Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File:                     9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier:          mQ/koCtLmv4/JVKWU+8w5Gcz7K9W0+UDjmXBEawEzFk=
Subject key identifier:   B9:A2:DA:0F:67:87:37:71:FD:6E:27:2A:E0:09:BF:FD:07:86:7D:B9
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer:       /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial:       01962FAB13F58CA3F3275217700ED38584BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number:          02DE
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: V3oHWJA//fsgeN9sQIoNAPB2+U+T4FIKlstyQto+lvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:13:f5:8c:a3:f3:27:52:17:70:0e:d3:85:84:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=b9a2da0f67873771fd6e272ae009bffd07867db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:b7:aa:3b:b5:03:68:88:90:d4:9f:32:02:
                    59:09:36:7e:13:de:14:86:bd:93:7e:0e:58:01:07:
                    aa:89:48:11:71:87:f6:d7:60:2d:81:bd:3a:38:f9:
                    1f:09:31:52:54:03:1a:1c:08:ab:0f:6c:f9:9f:bb:
                    8c:e7:1b:cb:ae:ac:d6:c8:bf:4e:42:6d:ed:e1:3c:
                    f1:e8:f2:49:34:3e:d4:9c:7a:49:46:86:91:74:c1:
                    57:89:df:7c:41:9f:b3:24:03:24:a2:a3:ac:40:e0:
                    42:02:76:52:55:d4:05:78:1b:fd:be:f4:b3:50:4d:
                    5e:ec:33:55:47:4a:fb:85:4a:ea:32:0e:05:92:58:
                    d2:f0:e8:4e:7d:37:45:e3:30:5f:e0:fc:34:c4:7f:
                    87:fa:f1:49:7f:40:14:9f:af:70:3e:af:ad:62:e5:
                    d5:85:a5:43:4c:f4:cf:34:be:76:b2:a7:62:27:d6:
                    45:38:75:8f:d6:d1:ba:31:a2:03:a2:de:9e:28:e0:
                    70:3c:18:45:91:26:f6:8b:99:40:46:cf:e3:9e:44:
                    8d:7d:be:4b:a9:78:7c:8d:0f:e6:b2:0d:bf:3a:be:
                    d1:89:cc:42:e8:90:5b:68:06:00:40:45:83:c3:42:
                    47:c8:08:0b:9b:2c:0b:f0:20:93:90:06:cd:07:ba:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A2:DA:0F:67:87:37:71:FD:6E:27:2A:E0:09:BF:FD:07:86:7D:B9
            X509v3 Authority Key Identifier:
                keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c3:ea:d8:6e:49:e1:3f:43:99:95:ff:72:98:d4:c6:c0:60:
         a3:9c:cd:74:3d:c1:65:ad:5f:f6:cf:4f:6a:74:cb:3b:65:b5:
         58:9f:2d:41:7c:fa:9d:8e:b7:86:c3:d1:92:69:a5:8a:ac:da:
         a5:a2:66:7f:48:3e:4c:29:1b:fc:12:35:f7:e3:af:de:08:f2:
         5f:4e:fa:34:fc:a1:62:75:1b:f5:d4:7c:fe:ee:18:63:67:a3:
         74:ba:ce:e8:e1:bf:56:37:d1:c7:93:9c:6d:d6:0d:e0:3b:b3:
         b8:73:5e:4a:42:de:c9:03:32:1a:af:4c:13:f9:3c:0d:5d:51:
         2a:f8:f3:1f:1a:39:1c:ad:e9:68:d5:59:a6:88:3b:2e:00:73:
         d9:23:8d:ed:c0:67:30:dd:21:17:35:0b:e7:55:29:94:3f:49:
         80:58:18:ac:ad:ec:fd:a2:fa:a4:11:77:75:92:f2:22:f4:4f:
         70:ea:b9:70:d6:a8:99:00:39:b3:dd:bd:aa:1f:3e:d9:a0:4e:
         91:eb:0d:d1:9c:15:20:84:e8:ca:75:b4:5b:b0:e2:f0:99:8c:
         ee:41:a6:26:8b:1f:64:9a:b2:7e:d4:dd:67:b0:f1:84:5f:63:
         cb:23:f6:77:11:0b:6f:d8:83:f9:37:df:50:78:53:a9:6c:c0:
         32:1b:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----