Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
File:                     k2eWXig08Yk8-oYxpIQHHmotRbc.mft (raw, json)
Hash identifier:          vqAVSeKRUCvd/uqN305+DOvyzfH/O30zIu95Zqe16Mk=
Subject key identifier:   13:D3:DE:A3:E4:07:0E:01:A6:99:B1:87:37:59:39:E6:3F:7C:43:E1
Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
Certificate issuer:       /CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Certificate serial:       01962E9969DCFEF75465A15D6277DF8BC3D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: k2eWXig08Yk8-oYxpIQHHmotRbc.crl (hash: 4ykw+UZECi/fT0iOc2aR8h5Uhwc8yYcSJMob4Cj0T5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:69:dc:fe:f7:54:65:a1:5d:62:77:df:8b:c3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=13d3dea3e4070e01a699b187375939e63f7c43e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:4c:14:35:40:50:79:96:38:6c:3b:b7:9e:
                    2a:bf:54:40:1d:3f:7b:89:a8:14:f8:0c:da:e1:89:
                    d9:6d:04:f3:af:ba:24:56:bd:c1:50:35:25:89:10:
                    a9:3d:0b:0c:4c:10:a4:0a:8f:b3:8a:37:0c:b4:fd:
                    0e:c6:3b:19:1a:dd:f2:9a:05:70:9e:d4:59:dd:b5:
                    43:ea:26:d8:73:74:d5:b2:69:e8:9f:3c:ef:2f:46:
                    6b:d2:d9:59:0d:17:d6:41:df:10:47:7e:a8:3f:14:
                    5b:7f:97:04:3a:e7:74:32:b7:51:a2:1d:3d:b6:6e:
                    c3:e5:9a:3f:c8:eb:d2:b7:5e:52:f8:ce:33:72:49:
                    73:72:e1:c5:5c:13:c7:33:0d:6e:65:69:09:ad:eb:
                    ed:aa:09:d2:fb:c1:d4:16:bd:d8:d5:42:a3:5d:da:
                    77:23:16:93:ef:2b:8c:9d:f8:de:be:56:5c:6e:04:
                    0b:9c:19:b2:67:cf:27:75:cc:44:64:d8:90:e0:3b:
                    70:88:f6:ef:84:94:06:eb:6c:f2:0a:a5:55:f6:c8:
                    42:55:b5:9f:a3:de:2d:b6:a6:6a:2c:a8:18:e9:3e:
                    ba:94:0f:b1:6c:4c:c5:56:78:32:de:43:67:b8:c1:
                    64:95:d4:6e:3e:5d:23:52:cc:87:b1:c1:c7:31:ea:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D3:DE:A3:E4:07:0E:01:A6:99:B1:87:37:59:39:E6:3F:7C:43:E1
            X509v3 Authority Key Identifier:
                keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:11:f1:fa:d3:a9:e9:80:93:c5:dc:5e:df:59:77:bb:86:96:
         0e:db:58:8f:44:9e:e8:80:11:64:46:fb:bc:e9:75:1f:68:09:
         6b:20:eb:0f:68:f9:78:fe:55:4f:53:a6:58:e5:9d:b3:0f:4e:
         c7:31:0e:41:9d:0e:7f:cd:e3:c8:e3:aa:fe:60:cd:3a:a5:6b:
         ba:72:84:73:dd:7d:3b:2e:cc:ce:96:b1:96:c9:e8:d0:bb:c9:
         ea:63:87:a4:1d:7c:06:3c:ee:83:c7:79:96:c3:b9:fd:80:af:
         f5:37:8e:81:a2:75:d7:f7:d6:24:bc:06:28:ab:54:29:00:5f:
         85:a0:39:ec:c3:d6:23:7b:42:94:81:61:1c:0a:30:79:f8:d6:
         05:28:8f:62:a1:19:be:f1:2c:e7:1b:90:46:bf:42:a1:8b:e5:
         e9:4b:29:be:53:13:75:f6:b4:0a:4a:76:1c:20:0e:af:84:bc:
         f4:dd:76:b5:37:e5:62:31:b2:04:2d:c2:a5:74:bb:5c:e8:3b:
         04:d6:3b:f5:3e:eb:25:c9:79:53:f2:61:86:81:5d:94:47:27:
         9b:2c:71:2c:ca:da:a3:3f:13:2f:42:e5:05:27:d8:70:53:3c:
         19:87:64:bc:d2:59:5c:92:91:d3:4f:f8:7c:28:da:2d:fc:77:
         24:a6:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----