Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
File:                     9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft (raw, json)
Hash identifier:          c5OIY8gVUd16XTVCVWJNZktFkXHE3uR8vLG1y9EIEzk=
Subject key identifier:   33:09:96:7B:E6:D0:6F:32:3B:98:29:65:B3:83:0D:54:0B:46:6F:04
Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
Certificate issuer:       /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Certificate serial:       01962E991E3953333A374F42BCB4A31A518A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
Manifest number:          94
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl (hash: kawQgTX3PZNMaUEuu8+aK6IwiS7b5uvt8yhXCLvxf08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1e:39:53:33:3a:37:4f:42:bc:b4:a3:1a:51:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=3309967be6d06f323b982965b3830d540b466f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:ef:db:96:c8:73:a6:e0:41:a1:c1:89:19:
                    ff:56:33:33:98:88:df:2b:e5:f2:7a:09:de:9d:b7:
                    97:c5:9d:cd:1e:c2:55:e8:ae:97:dc:66:1c:ca:4c:
                    cd:1a:df:ce:5f:db:a1:a2:0b:a6:83:c5:2f:a2:12:
                    97:c6:00:e3:b2:0f:f1:52:98:94:b0:20:47:56:f5:
                    b3:ca:33:92:9c:de:25:48:9b:1f:8c:be:3e:44:81:
                    2a:91:b4:10:8a:41:d2:89:fc:94:ea:fb:35:f8:0e:
                    67:72:6a:b5:24:71:6d:28:6c:13:e3:0f:f7:26:50:
                    5b:53:19:67:da:c6:bb:85:98:13:e5:2f:a0:a3:86:
                    e8:23:a6:7a:b0:09:83:17:64:c6:7b:e2:fa:eb:0d:
                    54:3d:07:32:29:69:23:3a:26:ba:6d:59:a2:c4:94:
                    5f:29:cd:72:63:eb:69:cf:08:1c:2d:d0:6f:e8:1f:
                    49:a6:af:cb:8c:b4:d0:d2:01:c6:f8:7c:1e:e4:c3:
                    7c:e7:b9:d2:06:8b:bc:5e:42:ca:4c:0b:9d:29:cc:
                    8f:10:35:12:cf:9b:9c:33:6c:1b:b1:ba:e1:a5:0b:
                    b6:0e:26:db:88:f2:8f:85:d2:14:ed:cd:83:35:3a:
                    db:5a:f7:7a:4d:48:d6:6a:a2:d4:b2:f2:53:32:9d:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:09:96:7B:E6:D0:6F:32:3B:98:29:65:B3:83:0D:54:0B:46:6F:04
            X509v3 Authority Key Identifier:
                keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a3:e6:61:35:c0:b3:8b:94:27:d9:5f:f9:c8:25:b1:f8:32:
         d2:ce:67:54:a9:36:1b:42:e4:95:3c:8e:b9:6d:8b:4e:ac:3c:
         91:1b:16:f9:70:cc:16:92:12:52:64:c4:4f:2d:b4:c0:15:89:
         50:8f:a5:bf:1e:a7:94:66:3b:c2:fe:46:2b:b7:d4:7d:f1:e3:
         45:d8:90:62:f6:36:fc:23:0a:d3:27:9d:88:bb:d9:7a:0e:5c:
         89:1a:a4:d4:c1:dc:8b:8e:cb:55:4a:a5:d7:7a:88:71:2a:34:
         93:e6:79:7b:61:8a:03:54:ba:73:13:3e:f2:20:27:c0:35:38:
         88:10:aa:a9:3e:58:7f:b6:2f:f8:7f:59:d4:a6:6f:06:6a:61:
         aa:4d:95:8f:a0:0e:11:8e:99:db:bf:af:41:76:c0:34:9a:78:
         94:cd:37:1e:6d:70:58:24:6a:ec:58:2b:c1:70:4f:77:52:33:
         4a:13:80:0e:24:a7:69:12:65:f8:ae:42:ce:80:8b:cf:fa:5e:
         52:fd:ab:7a:7b:bc:0e:b2:b1:9b:c4:bb:5d:06:4f:38:a7:3b:
         2e:06:bb:ed:8a:e4:5e:d1:8d:8c:b5:72:95:96:ce:67:ac:92:
         d4:04:9b:5a:43:bc:52:7d:a8:32:02:49:fc:03:59:6b:c2:9d:
         94:64:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----