Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
File:                     i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json)
Hash identifier:          Rbd/rQFECztemGQYm0OSBnb+lNqeOKJgoRG5C2K5eAs=
Subject key identifier:   BB:19:01:55:5E:20:85:DE:7C:F2:47:B7:91:A0:EC:1D:BF:5F:47:A2
Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
Certificate issuer:       /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Certificate serial:       01962DF41AB1912067ADC21103EAF2AB985F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
Manifest number:          09C1
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: 8z7kAZG2vBysj0j5wDS2/CKy6rMo4xmBjqoJS4lb/8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1a:b1:91:20:67:ad:c2:11:03:ea:f2:ab:98:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=bb1901555e2085de7cf247b791a0ec1dbf5f47a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:85:7a:2f:39:39:7c:79:03:b5:34:17:be:
                    a6:3a:2f:9f:db:d4:52:fd:21:bc:a0:7b:44:40:02:
                    b9:4f:69:5c:78:d1:6d:62:d4:dd:04:c3:9b:e4:2c:
                    3c:75:22:91:52:14:4c:36:2c:e6:8e:a7:01:6f:3a:
                    e5:aa:a1:22:93:66:db:9d:0e:0a:79:78:27:0c:93:
                    4c:16:9c:f5:40:02:70:6b:d5:1e:fd:d7:cc:7e:50:
                    5d:87:78:d7:d2:d6:8a:1f:cb:ab:a3:af:3d:a8:cc:
                    21:c4:c5:ed:68:81:d4:3d:71:2b:54:ed:7a:14:d4:
                    8b:17:b4:99:ee:42:e1:65:e3:93:f4:d3:82:1c:dc:
                    38:7b:7d:50:59:19:98:72:d6:21:a3:50:9c:4f:80:
                    b9:c3:19:bb:56:76:d7:9a:a6:a7:af:d3:17:17:8d:
                    dc:d4:58:94:22:32:94:f8:37:c3:43:30:1c:e7:0c:
                    6b:13:6e:72:d7:29:a9:ef:46:11:6c:4e:e7:98:cc:
                    b0:c7:cd:ce:5b:9c:96:e5:f2:d3:d9:9a:3e:50:ca:
                    ad:c6:88:ce:4d:17:59:26:0d:a6:85:05:83:f1:2d:
                    e5:72:49:e0:bc:76:57:69:f1:41:5d:17:74:6d:01:
                    59:34:8e:3a:94:a6:5b:a7:1c:50:87:af:cf:12:41:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:19:01:55:5E:20:85:DE:7C:F2:47:B7:91:A0:EC:1D:BF:5F:47:A2
            X509v3 Authority Key Identifier:
                keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c4:d4:60:8a:f2:f2:23:72:65:18:11:21:20:c5:80:19:60:
         c2:4f:99:10:38:4f:48:9a:bf:d5:8d:a4:3a:0b:c0:a7:21:bd:
         f7:f5:84:58:43:35:b7:df:8d:6d:9c:f5:2c:34:db:26:85:40:
         16:ef:c5:f5:96:30:ff:62:41:37:2d:ed:43:02:10:27:9a:a3:
         6e:00:5c:01:6a:fc:e0:f3:92:68:7c:b3:1a:19:d0:e1:d8:9d:
         52:13:d0:c3:37:1a:50:65:77:86:7f:88:b1:34:fa:01:d5:80:
         0d:f7:b4:27:c6:fe:71:a0:9b:b6:8e:c2:37:26:de:e9:c8:80:
         0b:0a:75:ef:4f:8d:c1:b6:2d:3e:69:1c:3f:86:a8:17:2f:75:
         b2:3c:42:33:72:b1:e4:b2:38:16:96:98:09:32:1a:67:cb:cd:
         72:72:ff:ea:f6:1e:90:76:fe:a6:01:e1:29:85:e9:77:0b:8c:
         02:63:07:cf:ce:65:19:c7:d8:d3:89:9c:52:0c:0a:83:49:97:
         14:e6:ab:8f:06:42:29:3e:d0:d7:3c:43:8c:1a:52:41:b8:5b:
         e4:1c:6d:f2:0f:96:d9:98:3e:65:8a:2b:9d:23:75:a3:a3:e7:
         0f:ba:92:64:16:a1:d3:e2:04:60:93:6b:03:01:26:20:6a:19:
         4a:f0:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----