60:b5:26:c2:e0:
         e7:d5:46:ec:11:b1:10:fd:dd:7b:80:d7:fc:a4:1b:13:43:2b:
         1f:8e:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----