Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
File:                     4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft (raw, json)
Hash identifier:          b3sCketRKbJ3wLNdqcWvleeePtbvYr3j8vStkbMS7xs=
Subject key identifier:   63:BB:97:47:AA:EE:BD:5B:BC:B7:D3:01:1E:1D:6C:17:CC:4D:C1:51
Authority key identifier: E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
Certificate issuer:       /CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Certificate serial:       01962E61C4F60529AD8867258A6F8791462B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
Manifest number:          024B
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl (hash: +gCEV/9iXiIBn8N1F9g376BiZN3ZYnPNOmu3pdb7/dY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c4:f6:05:29:ad:88:67:25:8a:6f:87:91:46:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=63bb9747aaeebd5bbcb7d3011e1d6c17cc4dc151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:e5:2d:ac:16:d2:9f:aa:79:08:df:9b:12:
                    7e:80:25:12:48:95:11:f3:64:1a:e0:5b:2b:13:93:
                    40:eb:55:bb:b5:4c:ab:3d:73:04:4d:a5:6c:c1:e7:
                    03:a1:2b:6b:2a:dc:ba:9c:4f:20:74:77:36:6c:00:
                    74:c9:05:a7:16:39:66:65:c1:cd:10:91:4b:ce:d6:
                    ee:51:10:5c:53:e5:8d:4f:f1:35:12:b4:d3:c7:d0:
                    9f:6c:c5:aa:e1:5f:77:1f:8d:5f:8c:10:4b:2e:fb:
                    e6:39:58:f1:5d:3a:04:d0:ff:96:d0:2c:9a:a3:27:
                    8e:53:fd:59:08:3c:bf:0d:e4:99:45:2c:8d:a1:a0:
                    90:a5:f4:14:9d:00:e3:48:c8:5e:54:e2:63:f1:ca:
                    a7:5b:ec:7d:23:c8:50:68:a4:b6:9d:0a:0d:13:62:
                    eb:48:2f:65:a5:cc:d3:aa:2f:2f:1d:c3:92:34:e5:
                    2b:6d:71:58:e0:19:4c:20:8e:64:eb:d7:5a:f2:b3:
                    b4:07:16:4f:cc:f3:ce:7c:c8:f0:81:c0:84:f4:92:
                    ff:a2:3a:a2:05:47:bf:47:dc:aa:1e:c0:db:bd:e0:
                    07:63:64:32:41:18:1d:60:82:d7:91:b4:c6:98:41:
                    92:41:b5:26:6f:69:46:b2:65:95:7b:17:2c:9d:40:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BB:97:47:AA:EE:BD:5B:BC:B7:D3:01:1E:1D:6C:17:CC:4D:C1:51
            X509v3 Authority Key Identifier:
                keyid:E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4e:ce:86:a7:69:b7:3a:f7:f6:d3:ba:bb:54:14:87:34:8e:
         ac:dd:d3:db:0a:a2:67:06:9e:f1:5c:85:2d:fc:f1:b3:86:4f:
         e6:6e:9d:0b:50:b8:3c:b4:92:c8:6e:dc:6b:37:4e:9b:65:4e:
         1d:ec:35:d8:d9:bd:b8:cd:87:76:56:41:db:e2:54:f4:59:dd:
         b0:ad:e5:48:15:81:16:6e:42:03:83:35:73:96:06:c5:01:75:
         d3:a0:72:82:d5:ff:94:80:85:81:eb:60:e1:1b:82:54:81:fd:
         fb:d2:7c:ad:d4:d5:ac:46:3c:62:cc:21:3d:c0:d2:3d:af:86:
         2c:bc:85:b7:09:93:80:c1:99:e3:2e:09:c6:07:ff:e2:5a:81:
         74:61:68:0c:e2:ab:b9:77:e0:d5:3b:cd:c2:f8:9d:a7:fa:5a:
         51:db:de:4e:be:3d:40:aa:a9:7e:0a:c9:78:8f:51:00:92:9c:
         f8:10:41:e9:fd:67:6e:3c:4b:36:98:37:8a:f5:cf:04:18:ac:
         9a:3a:1c:4a:bb:75:c8:0c:4f:34:fc:42:b0:25:f0:6e:a7:af:
         92:88:91:b3:5f:1e:52:3a:77:7a:24:ed:7b:2f:46:d0:f8:f5:
         da:d1:c7:05:8a:e2:bb:23:0b:21:65:a8:b1:a2:bf:df:64:3a:
         5b:2c:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----