Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
File:                     mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft (raw, json)
Hash identifier:          f3EknERP14KjLZFbmziDuStZN7qC1bMYsB7+5pshp1I=
Subject key identifier:   BD:1F:79:78:57:2F:BE:ED:F2:B6:A3:4F:8E:2C:71:5A:14:0D:BF:57
Authority key identifier: 9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
Certificate issuer:       /CN=9b134b6e9024064b9057283489bf2c436f4075e8
Certificate serial:       01962E9930CA8D01CC82C65CF3AF0277CE57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
Manifest number:          0645
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl (hash: ZKF/y3lF0RGpvcnrcK4UEmNFRC9Sp3fi4cLH2DSf19Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:30:ca:8d:01:cc:82:c6:5c:f3:af:02:77:ce:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b134b6e9024064b9057283489bf2c436f4075e8
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=bd1f7978572fbeedf2b6a34f8e2c715a140dbf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:e5:be:04:b5:b2:49:0d:56:cd:8c:e3:d7:
                    6f:a3:29:8b:5a:99:f6:bc:e2:33:22:47:92:49:4b:
                    71:d2:40:20:21:80:42:81:75:1f:8e:5e:86:72:64:
                    54:77:18:6e:5e:89:be:c8:21:31:b3:e8:d1:de:aa:
                    2f:55:3c:9f:e6:6a:ca:df:7b:9d:9a:7a:ff:24:78:
                    c2:65:e6:41:e4:34:64:b3:d9:a9:25:c7:b2:71:96:
                    48:ea:61:76:b4:f0:fe:e6:b4:e8:11:da:2f:bd:4b:
                    9c:3e:00:fa:6f:1c:b1:19:61:a7:e4:db:70:b8:ff:
                    a8:67:29:4d:57:2c:12:3d:67:55:c4:31:d5:a6:95:
                    17:3f:5d:39:78:ff:47:93:09:a0:3c:69:5c:a8:ec:
                    8c:f9:de:20:25:69:87:f1:dc:75:1c:6f:f3:ff:95:
                    ac:e2:5d:8c:19:7e:b2:32:8f:70:cf:67:58:71:dd:
                    b3:80:4e:a4:7e:89:1f:df:b3:e4:d7:b2:a3:95:51:
                    83:4d:9a:1a:38:d4:4d:9c:ed:2f:31:90:f7:54:02:
                    b8:3d:6e:eb:1b:e9:66:54:cb:f6:96:f9:a4:07:ed:
                    65:d9:1a:5e:50:ea:c4:11:b8:70:fe:9c:90:6c:b8:
                    cc:90:65:b4:4f:93:9c:04:7a:5e:e7:11:9a:d6:89:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1F:79:78:57:2F:BE:ED:F2:B6:A3:4F:8E:2C:71:5A:14:0D:BF:57
            X509v3 Authority Key Identifier:
                keyid:9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:32:1c:c0:9b:7a:22:0e:42:9e:ad:f4:9f:c8:9f:fb:fa:4b:
         b9:27:3d:af:ee:39:03:15:d5:66:8f:95:72:81:51:22:50:09:
         74:97:f6:ac:8a:a9:11:97:b1:e0:a9:e5:c0:b3:d8:d0:65:95:
         a2:d7:b1:39:6f:f9:0d:a0:06:62:f2:a7:ad:57:a5:19:17:83:
         ef:cc:50:d6:44:5c:d9:2b:32:ed:c7:dc:35:e0:b5:0e:5b:a0:
         08:38:24:f7:a0:8c:d0:99:31:88:95:6a:69:34:b7:34:58:f2:
         79:38:68:3b:07:00:37:5d:69:0c:3f:ac:82:e2:be:c2:20:c9:
         6a:4a:b0:cb:99:84:9c:ba:ae:42:e1:e6:c6:bd:41:1b:a6:3c:
         b9:ce:92:7a:0c:f7:31:15:86:cc:5e:02:43:27:16:fa:00:a3:
         e7:3a:00:f6:51:25:83:47:0d:0c:46:35:04:2e:41:6a:97:d1:
         de:27:32:21:23:0d:98:c3:65:41:af:6c:dd:3d:90:09:49:83:
         b9:09:2b:c5:ea:ee:b6:97:bd:a1:3c:72:12:fc:0b:ad:be:a6:
         58:36:0f:6d:0e:39:87:af:59:a9:d5:79:e1:92:74:b1:20:20:
         3b:0c:90:dd:45:3c:22:32:be:c4:ac:9f:a6:df:d3:56:20:40:
         d2:cd:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----