Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File:                     kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier:          Crm7KLdZmQLRn2305KUNGb9Ylfk/GckB55Xh1P9mwM4=
Subject key identifier:   15:B4:F8:1E:41:78:2A:39:EB:30:20:C6:2F:B4:FC:D3:6B:7C:0C:2F
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer:       /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial:       01962F0640FB3C5A299679A2DE87DD909EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: ZiPKUiRi0jX+jubycXvrGaXvT8Y2YYgYDC8kwduSqO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:40:fb:3c:5a:29:96:79:a2:de:87:dd:90:9e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=15b4f81e41782a39eb3020c62fb4fcd36b7c0c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:aa:d4:24:78:59:de:89:ba:ca:7c:c1:9f:0b:
                    dd:95:c7:af:ac:0f:69:14:4c:ca:96:74:40:8a:fc:
                    98:fd:b4:50:16:ac:7b:11:fd:e0:73:d1:87:6a:b8:
                    c8:15:77:db:4b:66:1e:43:04:01:64:07:ef:36:7c:
                    71:74:6d:b4:5c:cc:ca:54:6d:22:db:6f:a7:05:4f:
                    8f:f8:5f:20:b3:f4:33:6a:e9:76:9f:d3:76:bf:cb:
                    c6:62:dd:40:b5:e6:31:e5:fd:b9:a4:43:df:de:7f:
                    d3:de:c3:bd:b4:f6:39:3c:e6:13:54:83:e0:a8:3a:
                    59:00:84:db:31:e4:57:0a:4e:a9:25:7b:86:84:b6:
                    39:58:0c:48:1a:8e:96:f3:f1:b6:fe:25:5c:ea:c8:
                    d6:fe:6c:32:9d:dc:37:db:20:cf:2a:c8:52:15:56:
                    3f:bc:57:71:ad:fd:2a:13:9f:11:12:3b:5d:4a:bc:
                    18:09:76:d4:0e:b3:4a:df:4c:da:f4:e2:3b:89:a7:
                    35:2c:65:00:04:32:6d:3d:2c:73:47:05:7a:f3:8b:
                    a1:ea:a3:0f:43:21:58:72:98:20:53:0e:98:94:35:
                    be:1f:6e:11:a7:a6:46:5f:2d:72:3e:77:d8:80:7d:
                    00:8c:69:a4:d1:1f:5f:f1:3f:b5:bf:24:bb:b7:fb:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B4:F8:1E:41:78:2A:39:EB:30:20:C6:2F:B4:FC:D3:6B:7C:0C:2F
            X509v3 Authority Key Identifier:
                keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:d5:dc:50:00:f2:91:0b:14:78:e2:f0:f0:3d:63:cc:da:
         ac:09:57:6b:33:83:6f:05:84:22:12:07:29:ff:ab:0d:00:8e:
         2b:32:9c:dd:0a:97:cf:dc:d1:1e:0c:d3:2e:2c:65:18:78:2c:
         66:eb:f0:50:35:a9:53:08:2e:19:08:2b:09:b3:b1:12:9d:be:
         3d:c1:68:9a:28:03:12:12:74:b6:32:28:f3:a5:50:77:d7:7e:
         5b:e7:9b:d1:a5:d4:8e:96:32:72:ae:73:e8:e4:44:80:75:30:
         18:f1:54:62:34:5f:ba:03:45:29:a5:c3:dc:ca:09:bf:05:4d:
         92:64:3a:c6:6a:e6:b7:b1:e2:b0:ce:6b:6f:98:73:22:48:8f:
         28:53:9e:7d:3c:9d:2e:f4:7b:fc:4f:33:b2:19:27:52:68:56:
         10:3f:94:c3:bf:c9:a5:f9:15:0a:76:c3:c0:b8:64:b5:8e:4d:
         a8:a5:bb:1e:2f:78:4b:18:52:17:17:5b:db:e5:de:4c:a0:15:
         dd:3f:b6:08:82:aa:7f:0a:ef:1a:d0:94:3e:d5:14:35:32:3a:
         b8:5e:5d:3f:a9:0c:2b:15:61:44:0f:40:b0:08:52:15:68:75:
         1a:9e:14:63:19:b6:f8:53:40:16:92:6d:0b:e2:4e:69:4b:a7:
         d1:53:1e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----