Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File:                     n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier:          qsBPkKZECGBG1Fvj8zqV8GJHQYj5TjTdNgfdnbBeza4=
Subject key identifier:   D7:AE:49:2F:39:BC:BD:42:59:D1:8F:EA:43:A8:02:6B:1B:23:C1:2B
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer:       /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial:       01962E990ECA8C9073E151584DB58C201DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number:          09EA
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: J8VcOQvAf29hJN+ItiGyqlqHjKsfLhPJcworYIDBMrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0e:ca:8c:90:73:e1:51:58:4d:b5:8c:20:1d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=d7ae492f39bcbd4259d18fea43a8026b1b23c12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:63:cf:6e:75:a9:28:7e:a6:9c:77:f8:2f:
                    8b:d1:54:cb:fe:5f:76:31:98:65:e8:10:24:20:e5:
                    06:f6:27:32:a9:e1:dc:05:41:a7:8d:9e:21:52:8d:
                    da:ef:85:7c:57:59:2a:d2:e1:51:a2:0f:6e:79:22:
                    e8:69:2c:e0:cd:e5:a5:88:5f:41:86:a4:61:c4:dd:
                    63:82:de:a0:2d:e4:41:c8:64:3d:0f:ab:b5:f4:bc:
                    fb:f3:e0:d1:68:8c:a8:17:80:2c:6b:93:09:c0:c8:
                    95:34:c2:ca:ac:88:e2:6f:fd:99:fd:83:3c:75:80:
                    33:ea:6a:05:47:0b:f7:88:d9:0f:03:38:6b:21:9d:
                    f0:df:79:e5:a2:13:be:84:99:b3:df:25:87:c6:b0:
                    17:1e:ae:18:74:59:69:ab:ea:66:fa:63:64:68:52:
                    62:35:a0:dc:2e:51:d5:13:8f:0e:2c:75:04:1d:bb:
                    ce:a8:d6:14:c7:57:fd:6b:85:25:b6:b2:df:a8:8c:
                    cb:71:12:0a:e0:48:76:aa:da:f5:04:5b:fd:62:ab:
                    31:a5:f5:28:55:08:b3:00:8d:5f:b6:17:13:38:9f:
                    39:b5:88:9d:96:0e:b8:40:a0:49:ea:f7:85:08:d4:
                    2d:06:13:2a:7f:b8:2c:12:1b:78:23:1f:dd:5c:51:
                    57:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AE:49:2F:39:BC:BD:42:59:D1:8F:EA:43:A8:02:6B:1B:23:C1:2B
            X509v3 Authority Key Identifier:
                keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4e:9d:67:cb:98:4d:8b:e8:c7:4d:08:a2:24:aa:62:41:cd:
         44:78:f1:4d:9e:36:94:a8:c6:df:3a:7d:a1:67:58:7d:db:28:
         45:08:39:a1:78:71:b2:a9:64:d7:1b:81:a4:33:41:e7:48:7e:
         2b:d2:42:f8:58:3a:19:09:ac:37:70:e6:e7:17:dd:fb:e2:d6:
         a2:74:e9:21:47:41:de:d3:be:29:45:bb:75:dc:9b:50:8b:63:
         0e:09:6b:d4:27:df:90:20:58:6d:ae:96:c6:a2:36:b1:73:d8:
         38:e0:9f:3d:32:65:e3:92:0e:18:b9:ef:06:8d:ab:0f:df:c0:
         e1:4e:28:b6:63:9a:5f:2b:06:22:4f:09:0f:af:85:c2:5c:2f:
         28:b1:66:d5:ba:07:b1:ad:d4:e5:32:98:e5:8d:1b:65:5f:66:
         f3:96:30:f2:2f:ed:e6:58:ad:d7:c0:6c:f8:6f:06:fa:42:74:
         9e:89:0c:0a:99:43:23:1b:41:8a:d0:7b:81:4e:a7:ee:81:6c:
         84:83:9d:05:28:be:45:c8:75:d2:5e:7a:9b:52:5a:82:93:ac:
         cb:37:36:06:53:37:06:45:a1:bc:36:47:31:e7:bb:45:e6:c8:
         e4:d4:96:31:81:a5:93:50:9e:d9:3b:c2:af:09:ed:c2:b8:38:
         5a:b9:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----