Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File:                     249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier:          W8uuZjDtnE2dkPxnkQ/DFhPB9la1+jGAFibjLmmNglw=
Subject key identifier:   EC:3B:11:63:22:EA:BF:47:54:9C:C0:60:1A:56:11:CE:3A:72:D1:1D
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer:       /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial:       01962DF45038CD14CF068B5B33F241531069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number:          05DE
Signing time:             Sun 13 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:48 +0000
Files and hashes:         1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: fXSvCfkieLAm0mPIWPX0KdS1LXwM/0xhDz1HyzLEMaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:50:38:cd:14:cf:06:8b:5b:33:f2:41:53:10:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
        Validity
            Not Before: Apr 13 07:01:48 2025 GMT
            Not After : Apr 14 07:01:48 2025 GMT
        Subject: CN=ec3b116322eabf47549cc0601a5611ce3a72d11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:c1:32:9b:e2:f8:da:14:4a:07:86:87:94:
                    12:c0:c4:9c:e5:b1:19:c8:7f:a2:62:13:ff:a3:4d:
                    98:18:53:e7:04:2a:e1:a8:bc:2a:8e:57:92:91:96:
                    80:3a:bf:2f:37:55:56:78:b1:17:8d:1e:ae:51:da:
                    25:d9:29:97:26:4c:29:f9:fb:f1:91:5c:f1:5c:d0:
                    e0:38:e1:06:35:e8:2f:5d:80:4c:5a:f1:60:6e:04:
                    ea:31:18:71:aa:d3:28:42:73:7b:a7:98:15:a8:c3:
                    85:6b:56:8f:36:6d:55:bc:0f:ef:b1:49:b8:4e:43:
                    5e:98:18:90:3f:0b:3c:39:06:1e:67:30:de:9d:52:
                    21:c8:13:8b:b2:e9:52:bc:95:31:21:96:5a:73:b4:
                    9c:df:1f:e8:a2:ef:be:d9:c8:e5:5d:0c:9b:2f:7f:
                    25:47:77:50:cd:98:69:39:a0:cf:b6:7c:d7:a9:22:
                    d8:9c:3b:6b:60:fa:99:a7:1a:09:44:05:69:c4:1e:
                    69:2e:86:e8:13:be:e2:28:7a:56:3f:36:10:aa:52:
                    6a:3f:c7:43:4b:ba:b9:87:bc:e6:77:8e:ff:52:ac:
                    0d:ea:3f:1d:0a:53:44:83:46:5f:e7:fe:6e:c8:c2:
                    4e:9c:c3:e7:65:b9:06:a6:d6:9c:47:15:d9:94:a5:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3B:11:63:22:EA:BF:47:54:9C:C0:60:1A:56:11:CE:3A:72:D1:1D
            X509v3 Authority Key Identifier:
                keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:04:14:be:5b:64:58:a7:c3:95:77:42:9b:46:63:2f:d7:42:
         8b:34:c5:32:a0:13:1f:50:d1:ea:99:18:da:f8:05:23:d5:fd:
         aa:83:a1:62:bb:5a:0b:3f:0c:25:8c:53:bf:1c:42:9b:c3:64:
         4c:64:97:61:7d:8c:3c:22:ae:82:e2:40:54:d5:70:1c:89:ce:
         03:4f:a1:f8:f1:0a:8a:3a:71:89:39:8b:4c:57:2a:c3:19:51:
         ce:28:49:5e:b0:8f:a8:e9:58:41:58:a8:34:b7:01:48:d0:8b:
         4b:1c:8b:d5:cc:9f:bc:7d:4d:47:d7:25:d9:8a:58:73:58:46:
         de:01:98:a0:0e:a1:9a:33:1f:a1:c9:35:1c:5b:17:8b:1b:51:
         ee:a2:d3:bd:b4:e7:f5:3b:66:94:03:19:b0:61:b6:b2:d7:e8:
         ab:67:0f:dd:5d:27:15:f2:64:d5:93:f8:6f:77:85:6e:83:0c:
         9e:ce:7d:8a:8a:2f:be:24:16:90:08:59:89:56:8d:31:cb:6f:
         e2:df:55:25:e2:87:ca:f5:47:cf:ea:fd:31:c0:ab:f4:c0:8c:
         00:55:0f:71:72:30:57:da:99:bd:2f:8b:48:3c:1b:d5:64:80:
         6a:02:01:98:43:04:02:2e:1c:54:ca:96:d0:43:63:85:4e:a6:
         b1:f3:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----