Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File:                     1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier:          ho7P5jEcLnTqmkdwSY2lQmUV0LTfQjcyG3/1Ay/q96w=
Subject key identifier:   D9:ED:24:93:2E:A5:F1:C4:70:F1:4C:61:81:8D:4C:30:B7:C9:30:5B
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer:       /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial:       01962DF3C7773150FE8E79DE19A2BAFA7A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number:          0E0E
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: kQ4CtlbLb4zYZ2CuEMw3Z6kKvyFfTGzh6FFJK+o7gAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c7:77:31:50:fe:8e:79:de:19:a2:ba:fa:7a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=d9ed24932ea5f1c470f14c61818d4c30b7c9305b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:00:0f:67:85:ad:9b:f3:9b:a4:8f:b4:9a:
                    da:2b:28:d8:13:38:ae:c0:70:45:c4:cf:e0:0a:af:
                    af:1c:25:38:54:3a:33:61:5b:7d:68:9b:31:ec:cf:
                    c8:1e:c6:5a:d3:80:55:35:47:7e:63:5c:6c:50:7c:
                    70:96:98:cd:ef:73:87:2d:47:8b:c0:93:54:42:04:
                    2b:2e:51:ac:22:25:e1:5c:f9:7b:4d:a0:d2:e3:d3:
                    38:51:d9:33:d7:22:69:43:f0:eb:33:f1:93:7d:5b:
                    be:32:a1:3a:aa:11:ea:c8:1a:57:62:31:4e:88:2b:
                    6a:e6:88:19:3f:97:45:98:0b:51:51:98:48:3d:72:
                    05:3d:9f:f9:5e:91:b3:9a:44:50:ba:32:56:6a:64:
                    f2:97:6a:09:b7:21:d2:5f:6d:4a:63:e6:4c:7e:bf:
                    dc:63:a7:43:10:6a:2b:d4:98:46:5f:14:8d:f1:35:
                    9b:df:12:c1:a6:71:c7:d4:a9:96:c4:06:81:66:1a:
                    d8:80:8b:30:dd:e1:1a:82:5e:38:61:6c:7c:22:41:
                    c3:23:8e:ad:72:76:e3:08:ef:b5:45:cd:62:0f:21:
                    0a:fc:44:03:a0:8d:a8:6b:3d:87:2d:fb:10:6c:bc:
                    fe:36:fa:d1:32:c6:a7:ba:98:49:75:14:16:88:ae:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:ED:24:93:2E:A5:F1:C4:70:F1:4C:61:81:8D:4C:30:B7:C9:30:5B
            X509v3 Authority Key Identifier:
                keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:87:14:5b:9c:58:f3:8d:fd:a1:dc:d2:97:86:0c:53:85:7a:
         fb:6b:57:60:1c:44:e6:9d:f4:a8:a3:b1:e3:fd:16:03:78:ed:
         21:2e:0d:c2:88:47:f1:7c:46:eb:45:b3:25:9a:0c:bc:ce:d8:
         c5:44:c7:c9:c3:84:a9:a6:9c:bb:f6:f8:2d:b6:00:94:e7:90:
         65:ea:62:ca:69:3c:da:50:bf:15:42:0d:0d:af:80:f6:98:fe:
         4f:b8:78:81:51:03:26:8f:81:26:54:bc:cb:de:27:c8:ca:fd:
         91:1b:36:b9:db:0f:e6:ca:ce:23:bd:d5:98:a1:f2:b2:25:06:
         e6:c0:22:25:33:42:46:a2:66:55:93:c3:ec:ad:02:a1:32:67:
         59:d1:19:87:de:49:3c:78:25:db:6e:e1:3f:b6:65:09:a3:70:
         5e:13:b5:dc:5b:10:36:ce:0d:1b:90:ac:e4:c8:8c:a8:fd:f8:
         a1:c0:8d:55:f9:bf:50:80:fd:9b:41:2c:cf:b3:0d:fa:27:d6:
         7e:9c:f9:98:78:de:3b:80:78:38:23:c2:8d:57:37:6e:c5:ab:
         e4:fd:a5:51:8e:33:3f:29:c8:f0:9a:ba:c0:68:ba:ed:45:5d:
         ca:81:e1:69:e2:26:6e:9f:83:55:3f:5e:a5:2c:a5:d9:00:dc:
         1a:fb:ad:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----