Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File:                     meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier:          n/2UNV+xFhajbGyRiEwu3244BRBQSAADdkI1462zLBs=
Subject key identifier:   02:CC:33:5C:ED:3D:83:EE:56:C2:F8:FB:86:EB:87:46:A0:31:EF:94
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer:       /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial:       01962E990D02C76DFB930125E9740B824888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number:          0D2C
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: sfER4xY9GKo4sWrgvltGFlJNWlC4sEQTzMzPmuMYXfc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0d:02:c7:6d:fb:93:01:25:e9:74:0b:82:48:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=02cc335ced3d83ee56c2f8fb86eb8746a031ef94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:b3:de:c0:b4:7a:bc:b8:e3:31:b6:4f:91:
                    c5:f7:b4:78:1b:4a:00:48:aa:90:5d:3d:89:41:a4:
                    71:d7:4f:47:03:db:0b:06:e6:dc:bc:2c:05:a0:12:
                    c6:b1:79:bb:20:d3:b0:ee:2d:4e:fc:64:58:b5:98:
                    ad:9a:80:45:e1:42:fe:43:bf:7f:93:f8:35:e7:f4:
                    d2:73:1a:a9:ea:07:8e:86:83:60:4c:63:6a:1e:0e:
                    50:99:69:52:65:2b:56:be:d2:8f:b0:02:c9:25:2f:
                    e6:17:c5:28:cb:85:43:cf:f8:7c:dc:1e:09:25:c4:
                    6c:2c:51:8d:df:be:c5:93:97:11:2e:81:db:31:f9:
                    0e:4a:d1:5c:fc:8b:e1:68:5b:51:db:0f:e3:30:ae:
                    bf:60:f1:9d:22:b1:b7:8b:ca:71:6c:ca:7c:40:dd:
                    a2:3c:d7:7b:c3:3e:6e:1a:89:7a:a8:1d:59:69:37:
                    0a:ce:46:1c:64:b7:1f:6e:b8:f4:28:7a:7b:81:0d:
                    59:8f:b6:d3:bb:db:4e:1c:39:3c:f0:ce:7f:0c:38:
                    a6:8c:fe:8d:0c:47:53:76:cd:3d:3e:26:f5:46:80:
                    ef:b9:8a:09:ad:22:81:f5:65:f4:b0:43:c4:db:0f:
                    ef:56:9b:2a:1c:92:f2:db:0b:5b:4e:ce:cc:b0:11:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CC:33:5C:ED:3D:83:EE:56:C2:F8:FB:86:EB:87:46:A0:31:EF:94
            X509v3 Authority Key Identifier:
                keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:65:be:de:a1:86:7b:c1:d8:0e:e0:4f:d1:83:df:07:e3:8b:
         9e:bb:e5:cc:4f:a1:40:c2:d2:b4:24:e1:09:d4:e9:06:47:ea:
         ea:3f:88:b5:a8:d1:be:1e:00:b1:d6:3a:4a:55:d9:e4:26:cd:
         7d:79:61:6e:e3:de:93:96:28:2d:3a:3a:72:5f:e0:cb:07:ce:
         92:23:ba:45:60:0a:c0:4d:66:1f:0c:80:07:6d:c7:31:b2:79:
         79:72:fc:fd:b0:f1:b0:ed:20:03:74:e1:41:73:cf:89:16:82:
         d4:60:83:db:62:b9:09:75:63:63:70:2f:57:58:4a:33:69:ef:
         f6:64:c5:fb:ef:51:10:0d:cf:00:9d:d3:10:ad:9b:d6:83:33:
         20:b3:b9:6c:69:58:a2:7a:38:65:98:d5:bf:2f:03:f8:06:c8:
         f8:4a:06:b4:b6:3f:2a:73:6e:2c:2c:d1:11:45:0c:c3:64:58:
         12:64:bc:65:96:ba:8d:79:e2:98:85:f0:50:c6:46:59:25:a6:
         90:02:2a:d1:34:d6:64:7b:46:fe:fc:b7:89:a1:13:b4:a3:99:
         00:3b:b8:24:25:f0:18:5b:f7:ac:ed:99:27:e5:ff:48:14:cb:
         8d:3c:6e:03:e0:44:1a:93:95:df:d8:83:87:a5:ae:0f:30:1a:
         8f:2c:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----