Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
File:                     n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft (raw, json)
Hash identifier:          BGo7LB7ATWGyqSCz7suyB+bTR5Vg0MUJZ9ZgDYnDGD0=
Subject key identifier:   EA:D4:41:30:70:2F:0B:B9:99:5F:4D:64:4F:29:64:65:A3:8F:FF:2A
Authority key identifier: 9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4
Certificate issuer:       /CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
Certificate serial:       01962DF4133578F0B7BE1FFA280A9854B1DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
Manifest number:          0281
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl (hash: hm0lDijhACf7mp0XBg/SUTUyFb9yZQ8gFXwO5RrbLrI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:13:35:78:f0:b7:be:1f:fa:28:0a:98:54:b1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=ead44130702f0bb9995f4d644f296465a38fff2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:2f:87:f9:0b:3e:da:20:e6:a9:ba:f1:e6:
                    9f:01:33:e7:3f:04:2f:05:59:3a:d2:84:4d:ba:a0:
                    69:80:03:7d:39:95:f4:33:71:76:d2:29:b5:49:b5:
                    42:c9:09:8c:e9:c7:fc:03:86:83:1b:24:fb:40:96:
                    03:01:8a:c1:30:aa:c4:35:c9:cf:0f:fa:ea:68:68:
                    00:20:7e:7a:5d:cf:ea:64:5e:92:04:bf:e7:f5:0b:
                    81:97:d4:4a:42:22:82:8a:bb:5b:93:19:a2:82:a0:
                    95:b2:11:3c:ff:8d:db:35:fe:7a:1b:7e:e2:93:0a:
                    98:3b:2e:81:d9:4a:61:2d:bd:96:76:d3:9b:d6:3c:
                    af:b7:b5:c5:d7:a8:44:53:d1:e3:95:49:be:d9:3f:
                    a8:1d:2d:c8:72:38:9f:cc:88:f3:d8:af:6d:b7:b5:
                    dd:b5:9b:b2:f0:e2:d1:de:c2:26:d0:a7:c7:b9:d9:
                    34:9c:7c:98:75:74:65:4c:24:3c:ec:ab:e0:f8:69:
                    9e:1e:a0:67:d9:5f:85:82:dd:3c:30:da:60:38:3b:
                    67:21:69:fb:19:28:41:9a:14:fa:ad:b4:e6:3b:8d:
                    75:3c:4f:21:37:69:65:fe:43:bc:e8:7c:c0:ea:64:
                    37:62:88:c5:b7:de:b0:91:07:c5:a5:3c:bf:6e:66:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D4:41:30:70:2F:0B:B9:99:5F:4D:64:4F:29:64:65:A3:8F:FF:2A
            X509v3 Authority Key Identifier:
                keyid:9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:69:dc:f1:f2:18:3a:a3:40:15:50:b0:29:e0:31:ab:67:47:
         a6:39:17:fc:f4:c9:25:ef:c6:aa:ae:a9:a7:ca:ad:63:5e:b2:
         da:10:71:35:04:b8:27:17:b7:70:e9:63:e2:1d:97:13:63:b7:
         a6:51:fc:35:97:2f:99:eb:94:d4:19:93:b8:03:2c:2c:b4:e4:
         ee:03:11:42:70:45:87:52:2f:e3:b7:8b:fe:06:37:55:09:bd:
         c8:2e:b8:f4:4d:bd:27:23:f0:43:06:d1:f5:30:36:37:6f:07:
         72:a9:ab:21:26:f1:7d:fe:9f:4e:da:96:44:da:8c:4a:43:e8:
         9d:be:67:14:e7:01:b7:ba:1b:41:02:8e:10:32:a9:39:d9:66:
         38:b8:af:5b:b6:08:bb:08:ec:4f:d6:1d:5b:f8:07:6f:f6:81:
         4c:38:31:57:0d:53:75:5a:8c:65:94:2e:eb:dc:b9:4e:9c:13:
         0d:b8:96:bb:d1:45:a0:10:7e:eb:cf:91:66:5e:79:f3:1a:fa:
         39:47:a5:8e:98:2b:c9:8c:43:e6:07:bf:a8:ac:58:42:03:80:
         b2:34:8f:e4:d0:fe:dc:99:c4:c9:50:e1:20:91:eb:e4:44:ae:
         61:1d:b4:54:03:e1:aa:21:a5:ef:0c:c8:8f:48:d2:94:bd:35:
         5e:2d:53:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----