Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File:                     CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier:          J2hL1/nq9vSwlywr3u1r5+0ZAEq03XuYlBK9xHXHWa8=
Subject key identifier:   90:DD:48:6C:33:B5:71:6D:E0:A9:EF:84:27:3A:A0:54:1C:56:10:4A
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer:       /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial:       01962F3D5025E434CF62D2AE876E694AC650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number:          14B2
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: 7Gz//26H5WCMOzmnX1aKUCgBACOJjIvlX5J6arzbT0M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:50:25:e4:34:cf:62:d2:ae:87:6e:69:4a:c6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=90dd486c33b5716de0a9ef84273aa0541c56104a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:d8:ad:db:e6:a0:36:9c:5e:b5:4a:b6:49:
                    8e:b0:67:84:9c:38:8f:d9:17:34:6a:92:16:68:6e:
                    78:8c:80:82:d9:f5:7c:7d:d3:c4:fc:c2:0c:21:bb:
                    24:ca:9e:54:2c:2f:a3:88:a8:a1:13:25:2b:84:18:
                    c6:1a:66:9b:1a:8d:25:89:a5:5d:0f:c7:79:3b:c1:
                    cf:b1:94:51:f0:3b:15:d5:73:13:26:3f:b2:f5:52:
                    a2:52:b2:6c:f8:1b:8c:18:9f:06:e1:63:c2:cc:b1:
                    13:9e:17:d0:78:7e:d9:48:3b:bd:cc:c3:d5:a2:f1:
                    c7:8d:16:9f:96:f5:eb:2e:ba:46:ca:bd:0e:82:7b:
                    9a:3a:3a:34:a9:c9:d5:57:85:90:9a:70:32:72:59:
                    f3:92:a7:ea:ae:86:f4:03:0d:77:26:46:62:ea:ee:
                    64:28:9f:37:00:23:57:83:92:b8:1f:c0:87:50:b6:
                    e8:53:3e:e9:d3:eb:19:1a:bb:2f:a6:d4:1c:2d:c4:
                    b4:b0:ab:e8:fc:17:91:ba:3f:d5:14:05:d0:2a:88:
                    7d:9e:bd:b9:41:ef:90:6d:6a:85:e2:7a:a2:07:33:
                    71:fc:1a:05:71:5f:63:29:4a:4b:66:20:61:05:c5:
                    b5:da:56:78:b0:98:37:d1:20:3c:1f:a1:2c:92:c0:
                    01:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DD:48:6C:33:B5:71:6D:E0:A9:EF:84:27:3A:A0:54:1C:56:10:4A
            X509v3 Authority Key Identifier:
                keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:94:84:68:7d:34:a3:07:09:8d:ae:19:be:b0:68:a8:b5:33:
         99:e0:ce:dd:03:72:59:db:5a:8c:7f:60:69:68:40:26:2d:e8:
         68:66:b8:5e:06:f3:2e:2e:f5:cb:b0:b2:a8:c4:df:75:50:ff:
         12:ab:42:a5:21:1e:f1:21:e6:61:98:8c:5c:53:b5:0c:ce:31:
         52:4c:f8:96:8e:4d:9c:3a:eb:5c:8d:e4:0c:6c:e0:07:a4:51:
         20:a5:a4:ff:c1:9f:b9:c1:79:87:f1:ee:05:8b:69:0c:50:6f:
         e1:89:2b:af:e5:bb:95:4c:24:f5:0f:2e:64:ef:63:44:ef:4d:
         45:af:13:e7:e4:90:d2:17:89:53:dd:fd:c6:b0:43:45:e1:0e:
         40:17:d9:03:ca:70:3d:88:94:e7:6e:87:66:eb:b5:ff:53:af:
         68:0e:64:78:ac:e1:14:ac:30:12:d7:94:87:b5:d1:84:34:95:
         17:38:b0:68:62:80:93:97:3b:fb:66:6d:22:e4:23:9a:dd:70:
         f0:97:07:c2:28:67:9c:dd:4e:99:ea:b0:a6:98:74:a5:46:af:
         93:ef:ce:b0:7b:65:bb:06:6f:84:bd:aa:ef:c8:e5:e1:65:a5:
         db:a0:f2:86:27:8e:e3:0a:7d:af:63:01:6c:50:a1:29:72:53:
         b5:26:c6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----