Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File:                     cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier:          hOetrhGn2Hcuhsj1ramkebkBv1zs2a0mrqkBLOL7T7Q=
Subject key identifier:   0D:AB:21:C9:A9:F2:9A:E0:C9:21:78:A3:47:D7:B8:1E:31:BB:01:47
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer:       /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial:       01962E99293086303E6D2E483EEE4E9014F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: PqNLva57b8Di4QcR8EB3fPpTr1MsdMlN0MPMzOVMa2o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:29:30:86:30:3e:6d:2e:48:3e:ee:4e:90:14:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=0dab21c9a9f29ae0c92178a347d7b81e31bb0147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:91:e6:b3:a1:f0:a0:2b:97:6e:94:0a:06:20:
                    c1:80:fa:0e:24:bc:fa:61:a9:de:90:07:61:ef:9a:
                    38:11:33:b1:37:5b:e4:26:f7:56:28:11:4b:84:64:
                    1e:2b:cc:d3:44:4f:27:05:69:00:15:70:8e:b1:0d:
                    73:dd:fe:cd:7a:de:6b:ba:74:38:c2:c8:e0:9d:e0:
                    de:88:52:b9:de:37:d7:18:8a:93:f4:96:48:38:ca:
                    b1:a0:af:da:0a:82:9c:57:ec:0d:09:86:08:22:bb:
                    d7:d5:52:aa:70:02:2c:a2:75:e0:16:47:6f:e2:07:
                    a2:21:1e:d5:7c:62:7b:47:8e:20:4e:c7:26:d2:99:
                    08:c7:e4:27:eb:d4:45:b7:4d:e0:c9:ea:19:57:35:
                    16:f6:85:b1:db:27:6e:16:7c:e7:ef:e5:3d:ee:66:
                    86:01:86:15:ed:9b:fa:15:57:c4:3f:c8:8e:a2:2d:
                    40:2e:ce:ef:3f:c2:9d:39:30:6d:47:af:db:3b:80:
                    c6:5d:bd:a6:b7:1e:c8:fb:36:6a:eb:06:ab:06:a8:
                    2e:95:7c:94:36:36:c3:11:f2:45:ef:ea:af:3b:f5:
                    43:53:c8:63:6b:99:fc:4f:d3:ee:91:8d:69:ac:66:
                    a6:c5:7e:04:60:87:5d:3b:f0:69:c2:e6:f6:1d:06:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AB:21:C9:A9:F2:9A:E0:C9:21:78:A3:47:D7:B8:1E:31:BB:01:47
            X509v3 Authority Key Identifier:
                keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:79:de:dc:f8:70:ac:b6:e2:ac:45:fd:9c:29:fa:21:8d:73:
         4a:57:71:4e:e5:77:d2:b1:73:1d:16:47:7d:bb:0e:33:9c:7a:
         13:77:42:1f:c9:10:dd:66:08:af:e5:39:8b:43:87:63:cb:f6:
         21:f4:12:37:8d:2d:e1:d9:54:fd:a9:70:61:49:59:10:04:e8:
         d7:84:b3:87:db:c9:27:a7:ef:0f:92:cc:8a:c2:8e:96:dc:02:
         75:0b:92:71:2e:55:26:5c:9a:ea:1f:38:ac:16:2e:8b:6d:5c:
         c1:ba:cc:52:52:77:a5:0d:01:9f:0a:53:00:06:a0:1e:2e:ba:
         d3:1d:a8:79:08:87:c5:04:15:b7:7a:86:24:2c:8f:db:cd:e3:
         af:f7:c5:2f:4a:95:fb:29:b2:fe:d8:f4:86:c5:f1:5b:f1:e2:
         28:81:1d:f6:0a:ac:5f:6e:4d:42:3b:cb:6d:12:7c:a6:e8:b7:
         f5:45:37:48:91:af:eb:05:37:bd:5f:42:af:8a:06:a2:46:81:
         9a:11:78:d7:dc:db:5f:14:53:c8:87:ad:e4:c4:22:4c:bd:df:
         86:23:57:48:f9:6f:da:70:8e:52:38:c6:bc:c7:ff:fe:01:3f:
         2d:f6:54:33:3d:40:22:d5:f8:10:ec:73:5b:e5:a2:b8:84:19:
         c9:af:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----