Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
File:                     9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json)
Hash identifier:          fMBz2IbX3qvWmUkvmfZzs8fnHNR9/gMJI6HX4eoGqGs=
Subject key identifier:   7E:A8:FC:F8:0A:8E:1E:10:DB:68:BA:8B:C4:69:6D:29:5E:F6:33:99
Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02
Certificate issuer:       /CN=f54460596d6d532401de313df890366e5376d602
Certificate serial:       01962F07089E1628951810A2F6D1DFF9FA48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft
Manifest number:          04BC
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: K2AT6aQgv92gzmCZsNgHSbD5C1DObfthilcQYG4VdTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:08:9e:16:28:95:18:10:a2:f6:d1:df:f9:fa:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54460596d6d532401de313df890366e5376d602
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=7ea8fcf80a8e1e10db68ba8bc4696d295ef63399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:0a:16:9e:ff:c4:a7:f2:60:67:d2:4d:b2:
                    35:25:82:29:c9:cf:34:e2:96:f1:91:3c:96:3d:10:
                    55:15:4e:66:49:e9:cd:bf:d1:70:b7:42:ba:6b:7a:
                    63:c7:11:76:bc:08:f3:68:8b:1e:dd:77:71:b4:86:
                    3e:cf:9b:17:a4:f8:ae:c1:42:6f:ee:7b:1a:b1:e3:
                    47:dc:61:94:78:bc:30:ef:ea:ff:7d:b0:ef:b0:73:
                    75:e7:c9:7d:ed:e4:ca:22:f7:13:5a:6f:16:3a:b0:
                    ac:54:06:6e:79:6f:5d:35:71:34:fd:40:6e:3b:b1:
                    b1:9e:1e:39:3a:12:a9:24:83:a6:8d:48:3c:c4:e5:
                    f9:11:d8:b6:5a:5b:d7:09:f1:15:c4:ca:99:5e:5c:
                    d3:08:6b:e1:7b:fc:8b:c2:ea:50:f2:4d:10:d4:f9:
                    5f:c2:07:f4:43:d9:5f:c5:6f:20:64:e2:d1:34:72:
                    cd:84:bb:0f:70:7c:86:b3:dc:0c:24:ff:0b:34:b6:
                    88:18:53:f6:ad:86:c9:9f:e1:1c:af:35:9c:0a:31:
                    35:ba:ca:68:53:c1:7a:6a:5a:e8:be:58:d9:ac:1c:
                    af:62:c5:4f:34:82:ff:89:63:22:82:9f:6c:81:e5:
                    e9:fe:d7:bf:64:f9:f6:42:90:91:00:d4:2e:e6:46:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A8:FC:F8:0A:8E:1E:10:DB:68:BA:8B:C4:69:6D:29:5E:F6:33:99
            X509v3 Authority Key Identifier:
                keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f1:c3:e7:8f:91:f8:f5:44:97:58:df:80:c0:c3:a0:bc:56:
         8e:96:71:49:f9:54:25:02:ad:8a:a5:3e:ac:c7:d4:65:81:91:
         af:c8:7a:8c:b1:67:9c:fe:6b:09:a5:88:d5:92:56:d0:1a:e5:
         46:7d:78:1a:e0:88:ba:ce:d9:30:fb:fb:47:4b:e8:13:2c:33:
         d7:8d:96:49:cb:6e:13:0f:b4:00:98:87:ad:cb:27:1b:02:28:
         93:87:0b:5f:5b:0b:7f:68:c7:f5:d4:bb:75:cc:41:7a:aa:97:
         c6:97:4b:e5:97:ba:08:e4:43:fd:a3:58:1a:fb:9c:cf:1d:55:
         c3:b2:a3:38:e1:ee:4e:d6:ea:5d:13:6d:82:8c:b5:97:cc:96:
         28:ce:dd:5e:04:29:33:1a:24:d4:93:07:5c:7f:d1:93:5a:50:
         bc:19:78:60:6c:2d:be:57:d2:1c:05:f4:38:30:1f:76:f6:81:
         95:8a:a2:84:e4:a3:0b:ad:c2:83:9c:6c:2c:e4:0a:21:de:7d:
         29:24:2d:79:fa:de:58:07:71:0b:ff:ab:b9:9a:f5:d0:37:c2:
         85:25:f8:e8:ec:a8:ab:cd:64:17:e9:e6:2a:05:ee:dc:6a:a1:
         fe:84:c7:23:c7:42:6d:92:3a:61:ab:d8:56:ed:ba:76:71:57:
         01:d6:a1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----