Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
File:                     9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft (raw, json)
Hash identifier:          z4ELW74gAKnPGH6e3cvYRLpfV8jhPQivaZPdzjC3Xow=
Subject key identifier:   5A:2C:2C:A0:C3:C5:F2:FF:53:04:97:26:54:FA:B4:5A:0D:22:0E:49
Authority key identifier: F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84
Certificate issuer:       /CN=f70592c90b4cb245e54718d7c5799b47d419a684
Certificate serial:       01962DF3ABAB915FEE1163135138FA4A8132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: 9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl (hash: EMPDnlCX1EeLhkrqZOwGZGA1YWINbAXKnrG1nZDZp54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ab:ab:91:5f:ee:11:63:13:51:38:fa:4a:81:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f70592c90b4cb245e54718d7c5799b47d419a684
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=5a2c2ca0c3c5f2ff5304972654fab45a0d220e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:71:d4:d0:56:ff:e8:39:3e:e9:86:c2:1a:6d:
                    01:e7:79:72:5d:9d:cc:aa:85:9c:db:d9:ea:f5:09:
                    a2:c2:60:71:11:85:0c:3a:92:dd:b8:49:8c:c7:14:
                    6f:e6:d4:b2:16:bc:a7:f6:14:cf:58:86:40:60:78:
                    bb:66:93:b6:46:91:a9:99:cc:2e:c2:fe:7f:be:ca:
                    71:f5:18:67:89:c5:a7:e1:5f:6f:77:59:dc:87:fd:
                    6a:96:c5:ba:06:57:08:1b:1f:62:dc:80:b2:bc:f7:
                    ef:58:bf:84:90:fc:80:82:74:52:06:4f:2c:f4:8c:
                    48:dc:c0:92:67:96:b3:c6:73:f8:83:1c:64:45:c2:
                    39:a8:e3:2e:98:1b:b4:8b:22:5b:95:2b:e2:84:af:
                    02:64:7b:f6:b4:bf:56:e8:98:5c:95:a4:f0:e7:95:
                    9a:27:d2:49:ac:a1:c6:8e:56:59:a7:82:04:b3:0d:
                    e5:71:db:24:88:59:05:c7:81:35:99:eb:e0:94:11:
                    6a:f9:5f:6c:8a:0e:b4:90:13:97:cf:75:0c:51:af:
                    4f:c7:7a:45:57:ee:5b:60:0b:58:d2:c8:49:7a:e1:
                    f3:6e:98:ce:65:b7:d2:b7:0d:11:4c:9d:cc:44:14:
                    6e:88:cd:f7:8b:af:11:df:44:c8:4a:51:2c:79:bd:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2C:2C:A0:C3:C5:F2:FF:53:04:97:26:54:FA:B4:5A:0D:22:0E:49
            X509v3 Authority Key Identifier:
                keyid:F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:b1:4d:28:c2:99:61:9c:a5:37:57:5f:ac:96:0f:6e:99:
         ff:f0:19:53:f1:7f:6e:c5:de:3c:2a:f4:6a:94:b3:b2:9a:ee:
         5e:33:74:bd:ed:9a:86:9e:78:e9:47:36:37:7d:6e:65:6d:a3:
         42:24:b8:63:61:9a:65:cb:d6:8c:35:b0:3e:dd:9a:52:79:8f:
         eb:3f:51:8a:d0:bf:ce:ec:46:c1:43:df:26:f4:7d:fd:05:14:
         16:20:c4:cf:9b:6d:24:e3:bb:6c:58:de:8a:23:b8:82:55:f5:
         49:a6:81:5b:6f:84:49:24:aa:a3:14:39:06:3a:f8:96:32:15:
         b0:3b:28:57:07:2e:2d:7e:ef:42:17:e3:7f:3d:22:90:54:c0:
         26:af:5b:f7:a5:ad:0b:89:b9:21:eb:76:52:93:8a:d9:c1:d0:
         d3:41:93:8e:c0:de:38:20:08:bb:a6:87:81:01:d2:23:90:eb:
         d3:ce:d6:9e:3e:83:40:06:2d:be:7c:20:82:66:1b:dc:eb:75:
         f7:8f:58:77:37:60:c9:72:38:20:00:f6:42:0e:e3:f4:36:29:
         9e:90:fe:e3:da:22:fe:1c:8b:54:4b:f2:d3:71:b7:1d:6b:8b:
         71:d0:cd:b9:56:46:ff:b0:3c:db:f2:f3:a4:f4:60:20:e7:12:
         5a:2b:4d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----