Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File:                     _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier:          aqkcI/r/zhaIFDHhjBIDinGZs1MZ9fuCZBwngB6jA1I=
Subject key identifier:   E9:F6:EB:5A:79:75:8E:F6:5C:93:7B:F7:A2:F1:E0:88:F0:DD:31:EA
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer:       /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial:       01962F745F0E753A098D44A87E199996D550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: Yq8+8TuXENDTZ2zCmaW6j/YOmi8sY6Z6Jo+KmJlUURQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5f:0e:75:3a:09:8d:44:a8:7e:19:99:96:d5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=e9f6eb5a79758ef65c937bf7a2f1e088f0dd31ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:e7:de:34:32:4b:ac:11:ed:23:ff:a0:4a:
                    18:93:f6:96:dd:eb:52:d3:d4:02:43:7d:3c:81:f3:
                    6f:1e:7e:43:e8:e9:a0:94:49:e8:af:ac:9d:ff:52:
                    6d:cf:c7:d8:3d:b5:00:5b:43:e4:e6:fe:43:e0:44:
                    5f:79:ef:c9:e5:74:e6:0b:53:71:06:91:0d:30:2a:
                    76:93:37:19:b8:e5:b0:2b:f4:ba:05:29:64:26:8a:
                    d8:6c:0c:1f:a0:ce:1e:ca:ec:f5:ec:41:e9:ba:b3:
                    eb:c0:49:9e:62:e6:54:19:1f:a1:a8:09:bd:b0:3c:
                    83:74:c5:e5:f2:97:d7:06:4b:7a:2c:0c:80:1f:6f:
                    1f:43:45:1a:f7:e6:41:da:55:e6:eb:8f:2b:e9:04:
                    bb:ea:4d:c0:bd:de:93:13:78:09:bb:7c:71:c2:7f:
                    1d:00:e4:58:91:03:d2:49:6e:89:22:20:f3:e5:79:
                    dc:72:01:af:ac:cd:ce:b2:27:3b:bb:9f:35:3c:7a:
                    8e:a9:ea:4f:94:84:3b:ce:2d:e9:ea:ea:0d:dc:84:
                    7a:5f:2f:78:f0:49:a7:69:0a:23:5c:0a:6d:cf:b2:
                    9c:2b:60:6f:1f:5d:49:47:ff:26:fc:06:07:11:2b:
                    1e:1d:57:59:40:d2:f6:0d:0c:ae:3f:0e:7a:7a:9e:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F6:EB:5A:79:75:8E:F6:5C:93:7B:F7:A2:F1:E0:88:F0:DD:31:EA
            X509v3 Authority Key Identifier:
                keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:5e:bb:b2:14:0c:72:a5:c7:79:04:a7:13:2e:cb:4d:01:68:
         17:c2:ba:24:d3:e8:cc:ab:9c:48:35:44:e9:14:f0:8b:c3:69:
         3a:dd:e9:2a:d4:2a:d6:ba:dd:11:81:a6:eb:6a:97:59:df:aa:
         7e:cc:77:0a:5a:52:9f:db:e7:b1:10:ae:0a:cf:75:5d:2d:94:
         13:77:e4:f5:92:3d:9e:18:9b:8d:62:f6:b8:7e:d7:65:b1:f5:
         4a:c4:ac:82:d5:dc:2d:f8:81:cd:ad:e0:d3:ce:f1:ac:eb:15:
         e7:9c:02:28:30:ef:3b:53:e3:ad:58:b6:06:53:f9:0d:9a:3c:
         78:d7:eb:55:18:9f:e2:90:cf:3d:78:54:04:0b:fc:ba:80:8a:
         ab:34:ae:c9:bc:59:dc:88:cf:6f:9a:f2:8f:8e:a6:8b:b4:c1:
         b3:00:7a:87:3d:cf:c7:60:32:5e:dc:a4:cd:61:ec:56:c8:37:
         ff:30:83:9b:ce:75:c0:98:35:5d:f3:1f:d8:2e:e8:14:a7:52:
         df:cb:58:4c:15:97:e1:bc:5e:69:f7:df:88:65:aa:fe:d7:6c:
         39:bd:7e:55:33:b8:40:20:9d:7f:fb:6a:68:30:70:c2:ef:f9:
         a3:fb:04:00:97:09:71:b5:a9:3a:6a:f4:47:81:4e:e9:10:db:
         98:01:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----