Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File:                     2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier:          U2ji1TCH0Ac2Da4/erye/R5y7Xs2v2ZrSHyC+k1oea8=
Subject key identifier:   8A:E4:87:24:F8:7E:A3:C2:A8:36:FB:92:4E:AD:35:31:A1:B3:15:D6
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer:       /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial:       01962E992E9C2A8DB3873E1A06B493CB8B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number:          0A99
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: uIgX3ubDqXqwMEv99CRdA1Ca1OTfO+1oumDg34x+BRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2e:9c:2a:8d:b3:87:3e:1a:06:b4:93:cb:8b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=8ae48724f87ea3c2a836fb924ead3531a1b315d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:c5:31:50:32:09:d4:37:05:7c:ea:bb:b2:
                    38:43:1e:65:1f:bc:93:42:c8:39:7b:55:87:0a:34:
                    0f:aa:54:b8:b7:ea:81:2e:b9:8f:67:96:32:0f:9a:
                    40:80:db:f9:c7:c6:9e:05:76:41:fc:81:bc:24:f4:
                    04:eb:81:59:bd:2e:82:58:da:b5:0f:45:b7:90:d2:
                    93:fb:97:8f:39:c9:ea:29:a5:6c:12:f0:8b:03:f4:
                    5a:69:20:c5:b6:8d:74:dd:6d:ab:a8:b8:54:c8:2e:
                    cf:6e:9f:1e:3d:a1:20:8a:c1:a0:ba:52:4f:03:08:
                    be:9f:e6:88:9b:f0:55:6f:cb:67:cd:34:4d:3c:f3:
                    07:8a:80:63:91:c8:1f:e3:c4:05:d2:95:02:18:c9:
                    1c:9d:05:d8:ee:0c:e9:e0:98:f2:1d:af:dc:ad:04:
                    26:63:20:63:df:65:77:2f:05:ee:9f:5d:c7:f9:04:
                    af:84:43:18:9f:a9:e4:ef:79:6d:0f:17:8d:d0:96:
                    02:b9:b7:7f:43:e1:3c:db:b0:32:b6:03:36:20:33:
                    86:49:a5:a0:7d:2a:d1:0a:0b:a9:bf:41:23:3c:d9:
                    40:20:04:d8:99:61:fc:6b:16:c9:cc:f1:f9:a1:10:
                    31:53:30:75:d7:18:56:e8:4a:57:63:18:13:ef:61:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E4:87:24:F8:7E:A3:C2:A8:36:FB:92:4E:AD:35:31:A1:B3:15:D6
            X509v3 Authority Key Identifier:
                keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:01:5c:1f:43:80:f5:7d:b9:c1:22:0e:15:07:7c:d4:5a:
         b7:43:49:f5:5c:c7:6b:5d:82:95:e1:c6:3b:db:4b:d6:f0:a2:
         eb:a1:83:03:bf:ad:67:c5:cb:50:82:93:3d:f8:fc:ee:30:fa:
         02:53:ec:0d:60:c3:2c:e6:5f:fe:33:39:9d:28:ee:58:76:8f:
         1f:fb:69:ab:de:a5:2d:4e:cf:37:36:85:cf:aa:ac:70:d9:84:
         20:e3:f9:35:eb:08:30:13:84:74:d7:14:7e:3d:12:99:1d:7b:
         89:0b:61:2b:f9:8f:a3:67:0d:c0:9a:5f:1b:d3:1e:1e:06:dd:
         5f:bd:da:3e:f1:21:a9:8d:90:7c:86:0e:c9:00:a9:36:e7:61:
         50:46:a1:4b:88:c8:e8:82:98:af:fa:1a:d0:a3:62:f7:13:36:
         4c:fa:d4:5e:64:1d:14:41:44:73:29:de:ec:93:98:68:e2:ce:
         53:80:09:27:07:53:e4:89:d3:a4:92:7f:ed:72:7c:9c:89:e2:
         8b:71:a5:87:9f:70:87:e0:dc:d6:1d:7d:be:ba:e1:fa:07:8e:
         f7:ae:a0:1a:e5:74:ae:7d:06:41:3d:7b:73:84:dc:61:df:20:
         54:a2:cc:c0:44:8f:d8:eb:01:74:87:de:a4:36:ad:2e:89:7e:
         67:fa:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----