Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
File:                     F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft (raw, json)
Hash identifier:          qFluZuN7pZ3YxrUkKPIp5iUh5pmeXzYJaWdOeBVmAw8=
Subject key identifier:   7E:F2:76:12:4A:F1:39:51:7E:F4:AD:0F:48:78:17:30:23:7D:66:81
Authority key identifier: 17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C
Certificate issuer:       /CN=17d873120653b3cfe55172a9dc6057e8ccd0cb5c
Certificate serial:       01962E98D82117563F4B44D45DAC2350D404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
Manifest number:          0C8B
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: F9hzEgZTs8_lUXKp3GBX6MzQy1w.crl (hash: iDtlzzgNZXqUrHjB//3ZygqlLZ+RImiSb4rguOWChIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d8:21:17:56:3f:4b:44:d4:5d:ac:23:50:d4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d873120653b3cfe55172a9dc6057e8ccd0cb5c
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=7ef276124af139517ef4ad0f48781730237d6681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:9a:f8:4d:fc:db:bd:a0:3e:c9:e8:e9:80:
                    55:51:db:16:c1:2a:ab:88:53:9e:93:c5:df:f4:59:
                    8e:21:31:fd:0c:55:11:b7:99:ab:37:b1:34:81:ef:
                    a3:e3:dc:61:fb:ef:08:8e:03:c8:26:32:5a:b0:c4:
                    16:5a:c5:68:23:42:9f:f1:4d:da:e1:4a:a2:cc:94:
                    0c:af:fe:9e:66:e1:99:c2:43:c2:c3:47:36:cd:dd:
                    90:72:fa:c3:a0:f6:2e:f7:c4:8d:db:ba:c7:06:c1:
                    45:39:63:dd:a0:15:2f:29:e6:ed:76:c1:5d:94:d2:
                    99:2c:ad:c3:8c:f7:9a:c4:28:d4:5c:a6:93:b4:17:
                    73:c0:c8:7f:4e:47:cf:a9:55:69:4a:22:2d:b1:9b:
                    f4:88:8b:7a:fc:db:62:33:a1:4d:5a:98:a5:39:f6:
                    b3:c4:39:bb:87:9e:91:2e:e0:de:c9:5d:64:cb:01:
                    7c:b0:00:6e:cf:78:94:4e:ec:13:6a:b6:96:65:74:
                    e9:b3:35:c0:67:d4:86:28:dd:0f:f1:57:b6:39:3f:
                    ab:0b:da:0f:7c:b0:fa:c2:a4:41:59:14:f4:c6:d2:
                    29:6d:0f:2a:77:5d:25:0b:eb:87:eb:d0:d9:48:e8:
                    79:20:f0:5f:76:53:92:ad:4b:f5:18:93:e3:8c:96:
                    fa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F2:76:12:4A:F1:39:51:7E:F4:AD:0F:48:78:17:30:23:7D:66:81
            X509v3 Authority Key Identifier:
                keyid:17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:76:39:b9:43:9f:61:03:8d:9e:c2:cc:f5:8c:6c:5f:dc:75:
         6e:88:64:bf:4b:c3:fd:49:6f:f9:49:4c:0b:6d:4a:ba:47:fb:
         4e:ff:c2:c3:7b:88:10:69:11:e4:2c:12:27:2c:cf:bb:d3:92:
         15:6e:06:00:83:30:a2:01:f6:ec:34:57:10:e3:38:fb:a4:39:
         fd:4c:7c:1f:5a:f0:f8:fe:10:b4:15:c1:35:9d:8f:2f:fa:04:
         65:2a:26:d3:2e:ef:da:bb:e7:ce:5c:97:71:d8:82:aa:54:cf:
         51:cc:eb:bb:22:67:99:6f:39:1a:c0:47:73:57:7d:1e:25:a7:
         17:48:2d:bc:a1:a0:5e:ce:2d:c3:ae:48:b7:69:16:8e:39:b1:
         8a:ce:10:ab:68:a5:39:ca:09:a4:4b:2b:ee:ba:34:81:01:9c:
         bf:66:18:7b:78:cd:13:f3:7b:02:62:14:2a:24:0f:19:24:85:
         16:33:14:db:07:db:32:f4:e5:6c:47:54:4f:94:d2:43:1a:bd:
         41:5e:82:2e:61:2c:bb:a8:20:9d:8a:13:48:ca:37:af:48:5c:
         16:5d:36:20:ce:f2:84:9f:a2:87:8b:d8:0b:c5:bd:a2:74:24:
         28:b8:36:3c:b8:53:8c:4f:50:7b:0f:12:d5:a4:90:99:31:64:
         30:4a:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----