Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
File:                     h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft (raw, json)
Hash identifier:          zRXl1ZizcU4Y4gqa56JK6VVqT0AAqgpm0WbP4CFaBeE=
Subject key identifier:   85:4F:54:91:FE:4E:5C:73:61:CC:F0:51:CC:2D:DF:45:1E:61:49:4B
Authority key identifier: 87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE
Certificate issuer:       /CN=87d49ea28d2591f72e757c7dad300814c27794be
Certificate serial:       01962F0642FA50D28170A00D72C19C35BDC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft
Manifest number:          0456
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl (hash: 8EtF764hjfdrV3gyPRLCQs5xg6nkItPwvLU4bnnSV3Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:42:fa:50:d2:81:70:a0:0d:72:c1:9c:35:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d49ea28d2591f72e757c7dad300814c27794be
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=854f5491fe4e5c7361ccf051cc2ddf451e61494b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:7a:28:32:86:6b:60:a7:27:34:b6:89:75:
                    d1:4a:d7:0d:c5:ba:0a:59:d6:59:56:d9:b5:a5:ef:
                    d1:39:74:19:b8:e1:86:69:1f:87:21:68:4e:91:86:
                    40:29:fe:10:8e:58:78:98:19:d7:07:e7:19:d3:70:
                    97:39:4b:e3:4b:a5:02:01:9d:a2:a8:ea:5b:cc:51:
                    b9:31:22:07:99:d4:7c:fd:e1:cd:d1:e8:20:a4:4c:
                    b8:28:4b:50:92:92:18:f9:b4:4f:65:0a:28:34:ef:
                    64:9a:4a:72:0f:8d:8b:85:07:a3:ad:28:5f:b5:8f:
                    31:f0:0b:ee:6f:61:a2:13:3f:77:73:32:9e:97:5e:
                    df:0b:fa:b1:bc:a2:e3:61:29:65:0c:4d:d3:ea:c1:
                    fb:e0:9f:c4:a0:14:98:9a:f6:a9:6a:50:51:96:35:
                    f4:e6:86:c1:6c:ac:9e:fd:98:a0:b9:a2:f9:35:c8:
                    0e:5d:c6:3d:e3:ba:f6:51:55:be:ef:c9:62:ee:4a:
                    10:b4:cb:8b:8e:21:a9:8d:21:2d:6f:de:19:44:a0:
                    45:63:7d:d9:7a:a0:73:50:0f:19:de:14:43:79:f2:
                    87:1e:ad:0a:ee:af:02:4a:a9:8c:4e:f4:ec:2c:ed:
                    84:b8:6a:cf:83:2c:f1:e0:ff:11:6c:89:5c:e8:da:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4F:54:91:FE:4E:5C:73:61:CC:F0:51:CC:2D:DF:45:1E:61:49:4B
            X509v3 Authority Key Identifier:
                keyid:87:D4:9E:A2:8D:25:91:F7:2E:75:7C:7D:AD:30:08:14:C2:77:94:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9Seoo0lkfcudXx9rTAIFMJ3lL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d0dfcf-58fe-4ffe-bf9f-0fe054f8c781/1/h9Seoo0lkfcudXx9rTAIFMJ3lL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:81:42:b9:b0:7b:36:0b:68:eb:b1:bf:1a:f7:a0:83:39:
         df:6c:22:f4:16:39:76:70:ab:fc:c4:c7:69:dc:03:62:8d:9a:
         2e:3e:60:df:6c:c2:0c:44:ac:cc:b0:40:85:4a:4b:46:af:10:
         b1:47:d6:60:69:ea:64:b1:a6:d8:a7:c7:87:dc:24:60:86:81:
         fe:34:9c:68:49:c9:45:ac:1f:6d:16:8a:50:c7:e5:f9:96:d9:
         90:f6:8c:7b:f0:31:81:6d:c4:eb:3b:d5:9a:df:4a:6d:35:96:
         2b:31:21:d8:f9:4e:83:10:61:67:e5:a0:2f:aa:0b:ae:7c:92:
         55:52:40:6a:97:fc:8e:75:1b:2e:3c:67:45:f1:a0:09:56:13:
         f4:f8:8c:36:d7:83:9b:4a:80:fa:57:d7:ce:ea:f1:25:f3:80:
         53:ae:63:c7:e9:5c:76:aa:61:bf:61:ef:5e:1e:32:67:5e:5e:
         e3:e7:9b:cf:be:f2:49:be:3e:de:2c:8b:40:65:63:57:0d:a6:
         37:c7:00:e6:75:bb:2e:03:89:14:8f:d0:8b:b4:fa:d7:f8:9f:
         ff:76:86:5d:a0:f2:bb:2e:b1:0e:6d:fd:4b:0f:41:95:05:36:
         17:a1:a0:d3:36:2c:36:f4:fc:86:b4:5b:22:67:17:5c:f4:2d:
         a4:63:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----