Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
File:                     9aKrEck1CB9eSaaFyDl49vc9TaE.mft (raw, json)
Hash identifier:          bG0fuBD+oKtSKR1V+J5BjgaKQrBa5/zVWXgG28T5Cj4=
Subject key identifier:   AD:78:EC:B1:57:39:19:55:12:CB:45:E5:9D:41:FB:9E:21:08:48:E8
Authority key identifier: F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
Certificate issuer:       /CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
Certificate serial:       01962E2B3E2F1A6B78EC0F4A2A129BA00272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
Manifest number:          0237
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: 9aKrEck1CB9eSaaFyDl49vc9TaE.crl (hash: tWZHdbPWa3oONvQP8rZO6kLAtCDRaZfHbZfFjW0Fj5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3e:2f:1a:6b:78:ec:0f:4a:2a:12:9b:a0:02:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=ad78ecb15739195512cb45e59d41fb9e210848e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:10:3d:ec:70:34:df:b9:27:70:1f:f2:30:
                    ec:e8:64:cb:2d:cf:8d:16:fa:24:51:f3:0d:4f:2a:
                    37:7b:17:36:6d:ff:68:2e:ad:da:2b:63:f7:6c:05:
                    44:5a:21:48:75:99:50:7d:af:c4:30:9d:88:14:b8:
                    41:e3:82:16:03:65:27:44:cc:71:b6:13:16:09:38:
                    a9:20:ca:af:0c:25:47:8a:07:ec:33:e0:f3:23:c7:
                    0f:a6:1e:70:33:ff:80:3e:23:3e:e3:3f:39:2d:e9:
                    38:9a:5c:8a:ac:e3:6f:be:c0:96:dd:29:79:fa:d7:
                    a4:f3:ad:01:45:67:21:14:c7:d5:3d:8c:f5:69:11:
                    9a:34:da:68:86:be:cd:72:a9:f7:5f:18:ac:51:47:
                    14:68:1b:c9:db:cb:ac:5d:4d:59:ac:46:57:30:df:
                    40:1e:98:1c:b7:ec:ba:eb:e5:ef:35:dd:74:65:ab:
                    50:ff:c3:2a:27:6b:7f:47:4b:c6:a7:95:22:a0:08:
                    1f:c3:82:b6:8c:fc:b9:b3:89:60:2b:bc:b3:ed:72:
                    00:4f:92:19:e0:ce:1c:e4:60:5c:23:0a:22:cd:7f:
                    8f:ac:3e:69:7b:8c:7d:28:4c:0a:44:c2:db:a4:b5:
                    6d:3d:ac:32:8e:a1:9c:70:9b:b3:72:bf:f3:c8:1e:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:78:EC:B1:57:39:19:55:12:CB:45:E5:9D:41:FB:9E:21:08:48:E8
            X509v3 Authority Key Identifier:
                keyid:F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1f:1a:73:81:76:c7:b2:6e:86:bd:9d:a6:8d:4a:9b:d4:41:
         26:f2:eb:53:af:79:d5:d4:5a:74:67:42:62:fa:10:69:12:8e:
         35:39:f2:0b:03:3d:8d:d3:a9:5c:7e:c3:77:f0:1f:66:8e:05:
         13:ee:24:20:ec:00:bd:7d:b3:69:30:c3:6d:ea:4a:d6:59:42:
         2c:e9:4d:a7:83:67:47:90:22:69:35:e7:c9:3e:5f:c5:b8:b0:
         8b:ee:40:bf:ca:28:d9:01:7b:d8:6f:ea:2a:e1:3f:55:ca:da:
         84:5e:3e:d9:6e:e1:7e:6a:9e:4e:0c:26:0f:66:10:a8:fc:ac:
         a3:2f:31:5d:18:ca:86:13:e1:5e:a9:9d:ba:60:b7:06:84:a9:
         b0:e9:ec:e0:b9:f2:7b:96:5c:b2:46:e7:98:a9:2a:a9:b7:2a:
         cc:42:20:0d:af:a8:85:b9:b8:35:8d:9b:de:cf:36:cc:a8:13:
         74:d7:2f:8d:d8:c6:69:e0:b8:d6:8f:8f:e5:01:68:71:d5:d1:
         45:ee:75:ff:c8:9a:8c:77:3d:0f:94:3f:09:a3:bf:f4:6a:69:
         32:d7:be:b6:8c:d6:4f:1c:d3:85:62:7e:0a:e5:07:37:6c:06:
         ee:9c:44:34:91:99:90:bd:a6:55:dc:38:6a:3f:f7:b0:34:23:
         e4:52:b8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----