Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File:                     1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier:          bLj97djgdm2wJREgMlS9l+JM6bOkGGmAt/wFH9tTD/g=
Subject key identifier:   A3:03:1F:3E:74:87:AE:25:6E:A2:4B:C4:A7:BE:6E:6F:64:8E:75:AA
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer:       /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial:       01962DF3ADE385EB736112C09BECCC84D2E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: A+L7J5z+eg5tpFvRfXXqwTErFf45t2XP5Q6+jTP5vNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ad:e3:85:eb:73:61:12:c0:9b:ec:cc:84:d2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91084f454139347933876d52634b41a1dd099db
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=a3031f3e7487ae256ea24bc4a7be6e6f648e75aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:34:31:ec:02:a5:4a:8c:23:5d:92:28:7c:
                    12:76:d3:92:a6:ff:5c:a1:fc:d6:3c:4d:20:30:49:
                    19:c7:56:5e:a3:f4:dd:83:6f:4a:1b:1e:4f:c6:ff:
                    89:20:a0:04:ee:3f:94:57:44:67:91:89:7b:91:d9:
                    4f:30:6c:5e:ea:a3:ad:ea:a7:1b:23:51:a3:ec:dc:
                    70:5f:34:67:f8:7b:32:e2:27:f7:46:56:5d:6e:34:
                    a8:91:68:ea:9a:1f:db:39:64:09:b7:aa:7a:e9:f0:
                    4b:d6:ea:05:b1:e0:5e:8a:13:66:9c:92:84:65:ed:
                    eb:54:98:49:86:b5:5e:9f:40:7d:c6:47:b4:aa:af:
                    c6:d9:64:87:d0:75:00:bd:bf:1c:6f:0a:ef:58:ef:
                    bc:9f:26:04:ef:ad:ed:03:20:02:a0:0a:9a:db:ef:
                    28:6a:aa:36:58:48:4e:df:0b:29:df:3c:36:4e:23:
                    b1:32:c7:de:fd:81:34:d8:de:b9:a3:4a:5b:4a:74:
                    2f:ae:49:09:49:fe:a8:38:9d:53:1f:cf:c8:aa:1f:
                    ef:47:49:1e:a6:b5:b5:3b:85:54:b2:de:63:de:7e:
                    af:5f:d4:e2:88:c1:d3:3c:53:d4:5b:9b:b8:2e:28:
                    a8:f1:26:38:59:bb:40:94:cb:17:15:41:d5:7d:4c:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:03:1F:3E:74:87:AE:25:6E:A2:4B:C4:A7:BE:6E:6F:64:8E:75:AA
            X509v3 Authority Key Identifier:
                keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d8:3d:c5:f6:f3:17:4f:ff:7b:db:15:a2:59:b5:f5:1e:42:
         c7:53:01:79:5f:e1:28:b9:eb:5c:45:4c:17:e6:ac:a6:66:88:
         6f:3c:8c:aa:ac:ef:09:3e:5f:e8:00:ed:cc:7b:b2:6f:97:7c:
         48:40:6a:8a:c5:75:bc:ec:28:57:16:4a:1c:06:bd:26:a5:77:
         dc:8b:93:ef:5e:fe:3f:00:73:80:34:2b:36:b2:de:a9:2e:d9:
         6a:e6:af:1d:e3:03:22:ec:87:03:26:32:c9:8f:36:4a:25:92:
         be:08:b8:b8:48:0b:06:dc:4e:ac:88:d6:70:61:0d:ab:84:8d:
         4d:59:cd:68:e6:df:6d:0d:42:ed:de:15:c4:5a:9c:11:47:c0:
         4a:43:54:4e:aa:83:36:18:9b:1a:e2:06:07:ab:df:9f:71:84:
         99:92:15:de:ea:c2:f5:dc:e9:ee:4f:65:d8:9f:a9:6a:46:4a:
         e7:59:4a:64:f5:c8:39:c3:45:28:c1:36:1b:37:fc:b4:ac:4b:
         53:2f:bf:8d:d6:19:ba:45:ff:65:f0:eb:24:d3:4a:36:fe:10:
         d9:4b:89:93:fd:04:46:47:3c:de:de:14:7a:a9:ac:07:f3:3b:
         37:34:58:d7:34:78:19:3b:ff:d0:f8:e7:a3:5a:00:29:40:21:
         3e:e1:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----