Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File:                     _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier:          JEgPIYA05gKDSxuDbRRjkTX6dJ8EIn3DF4iBOGn7rPc=
Subject key identifier:   17:28:75:EC:18:BE:C2:19:69:A5:E2:5A:E5:FC:4A:DC:9D:E0:5A:80
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer:       /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial:       01962FABA06684295591DECB7AD616450C55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: hq9T219o47VnV5sMYVqrSmDRZUuVCoHsh7rspfa7Yis=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a0:66:84:29:55:91:de:cb:7a:d6:16:45:0c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=172875ec18bec21969a5e25ae5fc4adc9de05a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:b8:e5:9d:c5:eb:55:08:2d:ce:7a:ee:ed:
                    aa:82:3e:ad:ae:7a:2c:6d:7a:9c:3b:06:c6:0b:ad:
                    e7:be:78:ee:72:8f:2d:f2:88:d3:56:22:56:67:0b:
                    05:0c:50:1d:e7:7d:69:e9:64:e8:ec:2e:f0:b5:10:
                    e7:7e:9f:27:ca:74:52:6e:f0:26:20:92:1c:a6:56:
                    cc:6d:0f:dc:57:d8:2c:03:8f:91:2d:57:e3:96:df:
                    98:e1:71:9f:68:59:05:bc:8a:0b:aa:8b:4a:5b:34:
                    ac:02:dd:e3:e9:2b:13:d0:ac:cb:e0:45:ff:ac:d4:
                    93:63:f8:ba:83:b2:61:d7:bb:0c:d7:b3:6c:3c:eb:
                    1d:31:a7:0d:62:c0:e6:93:08:4b:47:9c:3d:f7:e7:
                    55:b8:85:c6:1e:ae:db:4c:a6:9e:d3:0e:19:78:7b:
                    e4:5d:5f:b5:f3:bf:8a:34:37:bd:66:9c:0a:72:cc:
                    2a:47:51:06:a3:62:db:34:dc:ed:38:e9:8b:0f:7b:
                    e5:21:4b:58:8a:a6:82:80:f3:31:27:b7:b9:a5:14:
                    ac:7e:d0:9f:e0:09:73:78:f9:90:08:e5:ab:e9:c5:
                    ed:e3:e9:0e:9a:65:ed:06:3f:cf:88:d8:be:dd:fd:
                    9c:e7:90:ae:a7:28:44:cc:a6:0a:b2:4c:37:5c:22:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:28:75:EC:18:BE:C2:19:69:A5:E2:5A:E5:FC:4A:DC:9D:E0:5A:80
            X509v3 Authority Key Identifier:
                keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c4:8f:90:9f:79:7c:2c:5b:31:90:bf:4c:c8:5d:f9:e2:16:
         17:b7:21:41:63:13:54:82:60:f1:30:ff:c5:e1:e0:02:5d:53:
         dc:c9:d7:cd:82:43:b8:83:63:37:12:8a:71:1d:58:47:29:02:
         51:2d:97:cf:c6:8c:c0:90:1e:7a:d9:bf:14:dc:7e:f7:86:b0:
         f8:54:37:07:7d:8a:fb:b6:21:3e:92:91:e4:9d:6c:aa:e4:aa:
         06:7c:3a:86:95:ca:2d:f5:10:de:5c:e7:61:84:b1:e3:33:90:
         32:b5:85:82:ad:72:e4:f0:36:f2:b3:ce:d2:ef:c7:08:d3:a3:
         d5:a4:50:38:f2:f4:33:63:4b:59:26:c6:5a:92:8f:42:d4:de:
         a1:06:80:29:43:cd:d8:13:d8:5f:6c:63:48:e0:7e:8c:2f:f0:
         9b:0e:43:80:4b:2a:fa:64:a4:ab:6c:2e:bc:03:45:29:5e:30:
         1e:ad:09:fa:ee:cf:42:3d:ff:83:65:1a:22:cf:ed:77:ee:37:
         c9:09:04:4d:87:f2:33:cc:b3:b8:fd:c5:a2:17:c9:b7:28:c4:
         82:b2:fc:34:3d:55:c4:84:e8:4f:a9:e1:ad:54:11:a5:78:06:
         88:11:ac:79:d8:87:54:d9:6d:34:ad:f8:d2:2e:14:95:17:9a:
         b6:1c:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----