Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
File:                     TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft (raw, json)
Hash identifier:          5NbPvELMbRFf0ZW5wl6yDwXFdPzvCg3ZfYKJ0bhSxD8=
Subject key identifier:   27:E1:1D:15:7E:7A:AF:E2:BF:33:67:7B:53:0E:39:9A:5A:3C:67:F9
Authority key identifier: 4C:9D:92:3A:3B:43:41:69:59:57:6B:CB:40:04:16:CA:5C:F6:06:0D
Certificate issuer:       /CN=4c9d923a3b43416959576bcb400416ca5cf6060d
Certificate serial:       01962E98F97FA2657002667278440F2505ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft
Manifest number:          065A
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: TJ2SOjtDQWlZV2vLQAQWylz2Bg0.crl (hash: ICiwXeig+NXSzmS+K4FhHfamBgRnIY0I5rfsy4Igc2s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f9:7f:a2:65:70:02:66:72:78:44:0f:25:05:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9d923a3b43416959576bcb400416ca5cf6060d
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=27e11d157e7aafe2bf33677b530e399a5a3c67f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:24:eb:0c:0f:cb:a1:d9:9c:ce:09:71:a2:
                    aa:63:b4:e6:f5:2a:12:66:7b:5a:08:90:36:bc:38:
                    55:41:45:1c:05:33:af:67:fb:98:82:1b:80:9f:20:
                    70:49:a9:1f:eb:43:d0:10:21:9c:10:e8:1d:69:09:
                    0f:f4:7b:77:d9:25:87:bf:a6:f0:31:23:8a:be:08:
                    39:ba:77:1b:34:9c:0d:52:8b:e2:29:c0:6c:b2:88:
                    81:74:20:d2:ad:79:dc:cc:5b:e1:78:1e:bb:01:4f:
                    b4:b6:58:f9:9c:a5:9c:38:86:17:a4:fe:88:e6:d9:
                    70:86:c9:48:71:b1:27:01:c1:fc:2c:8e:68:fb:ad:
                    4e:ae:27:b7:13:96:f8:0d:0f:b0:a8:7d:eb:27:41:
                    6f:a5:b6:d0:27:3c:d7:cc:e4:9f:7d:69:b4:35:42:
                    94:19:f5:d9:cf:40:3a:04:16:82:a4:39:8f:6f:7d:
                    44:4c:87:60:68:8d:16:f3:1b:f7:82:76:42:6a:cf:
                    21:04:e8:7c:82:3e:f3:b5:be:70:8b:8a:23:3b:62:
                    62:e4:13:41:af:6a:b2:ec:70:dd:4e:af:50:0f:b9:
                    d8:1e:87:ab:6c:dd:06:1f:5a:56:f7:d8:0f:c2:85:
                    81:3c:f9:0d:99:68:1d:98:2e:10:e1:66:45:b1:b9:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E1:1D:15:7E:7A:AF:E2:BF:33:67:7B:53:0E:39:9A:5A:3C:67:F9
            X509v3 Authority Key Identifier:
                keyid:4C:9D:92:3A:3B:43:41:69:59:57:6B:CB:40:04:16:CA:5C:F6:06:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e71c9c-f589-476c-b080-c01db9d53479/1/TJ2SOjtDQWlZV2vLQAQWylz2Bg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:af:b5:ac:8a:fb:cd:79:f4:a0:c2:17:fd:76:8e:36:4c:37:
         78:33:c8:4f:1e:86:60:4e:98:d7:33:35:b3:a0:b5:eb:7f:aa:
         de:9c:f9:2b:4c:70:9a:72:a2:ad:31:34:89:9f:f8:8b:e9:33:
         e8:db:93:ff:55:31:77:b8:cc:a8:a3:02:07:fb:17:16:30:8f:
         55:a4:57:40:70:d6:c5:0f:f5:1c:83:05:40:64:7a:f3:45:a1:
         27:74:a1:9f:71:af:a6:87:fc:88:2a:86:de:6f:55:bc:9f:94:
         cb:0e:75:77:c3:1a:5f:da:44:c3:58:e2:f0:91:3b:46:5d:fc:
         1b:8b:05:68:52:bf:24:20:4e:41:99:6a:d9:a6:79:c6:32:da:
         7d:4f:40:b1:d6:40:d2:49:4b:05:3c:1b:c0:f0:2c:a8:ba:a0:
         4e:5a:d9:1f:43:a9:02:56:38:07:05:53:e3:47:dc:4e:ef:59:
         b5:a8:e1:13:9d:c0:9d:27:d5:91:fd:86:61:1f:5d:33:3b:e6:
         e0:a6:f6:db:f7:68:06:b9:9d:ef:73:95:ed:6e:57:bc:b1:cd:
         67:c8:e6:2f:f1:34:04:17:45:2e:0a:a7:83:6f:3e:bd:6b:82:
         de:e6:6c:76:35:ac:81:a7:83:93:e8:1b:88:44:a9:b4:f1:b1:
         19:a6:9f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----