Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
File:                     V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json)
Hash identifier:          86FqSU1/JJ/qHXmJY6NqywkcX/F2fgZ3jTgd3AACPig=
Subject key identifier:   15:E9:73:C6:C5:B7:3B:E0:68:FD:A9:40:19:1B:AA:DA:73:0E:43:80
Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
Certificate issuer:       /CN=57d011b577f90aa7e8e0cc5229e1f29983824593
Certificate serial:       01962ECF8EA89D902EAADE86611485D8396E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: 8MhScoOm45rFO+ebMc7Kz+DoMEE+pNJdOGvnhpLIjlc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8e:a8:9d:90:2e:aa:de:86:61:14:85:d8:39:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=15e973c6c5b73be068fda940191baada730e4380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:c5:c0:70:a7:85:ea:db:70:09:66:19:86:
                    a4:98:9a:2a:d7:43:e7:13:75:52:0f:ad:a9:5d:d3:
                    27:8c:c5:11:6b:d2:51:40:ef:64:f9:27:82:27:cf:
                    c4:e1:b9:db:2e:c9:28:67:ac:b7:f5:1e:a8:8c:e8:
                    2f:bc:86:cc:56:7b:68:2b:49:20:62:d4:29:e3:37:
                    34:6a:a6:9e:ae:73:82:d4:08:cf:03:ca:2b:c9:84:
                    77:25:b0:58:ba:56:da:f0:b1:dd:1b:4c:46:2f:dc:
                    11:11:8e:82:3d:b6:9d:66:3e:cc:b1:60:45:5a:30:
                    5b:c6:83:42:af:59:3c:40:b3:6e:cd:82:ae:fe:96:
                    d7:65:05:ae:ad:42:e4:72:61:85:91:6e:90:2e:1a:
                    dc:f9:85:ce:80:24:69:27:88:8f:5b:59:89:1a:0c:
                    e9:c7:cd:9c:0a:fd:70:f5:4d:e3:cc:e8:df:20:25:
                    42:a6:24:c7:74:bb:5a:6c:0e:51:cc:46:2c:a7:c3:
                    6b:91:67:3c:b2:3b:e0:4a:0d:43:ca:4d:1b:88:ea:
                    80:c2:6a:75:a5:f7:2d:16:e4:1d:23:43:8c:e6:a7:
                    1a:cb:4b:f5:8b:8e:19:93:b9:de:ca:44:c2:b6:bf:
                    b7:19:ae:14:5e:cb:1a:5c:82:a5:ec:bc:1a:6f:59:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E9:73:C6:C5:B7:3B:E0:68:FD:A9:40:19:1B:AA:DA:73:0E:43:80
            X509v3 Authority Key Identifier:
                keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6c:df:d0:aa:30:17:15:d4:90:66:65:16:ee:18:ec:32:eb:
         a6:86:fc:b9:63:69:61:ce:5d:75:a4:4b:c6:c1:a5:17:62:80:
         1b:3f:21:eb:d8:55:00:89:1f:ba:ea:73:39:e8:2b:5b:89:42:
         c7:6a:1e:05:95:74:f7:b3:a7:18:48:1f:e8:ae:67:e4:18:3c:
         2d:7b:e5:19:1e:ae:8d:74:97:2f:3c:05:5c:1f:46:be:ff:f4:
         0c:f1:dd:64:62:12:ff:9e:75:24:a5:e9:da:fd:04:af:10:6f:
         04:5c:10:92:e2:bc:73:c7:e3:c6:9a:e5:c7:e0:af:ee:e7:ae:
         45:ec:7f:2a:1b:f8:4a:89:47:61:d7:28:ac:cf:3b:a9:be:2b:
         fd:b7:4b:e5:bc:ee:57:bf:8d:39:42:be:48:4f:14:33:57:73:
         15:dc:4e:8e:87:fa:aa:6e:14:46:9e:45:50:ed:4d:a5:c1:14:
         76:c6:b2:47:e9:e4:e3:69:c4:2a:4c:53:a4:30:fb:dc:e7:e5:
         b4:91:0f:a8:9e:d5:d9:a9:56:a8:04:23:d9:ee:d9:36:26:40:
         72:83:0e:0b:32:3b:18:a1:da:87:c2:ba:c0:8a:24:5c:ea:27:
         b6:af:0d:3d:4e:b5:d2:ee:84:f9:f4:3a:af:15:7b:04:38:83:
         c3:11:7e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----