Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
File:                     nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json)
Hash identifier:          Lj3Y7HjN/iXkJxxyMxSyuM3vD6krelEx3pkVO1157W4=
Subject key identifier:   23:E0:AB:7D:B5:3C:0F:C1:06:CE:F3:0C:75:5D:BA:7E:02:BE:5B:72
Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
Certificate issuer:       /CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Certificate serial:       01962DF44D0508A2BCA9F88992706A8CB2E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
Manifest number:          14D0
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: oeKHFBo6NBIdU/jOUz6BXcSapTlbH+m2gzGTSoxZdYg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4d:05:08:a2:bc:a9:f8:89:92:70:6a:8c:b2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=23e0ab7db53c0fc106cef30c755dba7e02be5b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:fe:42:fc:c6:93:fa:30:7c:d4:b2:af:bf:
                    6a:59:04:79:1f:fc:d4:ac:95:55:53:d7:94:7e:ab:
                    8d:b3:76:b2:29:66:c0:40:e7:8d:4b:c7:8c:8c:11:
                    1f:fe:fc:4a:a3:99:ed:14:6c:82:97:6b:a9:64:72:
                    8e:96:54:13:de:a6:8d:f9:e4:1d:70:0b:ce:d3:e7:
                    fd:e1:62:53:40:51:db:6e:78:c6:7a:ba:15:25:66:
                    e5:d6:10:99:95:b2:0f:e6:30:09:43:1d:26:be:51:
                    3a:e8:46:45:be:f2:06:7c:83:3c:75:e1:1c:ef:57:
                    df:ba:70:30:c5:b1:f7:c6:e2:a6:3d:7c:a1:e8:3e:
                    60:91:a5:fb:4d:47:46:1a:96:c3:a8:ec:ad:fc:81:
                    b1:89:a5:da:32:34:e5:77:46:18:b0:fd:3d:0b:1d:
                    6c:e8:f3:89:e9:d9:48:26:0f:1d:39:55:9d:9d:a1:
                    ef:1e:6b:7d:81:5f:00:82:e2:ce:1d:c5:0d:43:75:
                    7f:cf:e9:ae:93:53:72:79:99:04:7e:db:e9:b2:36:
                    a6:d2:c0:88:df:c2:d7:f0:45:89:0c:b6:30:52:e4:
                    00:27:cd:2e:07:72:6a:49:26:a0:91:92:b4:97:90:
                    0a:c6:c9:26:b4:aa:1f:38:4a:03:1c:70:80:ec:c1:
                    b3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E0:AB:7D:B5:3C:0F:C1:06:CE:F3:0C:75:5D:BA:7E:02:BE:5B:72
            X509v3 Authority Key Identifier:
                keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:6e:6a:72:12:1a:c0:81:d7:89:6b:3f:80:d2:11:ca:65:
         e8:32:2a:ce:14:9a:72:aa:26:63:e1:dd:ea:e5:eb:16:66:c8:
         80:b7:47:7b:b8:52:68:f2:92:29:8a:87:49:30:50:d8:1a:f9:
         f7:98:83:2a:f3:50:54:e0:7e:ac:17:9f:0e:f3:20:00:df:57:
         c9:8d:f3:15:6b:57:d5:6b:86:eb:8c:d7:1a:77:86:0c:52:b3:
         84:d5:f4:7b:2a:fa:11:d0:7e:4a:06:a2:2c:da:24:21:25:42:
         bc:c6:33:3a:f7:75:bf:70:57:e2:13:40:87:f8:61:85:3d:3e:
         51:48:21:93:3f:e3:ec:2d:12:f3:50:6d:b7:84:3c:b8:94:81:
         53:71:47:dc:36:a1:f5:27:fb:3b:8e:21:04:aa:00:42:a3:24:
         6e:83:6c:d5:b1:d0:31:1e:54:36:83:81:72:12:21:36:7f:2d:
         ac:b7:b8:a6:09:1e:5a:c9:58:6d:5d:05:47:19:d8:c1:33:c0:
         66:ae:9c:7d:5d:7c:9b:04:3d:c3:09:4f:aa:a6:8b:5c:d9:7f:
         8a:54:d8:67:11:32:4d:4b:48:d5:3f:12:8a:d8:a6:a2:e7:f3:
         d6:94:71:4d:c9:a3:be:af:2c:b2:fa:45:e9:8c:ac:62:5a:b4:
         64:1e:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----