Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
File:                     mdXL9__sUlSnHvex7fem12x1liU.mft (raw, json)
Hash identifier:          xfaZ1XurEQdxdnHMiFkY3+88U9Bt8MgfMOK8Ucy4/tA=
Subject key identifier:   52:A6:1B:B9:A6:1E:3E:46:A9:3B:5F:BC:74:EB:A7:1C:98:13:FC:58
Authority key identifier: 99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
Certificate issuer:       /CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Certificate serial:       01962E9873ABB43CFD8AB095DA76B8AB17B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: mdXL9__sUlSnHvex7fem12x1liU.crl (hash: jkyjSHOWRkc8m+Ste+m1pVziVLU6p6S16AvVy3ChgyA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:73:ab:b4:3c:fd:8a:b0:95:da:76:b8:ab:17:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=52a61bb9a61e3e46a93b5fbc74eba71c9813fc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6e:48:3b:c7:d9:37:97:1a:3f:a6:7f:6d:3a:
                    56:5e:2f:71:0a:33:a9:28:9e:b0:e2:a1:5a:a1:f2:
                    91:ec:13:76:0b:44:ea:58:41:54:74:50:5e:53:de:
                    fc:dd:7a:85:63:8e:28:bc:d1:a5:2d:9a:b2:4f:6c:
                    5c:1c:b6:56:83:91:33:a6:33:7e:d2:66:6b:26:77:
                    5c:52:1d:d2:36:12:c8:58:9e:29:96:ff:e2:d3:04:
                    39:4c:a3:98:d6:00:b5:1b:c2:99:34:9b:7a:ac:89:
                    ab:bb:ff:95:2d:7e:27:f3:34:f0:0f:d3:8c:52:ee:
                    67:0a:e2:29:de:c4:47:4a:15:d5:47:04:c0:80:3e:
                    b4:96:6d:ef:a0:bb:9c:db:cc:6f:07:1e:c0:56:9b:
                    a1:93:25:91:0f:ca:66:2f:f9:85:6c:09:bd:04:5f:
                    ad:26:58:2c:3b:1f:e2:cf:6b:6b:2a:5b:8b:3a:79:
                    d8:c2:05:78:ee:c3:ef:80:98:3a:b9:31:65:bb:56:
                    1b:56:61:a7:3e:1e:f4:e0:07:7c:e1:c2:e2:42:e9:
                    44:f8:af:2e:1b:64:25:e1:1b:ea:0d:90:df:fb:cf:
                    67:e4:42:78:8f:50:92:c3:43:ad:7c:92:09:34:a0:
                    69:a9:75:9b:6d:76:20:4d:e0:a0:be:ea:1b:84:16:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A6:1B:B9:A6:1E:3E:46:A9:3B:5F:BC:74:EB:A7:1C:98:13:FC:58
            X509v3 Authority Key Identifier:
                keyid:99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c0:84:b3:f1:83:3e:dd:cc:15:2e:0f:05:df:96:35:ea:c1:
         eb:31:38:9b:a1:9f:28:63:a9:b2:a7:4d:89:17:b7:de:c4:be:
         7a:73:45:98:7e:ac:09:d3:fe:69:a4:54:39:2f:63:b1:1d:b4:
         35:e6:fd:fe:9a:30:2e:d5:18:53:d7:05:29:f8:af:80:d7:26:
         8f:a1:87:db:42:b5:bf:a8:16:48:bc:a3:85:61:bc:ed:a2:28:
         7b:03:4d:b2:bc:77:6b:8c:be:df:d3:5a:6b:e1:91:c4:0f:a0:
         a5:d9:0d:1c:38:0b:96:5a:4e:66:2f:53:09:7f:09:45:b9:f7:
         50:ca:a3:7e:73:bd:aa:9a:46:eb:9a:1e:75:e7:64:c5:69:d8:
         9d:7b:bd:20:2f:fb:38:4f:66:db:2a:9a:fa:12:84:19:e1:de:
         54:ce:f4:3e:db:1e:77:4d:9e:e9:98:77:65:f9:ef:95:f3:a3:
         91:d2:c0:92:96:1d:c5:0f:67:a1:7e:ce:84:7c:8a:7c:74:ad:
         71:8e:ad:f8:f4:f8:00:f6:d3:c4:92:f8:c9:0e:dc:5f:49:81:
         91:5c:95:2f:f0:30:30:9f:74:4a:9d:ff:0a:bb:3c:77:da:bc:
         1b:61:b5:e0:fc:62:19:78:8d:45:79:fb:19:e8:e9:cd:8d:34:
         b2:b0:0d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----