Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
File:                     ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json)
Hash identifier:          1rqzZreH/TrkHsAZTrg5a1/HbEIMAZuunwPf7p0MDLc=
Subject key identifier:   98:A7:CC:33:3A:2F:A6:6A:EC:D5:1D:A3:1D:77:41:5C:D2:5F:F4:7A
Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD
Certificate issuer:       /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
Certificate serial:       01962F7488F8632994E4C54EDC23896AF18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft
Manifest number:          039E
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: drTqfptpk7jN4M+ilIJOjTi4lJyHBPcGcRAv5OWdGMQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:88:f8:63:29:94:e4:c5:4e:dc:23:89:6a:f1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=98a7cc333a2fa66aecd51da31d77415cd25ff47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:39:20:c2:e0:3e:d4:e3:a5:47:52:cf:f6:
                    30:dd:dd:f1:03:7c:0d:0c:57:41:06:34:b0:04:9e:
                    1d:c8:f3:07:00:78:a8:ac:0d:13:f2:00:61:60:eb:
                    16:af:3d:f4:13:2a:86:c2:32:ca:65:13:18:28:ab:
                    be:63:fe:1d:ae:b7:52:f7:3f:7b:66:7e:8e:fe:d3:
                    1a:71:c6:08:a0:70:79:03:3b:2a:f9:0f:be:98:b4:
                    88:8a:d2:b0:87:16:84:83:65:fe:c2:ae:b2:eb:fa:
                    e8:26:5c:09:76:fd:ce:65:a3:fb:78:e5:83:0a:5f:
                    cd:28:0f:f4:4f:de:eb:1b:95:29:e8:2c:72:e8:4f:
                    6d:3d:ca:01:46:11:e1:90:12:cb:cd:28:59:8b:a6:
                    fc:42:85:12:9d:94:cb:15:50:54:c8:78:5b:c5:93:
                    d0:6d:58:84:c6:3a:26:7b:d9:fb:a4:7b:56:e6:39:
                    71:b9:2a:a3:c1:0b:1d:97:51:38:0d:d1:28:0d:76:
                    40:8e:9f:1e:37:c3:4f:60:98:f3:ef:fb:86:68:b8:
                    aa:78:22:b0:a5:9a:94:64:77:5e:3d:46:e7:78:16:
                    48:87:24:13:35:7f:1c:f9:b2:9b:56:34:87:5f:03:
                    1a:8d:e6:b3:a0:c5:66:90:48:f2:d0:9c:8d:de:10:
                    41:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A7:CC:33:3A:2F:A6:6A:EC:D5:1D:A3:1D:77:41:5C:D2:5F:F4:7A
            X509v3 Authority Key Identifier:
                keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:03:36:38:76:ed:54:8a:77:56:53:25:8c:06:15:74:c9:a6:
         ec:58:68:9a:c8:d5:69:5f:9f:25:c3:64:15:ff:e9:1a:92:e3:
         54:df:a0:02:6f:24:80:9f:5b:3e:de:c6:5d:85:10:41:ec:b4:
         57:d8:da:a3:12:f3:3d:15:88:d6:90:c7:0a:fa:00:1a:00:13:
         9f:bc:88:fc:4f:c0:25:5f:aa:96:6f:06:67:04:2d:8c:41:96:
         4e:ca:a1:f2:4b:29:6a:ec:09:f3:4c:f3:1b:ec:f9:ec:c9:57:
         a2:62:6e:c7:71:66:30:1c:41:4d:11:e8:3f:e1:51:b6:b4:2f:
         ab:2a:49:c0:71:e7:fa:cb:f1:ac:58:99:4e:49:34:7f:ad:b3:
         bb:d0:33:b2:0a:41:da:4d:6c:45:3f:df:9d:1a:c7:ec:81:b0:
         f3:0a:f8:3a:2e:13:dc:a9:c7:04:96:a2:0f:07:50:4e:4f:ca:
         d8:4d:22:0c:41:ad:f6:1f:3c:fc:b8:e0:56:b9:1c:4f:3c:bf:
         1f:1b:c0:9d:dc:b6:68:2d:b3:ba:15:3d:fd:cc:05:8f:e3:60:
         84:24:34:3f:64:16:f4:fa:91:23:e4:2e:5b:c5:32:fb:55:96:
         94:8a:ab:a2:6b:c7:be:0e:63:c1:c1:1c:3a:d0:bd:fc:fb:94:
         8a:14:74:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----