Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File:                     1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier:          3xlKDosrqY1Ttq5gD1iaMXwnp/NpKXhdXr0RTuy4C0g=
Subject key identifier:   AC:F4:66:D5:52:B6:61:59:82:C6:7E:81:6D:00:54:A2:A8:6F:08:2A
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer:       /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial:       01962E98D1D8331BA14E6AD08D054E984DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: RZjH1QEwch9Y2yXSy7h+S74Hc7pSMDhS6c4rqbuait0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d1:d8:33:1b:a1:4e:6a:d0:8d:05:4e:98:4d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=acf466d552b6615982c67e816d0054a2a86f082a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:4f:62:8e:d7:6b:32:60:5f:83:8e:3f:5a:
                    e8:3e:e3:05:ec:53:a2:7e:90:1e:f7:b6:41:65:c8:
                    a5:1d:e6:08:4e:7b:f5:05:2b:06:fe:7e:0c:aa:5d:
                    82:b5:15:8d:fa:87:d4:6d:6c:c0:12:73:56:c7:e1:
                    90:2f:0c:3a:a3:c7:52:ad:2c:5f:48:6c:86:83:41:
                    c7:dc:ba:5c:cd:a0:0f:32:b6:03:90:1f:54:98:93:
                    9f:0d:da:80:36:17:cc:e2:80:72:5d:24:5e:35:14:
                    f6:76:9b:61:4f:ad:b0:45:9a:75:07:a6:bb:3e:c4:
                    e5:cb:79:c4:32:ba:a6:c5:8a:3a:bb:94:c6:64:e4:
                    50:47:d7:25:74:a6:fd:fd:d6:ef:e5:a8:1b:44:38:
                    b9:df:05:89:a0:e0:d4:af:4a:f6:8a:61:c3:cf:78:
                    3e:2e:9c:71:b4:2f:13:38:28:bb:0f:b1:80:de:dc:
                    7c:b1:fd:65:9e:76:87:3a:f5:c4:43:4b:cb:7d:46:
                    7b:56:16:23:91:ae:5b:52:2b:3c:6a:d0:e9:cb:2b:
                    60:f7:5d:3e:f2:78:75:68:ee:e8:f5:59:4b:39:75:
                    1c:67:5f:b6:46:73:df:66:3d:1d:18:56:57:c6:ec:
                    9f:34:17:9a:e1:01:2b:59:5c:40:10:bc:b8:bb:ae:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F4:66:D5:52:B6:61:59:82:C6:7E:81:6D:00:54:A2:A8:6F:08:2A
            X509v3 Authority Key Identifier:
                keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:36:0e:d0:ff:96:32:a3:ba:66:20:99:e5:05:84:0e:3f:c4:
         e9:6c:d0:ac:60:b3:f9:d1:26:c9:f3:40:47:1f:7f:42:7c:dc:
         46:00:96:a7:31:5b:bd:30:87:56:04:1e:4b:1a:08:7f:bb:f9:
         fd:99:c7:a9:43:09:f2:e5:af:41:e2:db:4f:8c:9a:33:c2:96:
         57:c4:21:38:a2:07:9f:91:46:54:a3:fe:0f:6d:d3:ea:91:7a:
         a6:20:f2:0f:3e:ae:4f:66:99:c4:27:ad:dc:85:18:8b:af:44:
         c8:ee:be:6f:6a:2a:00:f3:42:61:34:55:cc:f8:e8:da:73:66:
         cc:81:8f:0b:d1:35:48:b3:44:30:9c:4d:d1:40:94:11:3f:60:
         f8:15:81:cc:b0:0c:eb:57:ed:a4:6b:42:84:be:4e:b8:f6:f9:
         be:e2:f7:29:f2:19:58:81:2e:04:4c:1e:52:57:82:fc:de:de:
         ff:a0:aa:2b:ee:17:95:8e:58:54:22:25:c9:6e:35:04:1e:ec:
         f9:d3:09:16:62:98:52:26:35:91:4c:aa:a1:e5:c5:da:29:f3:
         13:93:5f:58:7d:5a:a4:6a:bd:70:6c:11:65:8e:00:39:ea:c1:
         f4:17:09:26:9b:ed:93:7e:93:a4:a7:99:99:04:08:94:cf:2e:
         30:f9:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----