Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File:                     9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier:          gQ6c/nGbKDepLzASjosNZTgVHJE8QRyTp754tulvQEA=
Subject key identifier:   80:1E:88:3C:88:5C:7F:D7:72:8F:82:4D:63:1E:C2:E6:07:65:2A:4F
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer:       /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial:       01962F7480415C9BBF21D7A5BC7952B9201B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number:          0801
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: tsPSZ1rpBRPIMQBOyR+vBMi1YcJwyv+SIeUVtgJH1+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:80:41:5c:9b:bf:21:d7:a5:bc:79:52:b9:20:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=801e883c885c7fd7728f824d631ec2e607652a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3b:2d:aa:b9:8c:76:54:85:7c:28:36:19:38:
                    71:6d:51:a4:d1:d2:5e:fa:11:2c:ba:0c:35:b0:f1:
                    04:e2:64:1f:bc:52:a8:12:b6:f0:3a:58:e9:80:fe:
                    b4:95:13:0b:56:4b:5b:5b:22:df:32:24:f0:bc:b4:
                    88:85:a3:51:89:2f:f0:43:bd:c7:b6:83:5f:17:30:
                    3f:d1:49:b6:3b:ed:7d:b7:87:bb:20:71:1a:fb:76:
                    0e:a9:f5:18:22:e8:d5:a6:7b:31:af:44:fb:d5:cd:
                    41:f0:88:06:eb:37:21:66:3c:e9:ef:23:71:cd:81:
                    be:01:26:2b:df:36:09:b1:c7:6c:84:12:dd:76:7e:
                    75:53:63:c7:47:55:0d:c2:ba:1a:81:b8:1b:0b:f0:
                    84:1a:81:1f:38:99:02:e1:39:2e:b7:e5:89:2b:46:
                    d7:02:f2:14:ff:65:f1:5b:3d:8f:84:10:b6:45:10:
                    0e:9d:f8:8a:4c:39:78:97:19:51:38:c5:d7:5e:73:
                    30:0a:55:0d:87:ab:7d:37:8e:ce:36:3a:33:0f:b1:
                    c8:01:28:97:b4:b2:e4:0c:1c:91:24:9a:66:3c:61:
                    db:6b:4b:58:8f:45:c4:52:2d:1e:04:16:07:9a:5f:
                    1a:ee:5e:60:05:b9:91:42:72:96:c2:24:11:74:51:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:88:3C:88:5C:7F:D7:72:8F:82:4D:63:1E:C2:E6:07:65:2A:4F
            X509v3 Authority Key Identifier:
                keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:cd:c5:fe:af:36:43:37:7c:13:33:0f:a9:74:b2:8a:c6:d4:
         04:84:8c:b0:c8:b2:54:8e:53:7f:cb:86:96:1f:a5:73:0a:30:
         b7:04:0f:97:0c:6d:18:a3:f5:c8:dd:e0:74:27:aa:43:00:1f:
         5d:fd:8a:a9:7d:18:be:e5:69:ae:11:3d:a4:26:9f:37:85:dd:
         b4:ed:db:23:e8:05:5b:02:53:49:ea:03:3a:30:0b:52:79:98:
         c4:d5:07:52:ce:7f:e0:75:17:99:7e:64:c9:b9:15:e7:20:31:
         02:b4:d3:8c:53:ec:20:73:fd:8c:34:0a:36:cc:2b:15:45:bf:
         39:fd:fd:f7:b2:3b:0f:a7:34:80:14:59:b3:32:13:75:1a:77:
         d4:b2:6c:34:61:fe:f7:45:53:09:18:00:a0:9f:69:eb:bf:d9:
         44:e3:5e:d3:88:e1:66:aa:79:54:53:07:0e:6a:67:3f:58:55:
         85:52:98:a0:50:1e:07:1e:41:45:0d:d2:d9:03:d2:13:a7:22:
         da:30:ac:df:23:95:20:8a:03:39:4f:bb:fe:ca:82:39:fa:37:
         8c:0d:ea:15:c7:55:f0:15:4d:00:d8:20:79:53:ca:72:95:ff:
         a0:39:fc:6b:d7:13:5a:75:8b:a5:ed:ae:db:09:29:6c:45:92:
         70:e9:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----