Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
File:                     AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json)
Hash identifier:          8zFhvGSB+uONoeyhaxEoWdD5JnTOnbuu40EWgpxTNHQ=
Subject key identifier:   63:1A:AF:F7:7C:BD:B6:68:7F:F0:2F:35:7E:FB:6B:F9:41:2E:4B:46
Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
Certificate issuer:       /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Certificate serial:       01962E990C3C67927D66C8762FE6669021DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
Manifest number:          09C0
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: JbtUC5CR8kB/0Xaq0rYBchA1b7h7qjlctWPCjUoNYH0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0c:3c:67:92:7d:66:c8:76:2f:e6:66:90:21:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=631aaff77cbdb6687ff02f357efb6bf9412e4b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:66:23:d5:44:78:93:4d:ea:da:61:33:85:56:
                    9f:5e:4e:09:2b:c9:8e:45:f4:ed:98:47:a9:9f:39:
                    bc:cf:46:e1:1e:19:2d:4c:ed:d0:93:92:65:49:47:
                    71:29:10:ea:d0:84:75:38:81:68:11:06:26:3c:9c:
                    fe:a0:a7:75:4d:ac:7c:bd:eb:3f:76:2f:66:f2:9f:
                    d6:d2:01:43:7c:b1:60:b0:6e:be:53:09:5b:ed:6b:
                    23:13:70:35:b5:2e:e0:e8:30:04:fa:c7:2f:f8:79:
                    26:de:90:15:9d:4c:cb:62:50:e0:54:85:72:3a:a2:
                    ec:28:1c:60:ed:69:4f:5f:32:07:7e:57:15:36:a0:
                    62:a2:e3:48:49:b4:e3:e3:04:79:95:05:3b:af:f3:
                    ad:70:65:0b:02:a0:89:96:bf:2c:43:36:a8:aa:57:
                    39:f7:aa:2c:4f:ee:c2:f4:13:32:95:2f:64:5e:2b:
                    d4:c7:0f:8f:04:b2:b1:35:2e:c2:e6:06:f3:6b:fe:
                    9f:e9:aa:5b:2c:f6:48:1b:5f:ec:4b:f5:e6:67:5f:
                    f8:cf:a1:14:7b:de:c3:4f:bd:1a:15:f4:0d:f3:d0:
                    11:0b:89:67:9a:df:b7:0e:4f:a8:21:17:f3:bb:36:
                    c5:28:a1:cd:d4:73:e9:77:8c:4c:24:8e:d4:42:f5:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1A:AF:F7:7C:BD:B6:68:7F:F0:2F:35:7E:FB:6B:F9:41:2E:4B:46
            X509v3 Authority Key Identifier:
                keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:db:ae:3a:75:9d:46:6c:a7:49:1c:6a:a7:80:ff:22:92:04:
         9f:9d:fb:e5:cf:0b:dc:6d:af:78:0c:55:2b:49:1b:87:16:d2:
         77:b4:70:48:af:bd:08:5b:9f:f8:27:07:5c:3f:34:9c:77:aa:
         53:4c:db:da:32:df:18:a3:4c:05:d9:9f:69:ac:05:95:3b:67:
         f8:69:48:54:b4:a3:c8:4a:b6:2f:5e:11:ea:77:54:39:f7:90:
         6f:24:41:d8:6a:fe:39:1e:9c:56:95:1e:ec:21:a1:ed:85:1e:
         90:34:c3:36:53:13:88:fd:85:1f:c0:79:91:c8:11:39:bd:85:
         d3:72:97:16:bc:f5:ca:54:6a:ad:40:93:c9:01:32:ed:de:43:
         e6:6c:e4:46:7d:68:da:58:8e:16:39:9e:fa:f1:d9:b6:b4:28:
         8b:1f:e9:c0:ba:2c:55:4c:e4:a2:04:d2:dc:cb:d5:69:ad:73:
         9f:31:ae:1d:85:66:de:2d:a9:10:e3:72:04:77:5d:5d:8c:23:
         6b:63:4b:a8:1f:9c:7e:df:3e:76:35:03:cb:ef:d0:02:cd:e6:
         45:35:06:cb:e4:f5:35:1a:7d:c5:24:b6:00:cf:f4:d9:8e:06:
         c3:54:c3:48:05:44:40:2f:d1:b4:0f:11:b6:f1:df:38:3e:86:
         c1:84:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----