Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File:                     pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier:          3cyNa+2XzeYtfm3eoFwyMRGE/9dMKhBuCNvzCgfmfdI=
Subject key identifier:   96:0A:F2:52:D0:0E:AB:1D:40:43:EA:34:0E:20:3F:B0:12:54:07:4C
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer:       /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial:       01962E992C0A3397BD4DB556C76DAE39D560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: XyhPs4F5+yLfJIBM6A8kYjqS+LLed48Cn9ZHEHckHpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2c:0a:33:97:bd:4d:b5:56:c7:6d:ae:39:d5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=960af252d00eab1d4043ea340e203fb01254074c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dd:c6:f1:7f:31:0b:c6:ec:72:6f:63:22:85:
                    3c:6b:87:e1:0f:57:87:a5:5d:d8:9b:4d:a9:29:f5:
                    db:60:22:41:0e:a7:a6:6f:90:34:a6:8b:2b:1b:00:
                    e4:9e:2c:27:56:46:cd:14:65:eb:15:81:19:ff:e1:
                    d8:07:9f:a8:c8:d2:a8:61:f9:0e:89:c1:5c:b2:15:
                    89:76:2b:ee:82:87:f3:9d:2f:d0:30:c6:a7:b7:5c:
                    af:28:04:f7:3b:a8:02:61:70:17:27:f2:9d:1a:14:
                    a3:c0:ca:29:17:5f:35:5b:00:ea:ae:eb:df:14:1b:
                    94:7b:21:4e:25:7d:b6:d3:3c:5f:2a:ba:2e:b8:ec:
                    00:93:96:fe:6c:d1:ec:c8:98:f7:78:da:6f:5b:79:
                    f9:b6:06:43:02:62:28:87:36:ba:72:ae:52:53:2b:
                    1b:41:cf:46:f7:bc:1d:88:82:f1:e4:b6:46:a4:f5:
                    b9:27:74:ff:88:ee:85:c1:c7:88:c0:1d:1a:f0:4f:
                    76:cc:52:41:69:31:a4:51:97:00:ae:81:65:85:8f:
                    16:a9:1f:73:b3:b4:35:66:91:e7:dc:20:2c:d6:0a:
                    47:11:18:ab:05:11:3c:ec:77:1b:37:12:b2:3d:fb:
                    98:d4:58:b5:b8:01:da:39:66:e5:77:80:65:ff:1f:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0A:F2:52:D0:0E:AB:1D:40:43:EA:34:0E:20:3F:B0:12:54:07:4C
            X509v3 Authority Key Identifier:
                keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:be:88:a9:24:99:f6:04:a8:34:04:6c:b2:c9:95:9f:b0:f7:
         38:8e:d1:5f:17:a0:04:dd:4d:44:89:32:e0:30:db:ae:98:48:
         f8:d9:26:60:1e:72:d3:b1:a3:aa:5e:8a:a8:95:db:0f:19:70:
         da:5e:69:75:b3:3b:24:d9:d8:c0:1b:f0:c4:35:d2:e9:6f:66:
         8d:0b:75:8b:90:11:08:d2:77:c6:59:b8:5c:0f:c7:97:6c:9f:
         93:2f:e7:6f:31:6c:f4:b1:30:77:09:4d:80:cb:51:9d:d0:06:
         8a:93:1e:d6:39:34:1d:d1:12:ba:0e:ad:da:a5:3d:8a:74:e3:
         c2:c2:fb:7a:ee:7b:80:b3:72:1c:ef:fd:eb:e3:02:b7:bd:fe:
         50:9c:41:42:3f:c9:79:85:e8:b0:54:bb:c9:2f:5a:30:7b:c9:
         0f:75:03:8f:0f:71:72:14:aa:6b:9c:0d:28:15:05:59:a5:cd:
         f7:84:73:9d:d7:d7:9b:c1:1e:91:c4:2b:2d:7d:5c:66:20:82:
         ed:88:45:73:0d:30:17:53:1c:40:2d:23:9b:87:64:ad:78:28:
         33:60:95:3f:bb:50:6b:be:55:1f:eb:16:2e:0f:e2:36:0e:60:
         0c:d4:d6:01:46:3d:14:21:33:79:5b:6e:a7:5a:44:ae:01:99:
         6b:18:7a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----