Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
File:                     9rG5O-fUO4bWT4tLljvJFWJfI_I.mft (raw, json)
Hash identifier:          ZNMKqTXW3cSwzabyQ8dE82YKbdkVSa15GjyaUl7dVQA=
Subject key identifier:   07:33:7E:DC:E1:7F:88:04:FC:54:FB:CA:F4:03:80:A0:5C:DE:2D:6B
Authority key identifier: F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
Certificate issuer:       /CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Certificate serial:       01962E6198FC5A94F3036A6463D6F50E1005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
Manifest number:          017B
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: 9rG5O-fUO4bWT4tLljvJFWJfI_I.crl (hash: QC2CxmnPDwN0Yp4zmR+FZ9mlcHgWhqc8LO9fqYTv+Mw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:98:fc:5a:94:f3:03:6a:64:63:d6:f5:0e:10:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=07337edce17f8804fc54fbcaf40380a05cde2d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:85:7d:b6:51:22:e4:cb:e4:90:72:51:6e:
                    cc:d6:38:be:87:82:48:d1:32:13:50:29:29:71:5d:
                    c4:1a:ef:cd:24:d3:c2:54:0e:93:63:0c:8d:5b:ad:
                    63:38:fe:30:80:8a:31:75:6a:f2:92:5f:ad:fe:98:
                    1f:21:f0:85:ae:01:89:d0:31:ef:2f:3f:4b:14:5e:
                    53:10:3b:66:88:a4:bf:5c:d7:23:ab:04:94:b8:a3:
                    b2:24:89:5a:0e:a0:54:c9:df:ff:16:a6:0f:7e:d4:
                    21:c7:46:f2:5c:d2:58:f6:44:db:af:97:52:a1:06:
                    8e:74:0d:b9:d9:0e:37:c5:bf:c4:22:68:43:c4:70:
                    44:cc:3a:4b:d9:ef:c6:d0:cc:18:48:88:d6:02:c4:
                    6e:be:42:74:f1:46:45:76:32:e8:11:99:63:2d:4d:
                    39:df:6b:4b:5a:d6:97:c6:d5:10:0b:c3:cc:3f:34:
                    ef:3c:2a:99:a5:6f:63:d0:08:56:02:f6:2c:c4:d5:
                    ff:db:ee:39:e9:84:db:b5:36:5c:3c:d3:6c:3b:ad:
                    aa:18:d6:50:41:ad:dc:72:85:4b:c2:c9:64:ec:c8:
                    d1:00:d7:a6:f8:d7:f6:4f:e5:22:82:3c:ff:b6:90:
                    1d:78:df:c9:a9:2e:87:13:97:1d:bb:a5:7d:54:c1:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:33:7E:DC:E1:7F:88:04:FC:54:FB:CA:F4:03:80:A0:5C:DE:2D:6B
            X509v3 Authority Key Identifier:
                keyid:F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:df:3b:6b:42:01:2a:f2:93:bb:30:7a:db:50:46:59:dd:f6:
         b4:06:46:0c:a4:dc:a6:5c:b9:10:29:43:54:0a:5f:f3:01:23:
         1e:c2:8f:6b:f7:32:95:a9:ae:76:26:b0:20:ea:26:35:bd:c1:
         71:b3:0f:8f:cc:f6:e2:d9:00:bd:07:0b:ad:d9:46:4f:6a:f7:
         e0:20:b2:1b:cd:c7:ef:6b:a7:53:30:8d:91:6b:00:d9:db:27:
         b4:74:0f:86:89:a3:18:29:08:b0:df:99:05:28:93:e9:7e:f2:
         cc:98:e5:1b:40:49:e5:42:05:7e:67:75:95:80:6c:8e:22:75:
         9a:32:9f:4a:14:bb:e9:17:48:c2:b5:6b:56:28:ad:58:4f:b6:
         81:ab:86:bc:69:32:f4:b3:9d:39:56:38:9d:a1:87:8c:c3:c5:
         aa:71:2e:e4:0c:49:66:20:e2:a5:1a:fe:53:d5:1f:83:aa:c7:
         a1:e9:bf:bd:56:99:25:a2:ed:86:b0:ab:e2:85:4b:9e:d9:f5:
         af:8d:7e:b3:3c:2c:be:94:d3:23:31:07:1a:76:7e:e1:d8:ef:
         1b:74:c0:cc:0a:60:13:62:cc:01:6c:04:5d:82:60:74:80:3e:
         69:45:f1:f2:f8:ca:d7:13:d9:4d:fc:d6:7e:57:40:a8:22:54:
         ff:7b:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----