Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File:                     9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier:          cd/EP/NUuJiQwN/5hFwHbDUgDfTuvzTGFcnQhjakA/w=
Subject key identifier:   09:E7:80:E3:C7:1F:36:64:EF:B8:49:C0:B1:E8:73:48:B2:58:BC:8F
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer:       /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial:       01962DF45E134F0D82461C728E1408094E62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number:          0BC7
Signing time:             Sun 13 Apr 2025 07:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:51 +0000
Files and hashes:         1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: 9HO/AL8jcYe55PvYMJbg0dvuV/uDlXlEOXsL9cVcVSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:5e:13:4f:0d:82:46:1c:72:8e:14:08:09:4e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
        Validity
            Not Before: Apr 13 07:01:51 2025 GMT
            Not After : Apr 14 07:01:51 2025 GMT
        Subject: CN=09e780e3c71f3664efb849c0b1e87348b258bc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:c5:7a:23:5a:56:8e:08:95:66:7a:02:1e:
                    b9:04:c3:ea:50:59:5e:7d:85:93:f3:cc:56:ff:b6:
                    d7:38:37:db:5b:ea:60:a8:7c:ed:03:75:44:09:38:
                    f8:87:49:e0:ec:b8:fe:d0:5e:60:f0:b8:a7:02:ff:
                    16:30:9c:a9:3e:88:91:24:12:16:e4:f7:3d:de:ef:
                    b0:63:f2:1a:a9:69:3c:4e:e4:c2:97:a3:92:75:66:
                    a0:de:b8:0b:f6:1d:69:90:34:76:84:e8:e1:8e:f9:
                    d3:82:70:4f:c9:a0:4b:a4:f2:9e:c1:b9:1c:6b:53:
                    59:e1:3f:85:b9:b1:c6:2c:8a:86:34:0d:23:59:43:
                    0d:da:fa:c5:09:32:83:b9:25:bb:45:c0:4e:85:a6:
                    09:9c:76:1b:df:1e:74:87:66:27:2e:fd:2d:47:e3:
                    ea:a7:af:fd:44:c6:e8:46:9c:c4:79:d2:28:3a:5d:
                    cf:75:09:ea:13:7c:8e:c4:e4:a9:39:36:1e:2d:8a:
                    8b:67:74:2f:ae:f6:45:4a:e2:c4:93:26:db:c9:42:
                    40:33:78:9a:34:fb:7d:86:4c:4d:e3:ae:80:79:c4:
                    2d:eb:f3:e8:e9:11:c9:45:10:2a:c8:ad:ef:72:89:
                    af:20:e9:11:ca:c7:9b:d9:cc:1d:ef:27:db:15:dd:
                    60:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E7:80:E3:C7:1F:36:64:EF:B8:49:C0:B1:E8:73:48:B2:58:BC:8F
            X509v3 Authority Key Identifier:
                keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:07:c5:07:73:d9:88:89:0c:76:d9:9f:10:12:6f:bd:27:0a:
         ee:40:71:df:2b:22:68:e7:8d:59:00:4a:4e:58:90:ce:83:02:
         48:77:bf:d1:53:fb:58:a6:16:aa:c4:3d:4c:d4:f2:c8:7c:58:
         8c:7a:e5:e0:a2:c6:d2:8a:0b:56:72:ae:13:2c:20:04:c6:70:
         0c:3e:c4:18:dc:1e:1d:70:21:9f:03:37:8f:cf:ad:d0:9b:de:
         18:3e:c6:f8:a5:f0:e1:6a:8a:94:8f:b7:7b:8f:eb:c9:bb:02:
         06:e1:6f:49:d1:16:f3:0c:e2:5e:8e:d3:c3:82:4b:74:d0:37:
         be:04:5e:f5:c4:4e:d4:e8:43:e0:57:ce:d7:aa:4c:37:e8:47:
         83:8d:32:b2:0e:80:4e:4b:d7:30:6d:14:82:72:d8:36:0c:64:
         95:9c:69:31:f4:e3:00:88:13:ea:f1:1a:82:5e:cd:27:c9:66:
         23:fd:14:9e:2a:a0:cf:3d:8c:db:0a:6c:e2:26:82:5d:c6:82:
         9a:d2:87:50:b7:fc:a8:db:bb:39:ae:95:8d:2f:1b:db:b5:40:
         60:be:92:b3:43:db:01:39:f4:78:a3:13:45:b0:68:13:a9:a9:
         6b:df:bc:2c:7c:4e:70:89:ea:f7:c7:ed:56:f7:73:dc:ea:d1:
         d9:d2:53:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----