Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File:                     Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier:          Yvyi0agbS+p6EY6NWipmXEBoHZ8RmDkRlRR9DyZLYro=
Subject key identifier:   36:AD:22:AC:AE:94:2F:16:F2:27:4F:35:C4:01:B9:12:6D:19:B0:B9
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer:       /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial:       01962F3DC06F1D12E7A253F26FDFB72EC758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number:          0869
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: VA4jevJKdoaS44gv7RwqPWjbFfsucLkfWG/2AN0owlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c0:6f:1d:12:e7:a2:53:f2:6f:df:b7:2e:c7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=36ad22acae942f16f2274f35c401b9126d19b0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:9d:ff:27:04:02:67:ae:d2:58:7c:cb:33:
                    1a:60:a1:80:d7:a0:1a:60:b7:81:e5:0a:22:e1:b7:
                    31:c2:71:19:d7:47:c1:38:a3:b1:18:81:39:4d:c8:
                    51:64:22:dc:88:59:8e:66:30:28:a4:23:e9:21:e2:
                    59:a2:85:c5:5d:ed:d8:13:5b:ae:01:b3:fc:03:01:
                    1a:d0:7c:e0:5d:e6:53:8d:90:44:7c:ab:bc:00:03:
                    08:84:02:e4:8b:63:75:1b:ea:24:f2:75:99:0e:a8:
                    dc:88:e6:e5:1e:1b:8a:10:2c:a0:b2:01:48:a0:8f:
                    07:f2:85:1c:9a:94:c8:7f:1c:74:f3:11:8a:4e:0e:
                    29:5c:0e:2f:91:80:8a:e1:61:98:60:53:17:48:22:
                    35:18:01:3c:db:34:45:6e:56:87:75:d7:ff:13:b5:
                    21:38:ff:bf:07:bb:96:f6:7f:4e:c3:f9:db:34:a3:
                    48:6b:10:48:bb:34:63:57:59:8b:09:ef:ee:a8:48:
                    bc:90:60:ce:ed:a6:87:a0:5d:d8:d3:68:76:74:fb:
                    a9:46:5a:5a:27:49:e5:8a:7b:0c:75:19:85:9c:7a:
                    ba:04:23:ee:2b:de:1c:ea:7b:75:cc:99:00:2f:88:
                    29:ba:77:dd:b7:d7:72:1d:48:a7:c7:4f:44:d2:41:
                    d6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AD:22:AC:AE:94:2F:16:F2:27:4F:35:C4:01:B9:12:6D:19:B0:B9
            X509v3 Authority Key Identifier:
                keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b0:50:e0:ac:53:fb:df:07:6f:fc:d8:44:a1:a9:4c:68:62:
         a5:ad:2b:36:ce:3a:ff:fd:3e:1b:9e:8a:34:fc:d9:a3:72:34:
         92:cb:f4:29:ef:fb:c2:63:1b:51:c7:1f:3e:2f:44:d6:87:57:
         82:2f:d2:d7:98:bd:cd:c3:a0:93:e9:a8:b5:48:d0:19:71:56:
         2f:86:54:bb:d0:c0:ad:37:03:59:02:0e:09:66:ab:c2:ac:d8:
         7f:25:5b:90:68:10:60:a2:31:fe:1c:f4:d2:f8:ac:16:44:e5:
         43:35:c7:66:36:fc:62:d2:06:17:e4:aa:78:32:b1:16:3d:7f:
         be:96:56:0b:e9:61:c8:37:9c:70:6e:0c:51:93:d6:7b:b2:0b:
         f9:1d:ad:bf:f9:77:d0:77:72:eb:b7:29:03:1d:16:21:f9:92:
         7d:a7:aa:b2:e8:fb:d5:16:d3:91:bf:50:ca:ce:94:1d:67:9e:
         6e:e7:c7:96:c0:52:c9:27:eb:8d:c3:3e:94:45:47:b2:f4:17:
         d9:a8:55:17:4d:64:ed:6c:43:b1:a0:d4:04:09:d9:cc:e8:ea:
         46:75:08:07:5e:a9:d0:f3:53:0a:4f:f6:67:8b:ff:d7:63:50:
         87:b8:9d:c1:ba:06:21:25:82:44:e3:89:52:58:0c:2a:0f:04:
         e4:ad:92:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----