Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
File:                     G9Id-yT32M4jEbpAdndUdL1QvmQ.mft (raw, json)
Hash identifier:          C5tUdpRDGrl867xZbm8pcysTkf9LZpfx7yDTbO2rg54=
Subject key identifier:   0D:10:94:C0:E9:24:25:83:03:2C:56:30:89:9B:A5:E2:28:EF:A4:3C
Authority key identifier: 1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
Certificate issuer:       /CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Certificate serial:       01962F0734064B401F593CF0F7FE39C81EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: G9Id-yT32M4jEbpAdndUdL1QvmQ.crl (hash: fF65EG/yZvgSVFKWSx5NhOvk7OyUMqc6Gs8YKysUXXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:34:06:4b:40:1f:59:3c:f0:f7:fe:39:c8:1e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=0d1094c0e9242583032c5630899ba5e228efa43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:86:f9:43:a6:80:7c:0e:88:ec:1a:51:2b:7d:
                    86:6a:ca:78:4f:17:c4:7f:c8:53:25:6c:c9:a1:c2:
                    f4:d3:01:fd:fb:74:be:da:7d:28:a4:f1:d8:d3:42:
                    f4:72:b2:14:6e:c0:0b:87:6a:88:ee:86:7d:e6:f3:
                    48:f4:29:38:a7:31:b4:42:34:8c:18:44:be:44:06:
                    33:89:b2:b8:0a:62:36:78:b7:7e:5d:d8:40:ba:d8:
                    d8:61:88:e2:81:c3:88:e2:22:74:e3:fe:45:29:4f:
                    c5:0b:41:d3:15:8c:64:d2:97:f4:5f:d4:36:ea:b0:
                    cf:50:b5:ec:dc:87:40:ff:cd:57:43:b7:47:7d:38:
                    32:0f:a8:48:74:a4:42:ac:e7:9e:8e:5a:4c:b0:08:
                    ab:aa:b4:57:6f:d3:97:50:87:ee:6b:c0:f1:31:92:
                    a5:29:04:88:5e:cc:af:ca:e2:8d:c8:52:8b:1d:6d:
                    6e:21:75:be:e3:f7:1c:29:1e:4c:f1:b5:d4:f5:5c:
                    62:f3:12:3c:57:8c:9f:c7:11:6a:d6:0e:16:83:68:
                    d1:09:1b:1f:03:f6:08:b0:61:23:12:ef:2a:e9:e6:
                    ee:cf:11:fc:ef:72:1d:29:e3:e8:20:1b:c4:7b:52:
                    b4:63:be:a0:63:86:01:18:13:2e:62:67:fb:f8:e1:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:10:94:C0:E9:24:25:83:03:2C:56:30:89:9B:A5:E2:28:EF:A4:3C
            X509v3 Authority Key Identifier:
                keyid:1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:61:0c:c9:a2:4b:f6:e5:2b:bf:5a:50:1e:db:cc:32:8a:0d:
         16:86:67:26:cb:1a:40:75:d6:b9:0a:87:75:9f:b4:39:c8:ac:
         f9:95:d7:75:23:de:b5:0d:35:63:bf:6f:fa:64:86:80:31:98:
         45:3c:9c:d6:76:69:4b:e9:e5:96:28:a2:4a:61:53:6d:fd:cb:
         80:36:ad:f3:63:55:05:1b:ad:bb:79:5c:3b:f9:01:05:1b:04:
         c8:18:75:c8:3c:c8:13:ba:2c:12:44:74:0a:3a:dc:1f:0f:bd:
         1a:43:32:e3:7d:88:78:3f:34:8d:32:1f:59:26:8b:04:38:13:
         74:3d:1f:de:ef:a5:1e:fe:1a:57:fd:ba:87:26:75:ee:5e:cc:
         89:dc:9d:6e:f5:c3:29:3f:14:30:d6:87:22:d0:2d:a1:67:b2:
         2b:23:a5:8e:8f:19:6f:ff:d5:23:b3:4a:64:c3:22:25:cb:fd:
         c7:02:fa:c7:d6:ca:a9:e8:07:c8:77:cb:1b:3f:90:e8:41:e0:
         28:6c:02:8b:c4:c3:fc:f2:01:9f:3a:9d:b5:ad:54:6d:29:88:
         d9:12:c1:02:72:49:8d:11:2f:f9:d3:d6:34:f6:82:07:a6:7b:
         c2:b9:d4:49:71:63:e3:49:a3:8d:c0:da:ec:d6:b2:29:62:4c:
         e6:fb:48:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----