Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File:                     9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier:          ppoVrGCGzoD5L2UeIJmKnAw0hF9ekYkhgQnUr51MDt0=
Subject key identifier:   B7:E1:93:CC:1F:4A:B5:B6:92:FA:3C:33:89:03:7C:8D:58:91:63:F1
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer:       /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial:       01962DF4037076C5708EF4FF1708E5819C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: 5V1gZbB46TC9ACW8pXOCRpTvTfS9pTLktG7CSSdnEDw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:03:70:76:c5:70:8e:f4:ff:17:08:e5:81:9c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=b7e193cc1f4ab5b692fa3c3389037c8d589163f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:4e:90:fa:a4:b5:cd:54:61:d5:ca:1c:50:
                    7f:9f:c5:35:89:73:fe:d2:f0:4b:3d:f2:ed:e6:da:
                    f4:72:d9:96:94:61:f2:f6:16:dd:9c:64:fc:0f:59:
                    51:80:ba:ed:13:68:2f:4b:1f:9c:fc:1a:6c:90:c1:
                    e6:6d:d4:d5:a3:e7:ed:60:35:52:94:01:f2:be:4e:
                    6a:70:0c:6d:e0:84:9a:8e:5e:9a:08:69:cf:bd:3d:
                    5b:e6:02:4b:1e:fc:d2:01:da:0a:cd:5c:a0:1e:c0:
                    6a:50:52:41:c0:a9:75:3c:6d:11:d9:32:cf:31:21:
                    0f:95:bf:9e:58:f2:67:19:93:9c:9b:f6:fe:20:b4:
                    6a:e4:e5:bf:42:7c:65:9e:16:8c:e5:4b:42:26:fd:
                    eb:ed:ba:32:c0:88:5f:8c:99:c4:47:ba:a2:52:bb:
                    0c:4d:d2:70:02:4d:2b:e9:29:fb:8b:34:09:04:12:
                    b6:83:07:8f:06:4f:c4:d5:b1:61:5f:c0:00:59:82:
                    37:cf:2a:6a:ab:09:11:b1:c3:97:4f:e9:e5:40:d8:
                    50:67:a4:56:fb:6e:8b:d2:b0:f9:e0:24:4e:15:47:
                    e2:46:da:02:39:22:5d:ee:aa:e6:95:b6:f2:ec:53:
                    33:b9:1d:d9:33:ef:61:b8:f1:f3:4b:e7:c2:fc:cc:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E1:93:CC:1F:4A:B5:B6:92:FA:3C:33:89:03:7C:8D:58:91:63:F1
            X509v3 Authority Key Identifier:
                keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c0:89:af:6c:16:f7:5c:6c:52:29:02:76:ed:a3:18:16:aa:
         44:4e:f0:f5:d5:5e:d9:96:fb:dc:ee:94:a5:46:2a:a9:b3:15:
         ad:40:89:0f:6d:2a:42:bf:ae:6b:25:b4:88:f1:0e:9e:55:63:
         94:dc:5e:a0:d0:64:48:7d:c5:f8:e2:c6:d8:3b:d3:51:02:35:
         ea:f5:8f:57:ad:ad:36:59:d4:d1:e2:3d:e4:db:23:96:7c:97:
         cf:8a:bc:91:f3:c0:a3:05:64:75:00:88:f3:27:23:86:eb:74:
         72:3a:0e:05:2d:2a:39:53:b8:ba:09:3d:9a:da:eb:01:7d:b9:
         fc:9d:33:4f:d9:12:35:41:c1:9f:bc:69:8d:3a:c7:68:88:51:
         28:5c:00:57:23:e1:88:55:92:60:50:34:09:fe:e3:c7:5a:66:
         b8:e4:93:8d:d1:1c:4b:8b:a3:4d:7c:de:67:2a:40:af:b2:26:
         48:00:f3:27:ab:91:59:38:d9:98:e3:1e:66:c9:2b:3b:6d:3e:
         ae:d3:1e:34:40:3f:be:5e:cf:36:b2:be:e5:8c:6b:59:d1:71:
         4f:88:5f:a8:68:ed:fd:7b:12:28:45:8b:4e:b8:fd:ca:9b:6e:
         70:2b:22:3a:e1:62:01:dd:99:c1:5f:e2:a1:38:db:f3:f8:d6:
         90:50:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----