Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File:                     0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier:          xuZKnYruHL18033T2gvU+Xc2Yv525Z0yXOgud8BSWxI=
Subject key identifier:   07:17:7C:CD:D9:2B:23:78:75:C2:E3:6C:C1:06:6B:28:22:3E:FE:F9
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer:       /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial:       01962F3D367536CF25BDFC0BB0EE2DDDEE31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: QzYKZLPhkXC4YHD1FfOQ3Sc44CfDP81sLmNaS/104ko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:36:75:36:cf:25:bd:fc:0b:b0:ee:2d:dd:ee:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=07177ccdd92b237875c2e36cc1066b28223efef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:3c:a7:2a:c2:de:18:4c:bb:c8:a3:30:70:
                    b9:f2:8f:6f:5a:fe:81:8e:e1:6f:7e:ec:a1:8c:22:
                    3b:ed:5f:1e:95:01:e0:36:98:6c:88:9a:0c:21:4a:
                    a3:38:d2:f1:c5:c1:0d:c1:36:ec:f4:21:28:89:10:
                    00:e9:f5:2d:98:05:14:b3:06:8b:53:55:05:45:39:
                    e0:60:41:cb:14:a9:14:4f:fd:b6:52:8e:b3:74:f6:
                    1c:c9:70:f9:7c:1f:cd:85:c9:1d:c6:ce:74:30:31:
                    36:6c:20:26:26:19:9b:f3:9c:b2:a8:ca:46:09:49:
                    0b:5d:83:93:51:52:65:1a:b8:34:09:2d:f8:8f:73:
                    3a:eb:6a:c9:eb:0f:75:05:7c:1a:2c:7a:c7:31:59:
                    2f:4e:5b:4d:60:59:fa:61:c1:3b:c0:83:d2:e7:df:
                    53:2e:83:30:90:06:1b:a3:09:16:96:f9:10:54:8d:
                    23:c2:60:88:d2:22:7c:26:f1:5d:a8:02:be:6d:02:
                    e1:56:11:6d:b2:af:b1:f3:1e:a4:99:14:19:4f:9a:
                    e2:ad:63:1a:d8:3e:6c:f8:27:cd:1c:40:9e:8e:58:
                    1b:81:c5:c8:e2:fe:ee:89:ab:53:62:77:37:7e:8d:
                    95:a6:c6:78:d5:83:f5:aa:dc:3f:2e:ad:d8:fb:36:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:17:7C:CD:D9:2B:23:78:75:C2:E3:6C:C1:06:6B:28:22:3E:FE:F9
            X509v3 Authority Key Identifier:
                keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:f2:0f:9d:66:75:75:3e:15:22:12:12:0e:c9:d6:e5:89:
         fc:c0:cc:16:fe:bb:b3:4a:93:b6:14:22:76:46:64:71:6e:10:
         18:70:a0:39:24:cb:69:2a:67:d5:d5:24:91:4c:ae:c0:7f:0f:
         50:dc:1f:b3:9f:7c:05:b9:f1:ac:dd:87:b0:7d:e3:43:2f:8c:
         3a:ac:d0:84:53:df:cd:1a:46:45:74:d7:80:e3:58:05:e7:7a:
         dd:69:cb:08:17:45:da:f8:1e:c7:45:ae:8c:8a:37:4c:e9:2b:
         72:c9:eb:a5:a2:45:e7:bc:c5:9f:5e:34:68:2f:33:f9:3d:92:
         4c:73:e5:4e:9d:8d:a7:bf:4f:b6:7b:07:6d:d8:76:fe:43:b9:
         d6:61:e1:0f:87:57:55:b6:23:9b:8d:c8:69:d1:09:40:c9:c1:
         f6:bf:31:0e:bf:8f:fe:d5:51:ec:bc:8e:bb:c5:e1:68:16:59:
         aa:f3:60:08:22:b5:dd:54:a6:70:1a:3b:6e:2d:7f:5f:7f:dc:
         e3:4d:c5:85:c8:e9:16:6a:d2:4e:90:b5:4f:6b:7f:f5:85:fd:
         14:cf:e4:1a:b4:fe:99:0e:a0:7f:9d:c6:b5:2a:4f:d7:37:14:
         9c:8a:8e:54:f2:0e:5f:a6:1c:81:5c:c7:5b:a3:60:5b:ea:4f:
         73:14:e9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----