Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File:                     fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier:          ODntqNsIX8HGxkUD/8qpC2oLQeZymYrCADIlAE4tC+k=
Subject key identifier:   94:22:B4:9D:7C:8A:1B:2D:1D:E3:11:33:14:C0:A9:45:8D:1F:FD:C6
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer:       /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial:       01962E6207B82E6ACA83165549C78C3DBBB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number:          017D
Signing time:             Sun 13 Apr 2025 09:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:38 +0000
Files and hashes:         1: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: pi0f5BkKNvCWm6MhjDC4Vp5de2JssJpe9FQqLzz9XiY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:07:b8:2e:6a:ca:83:16:55:49:c7:8c:3d:bb:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
        Validity
            Not Before: Apr 13 09:01:38 2025 GMT
            Not After : Apr 14 09:01:38 2025 GMT
        Subject: CN=9422b49d7c8a1b2d1de3113314c0a9458d1ffdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:05:ca:82:3d:98:49:f9:97:85:79:fb:2b:
                    47:8a:cf:c0:44:39:1f:33:bc:ba:71:90:f6:99:e4:
                    e6:6d:75:0c:cf:37:6c:e5:48:9f:f9:7a:e4:f6:25:
                    ef:f4:be:e8:15:5e:28:c5:ed:54:4e:5e:8c:a6:79:
                    02:64:2e:7b:d7:08:e2:9a:f3:49:62:87:33:d4:1a:
                    d1:b0:f1:38:e0:5f:fc:25:63:c5:38:ba:78:bf:28:
                    23:67:22:0a:e7:ae:55:21:f3:16:d0:1a:bc:57:11:
                    52:e1:2d:63:86:2c:d3:4e:83:c9:72:6c:fe:a3:c4:
                    39:eb:fd:dd:1d:f8:49:14:3d:31:bd:c6:a5:9b:cb:
                    6e:ed:94:82:e8:2a:55:bd:90:98:c8:cc:e0:a9:59:
                    0e:1e:2f:82:b5:79:88:c5:45:91:fe:32:09:92:e1:
                    f9:60:40:6d:f9:22:80:77:3a:d8:d3:56:29:50:bb:
                    b7:75:32:60:41:01:65:b0:09:b7:69:55:88:a5:13:
                    ab:6f:17:6b:4c:16:54:22:21:18:38:d7:11:db:39:
                    9a:bf:ff:26:44:53:0c:e0:6f:dd:ea:df:ea:b1:67:
                    f2:98:bd:71:c8:fd:00:35:44:2f:e3:ce:77:ee:81:
                    cb:5f:01:35:a0:9c:d8:7a:8f:58:a4:c9:96:01:eb:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:22:B4:9D:7C:8A:1B:2D:1D:E3:11:33:14:C0:A9:45:8D:1F:FD:C6
            X509v3 Authority Key Identifier:
                keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d9:49:7e:e3:55:32:0a:a4:5e:8e:6a:d2:38:47:fa:87:e7:
         cf:5a:eb:21:2d:d7:d6:70:83:32:7e:f4:da:98:33:c1:5e:3e:
         46:ab:28:b4:ad:40:fc:a7:56:a9:42:79:3c:44:e4:f0:47:04:
         83:73:a0:d5:0e:f1:8c:1a:30:1e:24:83:cd:ff:de:29:92:d0:
         00:63:8a:14:6a:b1:99:f5:a4:74:80:b0:85:09:0e:f2:75:db:
         1a:ad:86:e6:1e:be:a4:b8:56:46:ab:4f:24:44:ad:49:1d:42:
         90:77:a7:93:07:c9:45:a4:e1:55:cb:90:51:1d:2e:c8:d4:4c:
         fe:3e:b8:73:d6:6f:86:6d:bf:9d:af:77:71:c1:20:65:44:a1:
         f8:e9:16:90:24:d7:b7:57:84:25:cc:72:c6:51:20:b2:cd:92:
         40:43:b5:8c:c4:72:84:6d:d9:21:06:2d:fe:a8:c9:b7:e3:da:
         7b:ab:17:57:3d:9d:cc:58:4c:cc:be:9b:27:c0:34:99:c1:72:
         21:48:b6:09:57:fb:0c:69:ec:4c:eb:68:2f:84:bd:4f:ba:68:
         0f:28:6c:60:3f:96:a8:2a:1c:74:f1:c0:d1:5b:6c:3c:44:e2:
         b4:17:73:7e:79:57:d8:63:16:04:40:5f:76:52:94:4c:7c:3a:
         db:47:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----