Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File:                     9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier:          djJcTRZXqyOqdnhp5a+XJPuI+61cnHoT8XT7z2ZXB0A=
Subject key identifier:   EC:13:1E:E7:85:68:29:B9:23:CF:B5:A1:6E:8A:72:26:0B:4E:2B:B5
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer:       /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial:       01962DF3DECCA43782085400048F5D469FF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number:          0C16
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: RkmWH4Myt+AgMWDYbxT62Wvuv4LaEXxUQ75NkOFvdZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:de:cc:a4:37:82:08:54:00:04:8f:5d:46:9f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=ec131ee7856829b923cfb5a16e8a72260b4e2bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:43:fa:f1:f8:7a:c6:5d:fc:63:be:08:db:
                    37:4b:ec:bc:d1:f1:f1:78:3e:6b:30:17:9a:ae:3d:
                    ee:bd:c2:19:cd:eb:30:e4:5a:ba:de:c9:0a:e0:53:
                    bd:64:f6:81:e4:12:69:ca:fc:ed:0f:0a:a9:0a:b3:
                    47:f7:75:f0:d5:50:8d:28:6e:3e:a7:7c:80:4e:a1:
                    a9:5e:c5:6a:76:91:a2:b1:df:98:79:18:6f:01:de:
                    d3:36:06:81:25:8e:79:72:f8:0b:d6:e5:c6:18:29:
                    c5:56:e1:f5:57:99:65:52:49:9d:ca:8a:a0:be:44:
                    9d:76:6e:fc:7a:ca:f2:e6:94:c9:5d:50:79:b1:1a:
                    81:3f:5f:d2:4b:7d:69:f8:8b:63:28:c2:95:5c:e2:
                    e9:95:38:e8:9e:29:af:c8:d7:96:76:25:7a:c0:05:
                    81:fd:6a:9e:7e:53:59:78:53:27:87:6a:b5:cc:b3:
                    25:7a:68:a3:e1:fd:75:06:8f:96:16:32:4c:f8:b3:
                    38:70:fb:a3:f3:e2:d0:3b:62:ef:11:19:1d:7e:8f:
                    3a:84:a4:88:b2:0e:50:21:5c:d5:b9:94:9a:88:29:
                    63:91:f1:98:a6:11:ea:92:5b:c5:cd:23:ab:82:0b:
                    0a:3d:c3:b0:b3:33:84:e4:78:47:aa:63:2e:10:8a:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:13:1E:E7:85:68:29:B9:23:CF:B5:A1:6E:8A:72:26:0B:4E:2B:B5
            X509v3 Authority Key Identifier:
                keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0a:41:df:b2:20:b6:a9:f8:73:24:f6:6d:dc:b9:e1:b3:71:
         3e:ba:91:6e:29:e3:23:ab:c4:d4:54:45:2e:50:91:c9:e4:5f:
         82:1b:38:d7:89:1d:5d:d8:26:51:63:6c:a2:3a:a5:a6:4c:55:
         91:15:85:b8:55:fe:f6:3c:5b:b1:90:8d:f8:4b:22:87:69:4f:
         5b:dd:1a:28:24:04:e4:5d:7c:1d:9c:70:5d:c3:8e:d7:97:ca:
         5d:60:d7:94:b0:2a:6e:b2:58:f1:e9:a9:dc:0b:1e:eb:ae:62:
         36:dd:6a:96:f1:d0:b6:d8:81:5a:58:cf:c0:97:c5:5f:ee:40:
         cb:2e:bf:4a:57:3e:0c:2d:1f:17:77:22:a3:25:bb:fb:53:50:
         ae:00:b1:d3:03:5c:b8:53:5f:8f:4d:e1:1e:f6:ab:bc:47:48:
         4e:85:d2:49:d1:d0:02:7c:09:1d:cb:07:6b:42:cb:38:3f:31:
         77:a9:51:8f:aa:a3:f7:79:05:17:1b:cf:b4:ef:21:59:e4:1f:
         d9:09:27:28:7d:0f:57:db:10:79:21:48:ec:3c:ec:f5:3e:68:
         f6:2d:b0:14:f5:79:e1:7c:c0:d2:55:aa:85:00:93:a5:cb:dc:
         3c:9f:07:20:7d:01:35:6b:1b:6a:08:f8:12:e1:61:b1:5c:70:
         57:98:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----