Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
File:                     moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json)
Hash identifier:          1HaCxNjVfmnm8cU7SXGpBANLwcEeMlG4Kf8eFusjwok=
Subject key identifier:   7C:AE:77:68:7B:F3:9C:05:43:06:5A:49:5E:41:9C:F0:45:B4:54:E6
Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
Certificate issuer:       /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Certificate serial:       01962F069B2F827343850B76172E3F32F3C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
Manifest number:          0522
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: AAX3sWHzVnJxnubTLPm93tYWdUrJ8PgvxxBWbNpQr5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9b:2f:82:73:43:85:0b:76:17:2e:3f:32:f3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=7cae77687bf39c0543065a495e419cf045b454e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:f1:17:e6:7f:21:57:d7:61:cf:67:67:55:
                    c2:fc:39:ca:fc:dd:1c:60:03:1f:71:7c:8a:29:6d:
                    15:58:27:0a:18:d5:3f:13:9a:c4:33:7a:32:67:4c:
                    e1:c8:e9:08:18:4a:cd:c4:c5:03:dc:31:c9:56:09:
                    d8:6d:61:de:8e:d5:75:53:cc:a5:af:ae:55:ae:ff:
                    56:3b:d3:d0:23:64:1e:9b:41:58:96:eb:3b:fd:73:
                    73:06:20:dd:ce:83:a4:8e:0b:15:3f:0d:7f:f6:c9:
                    46:04:3e:59:46:42:e5:12:21:fe:48:0b:d5:fe:4c:
                    b1:62:d8:f1:fd:d7:0f:b1:f3:05:34:fe:cb:a2:0c:
                    e7:14:8b:bd:d1:01:ea:09:e1:c6:6f:72:f9:48:cd:
                    a7:72:48:42:ae:88:ae:e8:c9:6f:d9:08:66:1c:62:
                    27:56:9e:74:7d:4e:b5:5f:81:cf:64:a8:86:c7:01:
                    63:48:72:c5:7b:a2:91:dc:22:32:55:2d:78:5b:42:
                    85:c4:47:82:f8:e8:ca:7f:9b:1b:0a:f4:c4:6f:0b:
                    26:42:65:8e:09:60:45:d1:ca:85:78:08:12:4f:4d:
                    43:00:f9:d9:ce:c9:08:cc:55:0c:0a:6b:4e:45:e6:
                    8d:a0:69:22:d4:ae:bc:eb:ae:ee:27:36:64:0b:77:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AE:77:68:7B:F3:9C:05:43:06:5A:49:5E:41:9C:F0:45:B4:54:E6
            X509v3 Authority Key Identifier:
                keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:80:61:2f:5b:79:1d:be:59:7b:a0:3f:a9:ec:cf:b2:ca:9d:
         3b:df:30:0a:92:e7:ab:c9:47:dc:2c:1e:45:61:64:58:32:a5:
         43:1e:13:22:76:85:58:e0:e5:a5:12:f4:c8:9e:96:60:14:f7:
         e7:66:51:fa:a6:67:d6:b2:64:43:c6:63:99:2b:d2:58:19:f7:
         41:5a:33:d6:a2:9b:8a:4f:38:1f:7f:e4:97:34:52:62:2d:e1:
         b6:b3:fb:0a:28:9a:15:3d:66:42:7a:c7:55:58:92:49:b6:de:
         64:85:d9:0c:99:a8:ea:42:31:c3:c9:1b:70:62:fb:dd:c3:0f:
         77:34:2c:c3:78:b3:7c:b5:17:61:a8:ea:3b:f9:f8:bb:0b:e0:
         de:d1:a2:ab:15:73:05:0f:63:32:eb:d4:1f:d4:d3:24:bc:f6:
         e9:f6:db:3e:da:3e:1d:05:61:0b:a4:04:11:d1:9e:c0:75:92:
         9b:63:66:86:2f:d7:6e:08:7d:d3:f6:50:23:28:d0:c6:11:84:
         0e:76:66:57:eb:18:22:44:a2:95:7e:e6:f3:0e:b2:b0:be:67:
         b4:6c:26:99:61:dc:7c:03:12:65:5a:35:1a:90:fa:81:76:5e:
         f8:c6:ba:29:7a:cd:fb:1f:13:20:0e:df:0f:ac:61:9f:43:eb:
         11:19:cb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----