Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
File:                     1MiI65YKABkAwnleiq-iaPYC2EI.mft (raw, json)
Hash identifier:          vGWn1Z3IBkgdDK9Wrgx/qjKQF5PSI7PjrSWSL6NYELM=
Subject key identifier:   C7:74:E4:A4:10:1E:21:EF:C5:A6:74:BA:A6:15:D2:C3:A9:3C:9E:7C
Authority key identifier: D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
Certificate issuer:       /CN=d4c888eb960a001900c2795e8aafa268f602d842
Certificate serial:       01962E99288246A051AE774B31BCD4051F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
Manifest number:          09F6
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: 1MiI65YKABkAwnleiq-iaPYC2EI.crl (hash: jJGruiZ7wnnYPLUwoyyhfJNHN9nytc7T5O7YpABeGUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:28:82:46:a0:51:ae:77:4b:31:bc:d4:05:1f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c888eb960a001900c2795e8aafa268f602d842
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=c774e4a4101e21efc5a674baa615d2c3a93c9e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:08:fd:6e:69:a2:83:92:83:28:91:e8:8f:
                    b7:f0:83:0b:0c:5c:f9:10:c8:3c:bf:f3:3a:47:06:
                    d6:88:e1:de:31:f1:e5:35:44:e4:55:bc:a2:06:37:
                    01:4c:70:a2:7c:51:91:fe:f9:23:1f:37:e7:f7:dd:
                    0a:88:40:59:50:84:26:31:7b:d3:32:8b:a3:8c:5d:
                    6d:6b:c5:eb:e2:c4:1c:16:87:2b:b0:b5:d1:49:4f:
                    d2:80:6e:4f:74:7d:96:8f:fb:bf:d1:f2:0a:07:d7:
                    33:cc:90:e2:3a:c8:3b:0f:13:e7:1a:e5:44:65:da:
                    12:66:ae:69:ef:76:da:a1:15:52:03:dc:fb:2e:a8:
                    f6:64:8b:94:a9:4b:33:b2:49:ac:1a:39:c1:d7:6a:
                    b5:5a:fa:62:eb:e6:b7:2a:70:51:47:96:e3:be:73:
                    5c:66:b9:a0:2f:31:a0:87:ed:6c:e3:94:17:89:06:
                    86:9e:f4:4c:ca:a4:ff:f5:f3:e7:55:2d:c8:80:c5:
                    08:65:c2:f7:40:42:f4:81:15:e0:41:72:b0:e0:e7:
                    94:ca:08:4b:a0:ce:3a:68:e5:87:2c:26:f0:7a:38:
                    08:b3:0a:9f:67:49:e7:2d:6c:9b:33:37:df:0c:01:
                    ef:1f:5d:ab:9a:2b:af:a0:76:30:fd:07:5e:13:16:
                    51:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:74:E4:A4:10:1E:21:EF:C5:A6:74:BA:A6:15:D2:C3:A9:3C:9E:7C
            X509v3 Authority Key Identifier:
                keyid:D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5f:c5:28:8a:ba:de:0b:14:33:3d:0f:00:b8:91:99:4d:56:
         b6:11:ee:52:fb:41:3d:7a:96:c5:f9:8c:a0:2d:b8:a0:31:ed:
         d1:ab:3a:c0:5e:d5:61:60:56:ca:94:a7:89:35:91:db:dd:b7:
         4b:80:fc:30:11:44:53:e4:b5:42:57:ee:3c:78:c3:bb:66:d3:
         01:d8:ff:c9:94:06:e8:03:0e:8b:ef:37:ed:11:67:d6:ac:50:
         82:02:db:cb:f5:85:2a:43:7f:31:01:d7:92:9f:ca:0e:0e:68:
         a2:15:9c:95:fb:8a:6f:f6:1c:9a:b8:38:0c:cb:76:56:df:48:
         a9:a7:f4:df:93:8a:9e:62:01:91:e2:90:46:6d:6c:05:41:28:
         f9:ba:a8:d9:f1:71:26:7a:9f:1e:c7:2c:50:7b:1f:9d:ff:35:
         23:7d:04:2b:db:a9:f8:45:7f:99:83:87:58:9f:03:ca:ed:65:
         f6:4c:1d:78:41:84:0a:ec:79:8e:3b:13:3f:a6:de:cb:ce:60:
         0d:5d:30:65:2b:29:90:9f:e1:d3:32:f9:5b:38:5e:99:81:29:
         ce:48:c8:4d:18:ac:36:08:f3:ed:65:cb:a4:3a:d0:45:7c:b6:
         4f:b1:c1:14:40:1b:46:7a:19:6a:1d:8d:0f:4c:0d:4f:ad:15:
         1a:7c:66:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----