Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File:                     9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier:          9WwToTXeuzJx03jw2QhIFtzBiVJvsDFY4S4fFS7iuEE=
Subject key identifier:   DB:EF:F5:E2:64:47:5A:A5:E4:8D:51:31:B9:F5:7B:E3:FB:BA:A0:6D
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer:       /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial:       01962F0644D229EBD7A7D702764C50A78386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number:          1400
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: F5E+He4WlhADtY+rPBRWe01jOTq2gDuJHPXB6efmrzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:44:d2:29:eb:d7:a7:d7:02:76:4c:50:a7:83:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=dbeff5e264475aa5e48d5131b9f57be3fbbaa06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:86:3f:2b:8e:f8:73:51:b7:89:2b:1c:d2:
                    c2:64:b2:0d:86:fa:55:63:9f:9f:c2:cf:03:c8:45:
                    37:c9:05:47:ad:64:cd:f5:2e:b3:43:18:43:97:c3:
                    52:a3:9a:26:5f:31:5a:91:0c:34:3a:6c:c9:ab:a7:
                    e4:d5:66:db:28:62:8d:3b:72:96:7f:d8:21:57:44:
                    05:35:52:cf:be:09:ef:d9:fc:9d:eb:83:76:36:09:
                    2d:8f:94:07:c0:10:6d:cb:c9:f0:3e:25:77:33:74:
                    0b:4e:9b:e9:27:cf:bb:0e:7b:a0:79:5a:a9:ea:21:
                    66:58:e5:67:b2:e2:ce:c7:7e:1c:4f:cf:80:ba:7e:
                    6f:67:db:27:d8:f6:92:ef:c4:b0:ae:a4:f7:25:b6:
                    f6:2f:34:9b:96:e2:de:ce:e4:5a:74:37:80:38:81:
                    54:64:57:de:0c:94:a2:3b:0e:12:8f:44:9b:fa:27:
                    c4:d3:7b:36:97:d1:8c:e3:e1:a1:16:ba:70:96:5d:
                    49:1e:75:71:8d:4d:a3:58:e3:c7:d3:b1:57:6d:84:
                    82:aa:45:97:92:83:db:f9:8d:bc:5c:fb:f3:0a:96:
                    e8:98:ec:b8:6a:a4:a2:c2:c2:e4:4d:56:89:ac:53:
                    e8:7c:63:7f:98:7b:06:2f:ad:b0:30:a8:ce:22:b1:
                    b3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EF:F5:E2:64:47:5A:A5:E4:8D:51:31:B9:F5:7B:E3:FB:BA:A0:6D
            X509v3 Authority Key Identifier:
                keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cb:e5:02:e3:11:76:88:b2:04:43:2a:f9:62:f4:fb:46:b3:
         2f:8a:e1:a0:ed:b2:c1:c9:59:ed:58:9f:a7:4e:c9:40:ac:c5:
         5a:16:aa:c3:ee:47:6a:6c:92:79:18:13:7d:62:cc:fe:bc:2b:
         18:49:31:e3:e8:e9:d1:8b:d8:5a:fc:a3:c9:2b:a5:14:3e:a0:
         b0:4a:ea:86:ec:a0:f7:42:29:89:d7:eb:4a:58:9a:86:98:5f:
         bf:4d:f0:9c:96:f4:c1:7c:b4:2e:9a:88:18:f4:6a:27:ad:2d:
         41:a1:ce:72:7e:bc:4b:a5:5f:94:df:51:97:68:ab:5c:06:ca:
         3a:34:b8:9a:db:e6:1c:91:3f:52:62:ab:08:3b:a7:09:ae:2c:
         9b:76:21:e4:ed:27:62:71:d3:a9:97:9e:73:a7:3b:31:2c:cc:
         54:17:4a:69:42:94:ef:be:69:5c:76:cf:ed:82:34:21:35:8e:
         c9:2a:73:4c:69:60:61:07:af:b5:24:c0:ad:47:2e:f0:73:38:
         31:e7:19:b6:94:8c:81:e3:8d:01:af:c4:66:34:f5:27:5a:e8:
         dc:a6:27:f6:4b:08:82:c2:17:69:94:0a:c8:f3:96:22:ea:36:
         77:63:ec:d0:2a:ca:fe:3e:ea:d1:0e:fb:45:31:1f:ba:56:c4:
         81:91:09:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----