Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
File:                     H9nOye0f1PQcCx4w77lshhVTvjY.mft (raw, json)
Hash identifier:          VhSrKRVhOGe3fYSJEt/S4mIkbof9Bbsoe1caaZQ3jMc=
Subject key identifier:   02:93:22:C1:F0:52:5E:B8:21:D7:0B:8C:62:ED:AD:24:0B:AC:2C:7E
Authority key identifier: 1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
Certificate issuer:       /CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Certificate serial:       01962E98E634BB6E038E4EC47A55CC3DA42A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
Manifest number:          CB
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: H9nOye0f1PQcCx4w77lshhVTvjY.crl (hash: h0Oaj/bFcbIsDVyJVAMEEZmQlq8zM7luvGf56jlzbpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e6:34:bb:6e:03:8e:4e:c4:7a:55:cc:3d:a4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=029322c1f0525eb821d70b8c62edad240bac2c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8b:bd:21:89:48:ee:59:43:20:1e:ba:74:d6:
                    48:43:59:ce:8f:60:f9:50:40:57:22:bb:a5:48:e7:
                    03:d8:28:4e:35:43:ee:91:2a:80:e9:7a:ea:0f:d6:
                    0b:33:1c:93:d9:47:43:b5:93:cf:53:85:37:cf:a1:
                    fa:b3:b3:e2:9c:71:d7:4c:79:d5:92:e6:8d:9e:2d:
                    d3:71:50:57:83:f5:0e:59:a6:53:04:45:a2:38:c9:
                    bc:f2:7d:c6:4b:a4:ea:54:48:28:18:49:4a:c2:99:
                    85:35:a6:a8:0e:fd:54:19:7c:35:a9:59:23:a7:d1:
                    0a:01:c9:dd:dd:7e:f5:9c:69:4b:3f:77:84:39:ba:
                    6b:d7:df:41:7a:b1:36:93:5d:1f:55:61:97:23:62:
                    c1:01:80:06:0a:e5:39:df:33:44:51:bc:3d:3a:e5:
                    0f:48:71:a9:11:60:7a:cc:62:ea:35:c2:47:5a:50:
                    67:ce:4d:12:81:30:f4:63:e6:6e:cd:78:f0:93:0e:
                    c4:10:91:19:bb:bd:e9:0d:1d:b5:f6:f5:d8:69:2e:
                    4d:38:1d:5e:3b:64:e0:54:fe:62:4c:59:63:1d:5c:
                    7a:7c:0a:2c:b1:d0:f3:b2:47:23:c1:da:2c:b9:69:
                    28:6c:8c:aa:d0:f9:9e:74:f7:04:84:35:f4:22:79:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:93:22:C1:F0:52:5E:B8:21:D7:0B:8C:62:ED:AD:24:0B:AC:2C:7E
            X509v3 Authority Key Identifier:
                keyid:1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d5:b4:c5:ee:53:ec:29:d5:80:4a:6c:a9:6d:0b:85:d9:bc:
         99:5a:e5:da:45:63:fc:b9:87:1b:0a:65:33:8c:14:f1:17:1f:
         5c:9f:6a:86:ee:1b:90:3f:ce:6c:41:da:d9:66:09:63:f5:70:
         63:ee:f0:77:9c:27:28:a8:d2:1b:51:b0:9e:48:e2:2a:71:03:
         c6:7b:ac:f8:77:a2:e0:65:8b:db:95:71:63:5c:22:a4:d1:b8:
         ac:d5:95:17:31:cf:9b:67:24:ef:98:81:35:a5:e5:84:75:12:
         5b:11:f9:33:8c:cf:2c:d1:28:bb:93:68:a0:b9:ae:33:ac:15:
         b0:6b:05:b6:eb:ee:bc:fd:86:0d:53:b8:ce:3a:e4:22:5f:20:
         a1:1a:ec:69:1a:27:69:d8:8e:96:89:b3:8b:b7:e5:cd:03:75:
         20:94:9b:66:16:01:a3:8f:45:5a:2e:8c:44:a9:8c:d1:bb:8e:
         35:42:57:52:52:8a:ff:97:31:d6:a3:4d:bc:bc:a8:a1:d9:8d:
         54:94:21:1b:32:c2:3b:8a:32:6b:e9:0e:9b:69:d6:87:66:70:
         7a:95:5a:40:54:57:17:20:b9:f3:66:b4:0a:11:0a:d6:0d:86:
         b7:92:fd:9d:ad:21:9c:8b:1a:4e:1d:c6:d9:db:07:31:67:76:
         9c:1d:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----