Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
File:                     mupW9uHBw1kAHsImfvD-4bRW3f0.mft (raw, json)
Hash identifier:          e/NJZ9hY/Zu6p+EyJlf622rodJRt0UtfxO6qOzNIae8=
Subject key identifier:   BA:10:BF:46:BC:21:1C:4A:4A:6D:83:B1:B3:3B:02:0A:58:D6:ED:83
Authority key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
Certificate issuer:       /CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Certificate serial:       01962E99D9646EC8AD605EF3ED4F8A3BE610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:36 +0000
Files and hashes:         1: mupW9uHBw1kAHsImfvD-4bRW3f0.crl (hash: jWnAxzyVC4vQXthlQhyFSCxug/vasED6qJ59bASay0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:d9:64:6e:c8:ad:60:5e:f3:ed:4f:8a:3b:e6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
        Validity
            Not Before: Apr 13 10:02:36 2025 GMT
            Not After : Apr 14 10:02:36 2025 GMT
        Subject: CN=ba10bf46bc211c4a4a6d83b1b33b020a58d6ed83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:ce:27:74:e3:24:67:d4:c9:9a:c1:c5:04:
                    48:fc:16:d4:b2:91:4b:d2:06:fc:9e:2d:f7:9b:9b:
                    83:77:66:cd:71:31:22:23:ab:03:e4:16:30:1c:e8:
                    04:0c:82:32:99:fb:9e:a2:33:c5:7e:e4:89:2d:9c:
                    74:33:fb:97:59:ef:1a:6a:fd:89:33:d8:e2:10:97:
                    7f:28:fd:99:b8:6e:82:74:44:09:33:dc:b7:c3:54:
                    03:8c:7b:c1:7a:b1:f2:4f:fa:69:17:47:1c:1d:e7:
                    83:e1:53:49:d3:f6:21:01:d3:a9:ad:d7:1b:e1:15:
                    be:42:f7:e7:2d:5b:27:ec:80:47:c3:c3:e2:6b:6b:
                    35:15:d1:f8:32:a4:5c:98:2c:0e:f1:ae:d2:6b:51:
                    0d:32:ca:5e:33:5f:cc:f9:da:1f:53:d5:a4:7d:88:
                    1f:e6:91:86:ad:df:89:c2:d0:80:f0:8e:ac:a9:46:
                    fa:63:c9:3b:9e:a0:d7:56:38:4f:be:53:70:0a:e0:
                    fd:c2:87:f1:23:8e:6c:ef:44:cd:b5:e8:11:7e:10:
                    12:8a:23:3d:57:8c:a9:9f:08:03:6d:fd:71:fe:31:
                    6e:36:5a:18:de:ab:66:1f:10:81:fc:91:2d:2b:6b:
                    d6:cd:de:34:c4:ce:9e:4d:67:54:c2:c1:fc:b0:14:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:10:BF:46:BC:21:1C:4A:4A:6D:83:B1:B3:3B:02:0A:58:D6:ED:83
            X509v3 Authority Key Identifier:
                keyid:9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:78:99:6e:f8:c6:cd:3c:62:a3:a5:58:b1:49:23:02:7b:a5:
         7b:ac:44:a8:82:44:a3:30:5b:ae:23:7e:d2:96:7c:4e:d7:e1:
         81:a0:96:51:a6:21:93:8f:7a:d4:52:57:46:7b:78:76:17:2b:
         87:4e:35:d0:6e:6c:b5:f3:90:e1:ce:76:1b:53:64:53:fa:40:
         0e:b9:3f:c4:cc:ec:82:81:ee:aa:73:a4:59:e8:0a:bc:ce:b3:
         99:98:3a:1d:fa:e4:fd:c1:51:3c:d3:e5:a0:ca:20:9a:03:e5:
         ea:fd:44:dc:d0:77:08:9f:b7:29:9e:1c:2c:de:15:7d:c5:e0:
         c7:3b:8b:f3:af:88:d2:0d:bb:2f:0f:b0:a2:7d:59:92:81:30:
         23:27:c0:a7:f3:b3:17:b6:7f:da:e6:91:75:83:36:01:5b:06:
         9c:ea:22:2a:f4:8b:20:55:c4:60:38:0f:ee:b6:b4:49:12:b7:
         0c:91:bf:9e:43:7e:6d:7a:00:5e:c4:3a:88:71:03:8e:b8:94:
         10:1e:5c:c5:cf:19:9b:cd:b8:3a:de:85:15:c6:23:ff:27:da:
         0b:8c:9b:e9:26:9e:57:ba:51:b7:c2:4e:76:12:15:81:a8:ce:
         88:b2:66:7a:8e:1b:94:c3:cf:1e:06:5e:89:62:f2:f6:01:d4:
         ac:26:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----