Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
File:                     ndrXzlnL6NGaA0EfocbJug1CAqI.mft (raw, json)
Hash identifier:          9Gj5Ki1aPOLM/JlZih2u//OEdJ5/PvomhIdR9npwEo8=
Subject key identifier:   76:A9:5A:6B:8A:84:4E:59:72:E2:2B:22:69:A1:88:A4:D8:DA:D6:00
Authority key identifier: 9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2
Certificate issuer:       /CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
Certificate serial:       01962E98C25F4DE6E79DA541401B44FBA4FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft
Manifest number:          085A
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: ndrXzlnL6NGaA0EfocbJug1CAqI.crl (hash: r56yS79TDT/obxIm1rePN82t0fax9vgzMauNebatk3w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c2:5f:4d:e6:e7:9d:a5:41:40:1b:44:fb:a4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ddad7ce59cbe8d19a03411fa1c6c9ba0d4202a2
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=76a95a6b8a844e5972e22b2269a188a4d8dad600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:60:f5:e4:9a:4e:5c:42:a1:57:17:55:c6:ce:
                    77:2c:3b:5b:75:c7:00:4e:43:e6:5c:4e:df:ae:72:
                    7e:48:47:be:fa:11:0e:b7:84:67:e9:bf:61:d7:f7:
                    e5:d1:cd:a1:b9:a5:cb:d3:31:bf:4e:34:99:db:09:
                    cf:0b:d4:b9:f6:1a:aa:8c:16:29:57:37:fd:ec:06:
                    ae:aa:0e:67:35:b3:2d:53:9f:2f:30:84:1c:e6:69:
                    19:24:0c:ba:33:06:77:29:13:24:ec:57:dc:9d:71:
                    eb:9c:38:b4:51:98:f2:d1:a5:d3:cb:0d:47:d0:c4:
                    61:8e:6f:bd:f0:8c:c2:0b:91:7a:bd:54:81:f6:5d:
                    f7:38:04:e8:b8:c1:24:8a:26:e0:90:11:4e:2c:9b:
                    e0:48:9a:e3:c6:7a:80:f5:16:de:2e:a2:a1:a9:1e:
                    98:76:d7:7a:e1:bb:35:c9:f1:9f:00:a9:2b:a6:2e:
                    0c:b5:dd:a9:a1:2f:ab:91:50:9c:db:ce:48:a9:54:
                    20:a3:5d:ca:2b:ec:5d:20:36:1d:b7:82:95:03:82:
                    f0:4c:e0:68:32:35:e2:a3:ed:24:f9:e4:44:b3:57:
                    71:70:63:16:f6:86:85:fb:a4:f6:0d:ce:81:8d:26:
                    dc:84:19:50:71:02:97:72:3f:d9:19:bc:d6:d0:84:
                    3c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A9:5A:6B:8A:84:4E:59:72:E2:2B:22:69:A1:88:A4:D8:DA:D6:00
            X509v3 Authority Key Identifier:
                keyid:9D:DA:D7:CE:59:CB:E8:D1:9A:03:41:1F:A1:C6:C9:BA:0D:42:02:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndrXzlnL6NGaA0EfocbJug1CAqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/50635a-630d-4f64-ac43-cca3528e20e2/1/ndrXzlnL6NGaA0EfocbJug1CAqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f0:c4:12:d5:69:a2:47:93:d7:19:3b:b9:48:26:94:ad:dc:
         51:1c:26:fc:09:3d:76:94:fe:1d:ec:18:9e:e7:ae:ac:33:78:
         f5:7d:61:5b:09:ee:2a:9a:9c:4c:e7:75:88:de:32:c5:25:07:
         64:83:31:b5:15:ef:3e:0f:c2:0a:d1:6c:eb:92:a0:32:2b:c2:
         65:90:31:5b:1f:ca:cf:25:bd:6c:e1:e5:33:3f:6c:5b:83:67:
         0c:ab:d9:63:b8:e6:16:f5:5e:10:42:66:10:b2:a9:0d:9e:40:
         98:a5:71:bc:66:45:a2:fe:41:05:3b:31:b4:64:54:6b:7b:a9:
         6d:5e:03:d2:33:6b:89:08:27:19:c5:5f:a0:ea:2d:6a:19:73:
         7a:68:b3:65:76:da:dc:a5:65:c7:40:3f:53:84:fb:31:4f:13:
         33:f7:b4:f5:7f:04:55:87:89:23:94:9a:c3:60:0f:28:3b:b3:
         a6:95:93:72:31:97:de:83:97:07:da:f0:3f:8b:e1:7d:36:de:
         40:15:6c:bb:34:c1:21:91:ba:c5:df:2a:c6:a4:79:39:ec:d7:
         58:35:67:d2:3c:77:e8:d3:69:cf:47:e2:c6:d3:5c:6b:04:90:
         8e:69:6c:af:54:98:94:10:ab:54:af:14:0b:29:7a:06:27:d1:
         8f:e7:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----