Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File:                     9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier:          CaxipjRjjpkF+dFSR3Ghukp2r8OWJNJkSiwdA008pTU=
Subject key identifier:   10:FB:C2:12:34:0C:4D:5E:DE:B9:54:8F:DC:D5:53:04:43:9F:DF:06
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer:       /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial:       01962F3DA0A8671C21730C137603A8DB02D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number:          01E9
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: tvBnd/16tOBt1HqE8SX7v8niEsEMn7sATzCOG9bZgko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a0:a8:67:1c:21:73:0c:13:76:03:a8:db:02:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=10fbc212340c4d5edeb9548fdcd55304439fdf06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:65:fa:8e:91:c8:e0:68:c7:61:f6:0d:12:
                    03:10:28:be:03:d4:3c:af:b9:76:39:90:e8:af:46:
                    18:ea:45:c2:a4:71:3e:21:c0:d8:3d:0d:ad:97:f7:
                    c2:5a:dd:43:3f:bb:85:98:9e:5f:b9:3f:cd:62:77:
                    0a:a3:7f:4b:3b:e3:6a:5c:80:b9:97:09:ab:5a:22:
                    35:6b:9a:21:1e:14:60:c4:3e:e7:69:75:87:da:99:
                    01:12:78:a1:86:d7:63:85:85:8f:a6:37:ef:af:22:
                    60:16:a7:a2:aa:f2:2a:03:50:69:87:98:f8:f0:23:
                    21:d8:e6:5f:de:43:17:e7:4f:87:24:c5:80:31:d7:
                    95:c1:d6:bf:b4:ae:e8:02:5c:a9:d3:c3:23:30:e5:
                    e7:12:66:a3:a1:54:7f:1b:12:67:42:ea:df:50:2c:
                    5a:fb:4f:b2:60:f0:b6:ad:a4:ff:a6:7b:96:ab:3e:
                    d4:4e:f8:42:a2:f4:52:21:a2:df:89:d1:97:07:a6:
                    ad:7e:47:de:ea:b0:8c:b6:1e:8b:9f:aa:42:0c:d4:
                    f1:e9:c0:42:15:6b:7e:60:bf:03:6f:d1:2c:1f:e6:
                    95:c3:17:f2:36:94:78:28:56:19:7b:8b:71:59:d0:
                    83:45:87:38:c7:b5:f0:7b:6f:49:56:ab:a8:ff:b1:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FB:C2:12:34:0C:4D:5E:DE:B9:54:8F:DC:D5:53:04:43:9F:DF:06
            X509v3 Authority Key Identifier:
                keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:35:75:e0:dd:52:7d:88:d5:ae:6b:35:2a:d1:a0:d0:26:8e:
         e3:2d:9b:fa:f3:d7:ad:8f:ae:26:77:aa:12:b6:03:f6:46:7c:
         93:51:fe:5c:bd:16:d2:bc:7a:fa:ec:cf:47:bb:4c:b3:69:58:
         16:a4:a3:8b:74:89:52:b4:b4:d9:d1:d8:44:55:fd:f4:cf:8f:
         b0:b8:79:71:b2:cb:d8:f9:c6:bc:36:f9:73:50:ef:88:58:08:
         63:6a:f0:fb:a0:95:18:f1:c3:c7:a3:35:f5:10:95:ca:bf:d0:
         35:19:73:0b:11:6e:6b:92:fe:6c:ea:1d:5e:79:1a:ee:6c:a5:
         46:d0:77:f2:28:f2:49:c1:1c:a3:9f:38:2a:25:11:2d:b4:0d:
         fe:a7:ee:33:47:6f:cd:9f:7c:34:04:ce:1b:62:4d:03:0e:c7:
         1a:13:ee:49:8a:18:43:ad:09:1b:30:51:4b:8c:a4:93:78:dd:
         11:09:1c:fc:97:1c:4e:fb:ce:58:f5:96:e3:5f:4d:ce:56:ec:
         fa:39:96:89:a8:0e:cf:da:d9:7f:07:f6:56:fb:0b:99:39:10:
         98:e5:ad:73:f5:85:b1:b0:04:e4:6a:e6:5b:a3:03:bf:84:06:
         2b:65:69:15:c5:fd:c7:bf:7c:97:92:89:06:e1:30:7f:71:80:
         06:f7:df:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----