Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
File:                     1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft (raw, json)
Hash identifier:          r257YX6+JIAHOVz+XseA45hX3vmJOUtRkyw7K7f6tXY=
Subject key identifier:   4B:7C:EB:D2:9B:A5:62:03:CE:3E:A9:3B:7F:95:0F:41:68:1E:C9:60
Authority key identifier: F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
Certificate issuer:       /CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Certificate serial:       01962F0695080371E7F785CEEC66C035827B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl (hash: RXUJaJ3Nk7iQ+lLJuF+2SVYWy57+SXyJKEN6PsM7zQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:95:08:03:71:e7:f7:85:ce:ec:66:c0:35:82:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=4b7cebd29ba56203ce3ea93b7f950f41681ec960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:e2:6e:b1:00:f7:8f:6d:8d:58:8d:ad:ef:
                    68:a4:66:1b:6d:2e:4e:22:e4:07:f7:f2:4b:3d:f7:
                    d3:0d:9a:7d:f3:c1:30:f5:36:98:f3:b9:99:bd:22:
                    e8:10:ef:e7:16:67:c9:88:e5:49:67:1d:33:d1:fc:
                    7d:11:f3:f2:ba:42:fa:92:7e:27:8d:b6:a1:25:52:
                    83:57:d0:e8:61:69:b7:bb:c8:4e:1e:bf:06:14:7d:
                    c5:b3:04:7c:0f:10:a1:20:44:7c:5b:ef:09:73:91:
                    09:25:c3:ae:98:dd:fd:b1:ed:cd:25:2c:b2:ce:68:
                    8e:44:ae:26:03:76:46:68:20:08:0a:63:07:85:76:
                    65:51:94:0e:8c:95:a5:90:f0:9e:ff:8b:23:72:08:
                    64:22:9d:9d:c9:ff:da:e5:d8:3f:3f:ec:7f:b3:39:
                    56:c7:1b:9b:f3:99:c8:77:bf:f5:e7:a6:1d:56:ff:
                    f2:d6:b2:7b:40:92:aa:4e:d3:af:18:52:f1:f1:23:
                    3c:b6:77:73:78:cc:c1:bf:9e:31:d6:d2:dd:e3:ad:
                    32:de:37:2c:f1:19:50:3c:a4:e3:59:77:13:39:38:
                    a8:c8:9d:3f:b0:bc:9b:1a:7f:27:22:50:6e:65:de:
                    5b:85:b9:d9:e7:8e:b2:d6:c7:8d:45:d2:8c:9c:7d:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7C:EB:D2:9B:A5:62:03:CE:3E:A9:3B:7F:95:0F:41:68:1E:C9:60
            X509v3 Authority Key Identifier:
                keyid:F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:19:54:de:33:e2:2c:8f:d9:1f:46:7b:7c:38:83:cc:3b:b0:
         d3:c8:da:73:55:28:b2:33:40:49:05:93:bf:63:4e:7f:03:12:
         cb:72:0f:e1:09:50:2a:88:af:69:7c:92:ff:51:f9:c2:ea:25:
         95:52:5a:2d:45:51:8e:eb:35:f8:74:71:7e:0b:16:64:e5:0d:
         25:cf:fb:71:fe:23:93:13:04:aa:7f:bf:d8:36:a7:9f:68:8c:
         d3:5b:cf:1f:a6:b7:99:b5:b3:25:43:78:f6:88:1f:f6:47:44:
         be:6c:5b:e0:19:9f:e5:0b:08:95:1e:98:8b:18:97:63:50:9c:
         66:58:9e:df:ac:b2:2d:bd:b2:c0:b5:35:eb:58:36:3f:22:84:
         2b:73:9d:8e:f6:d8:7f:45:74:ae:37:a3:11:ae:24:30:67:cb:
         1b:ba:b1:79:fd:86:31:6a:a2:fe:72:f7:9b:5f:d5:43:92:19:
         95:6b:46:58:aa:98:56:ab:78:06:a6:78:cf:65:0a:43:cd:65:
         e4:b7:fe:a5:1a:97:d1:17:11:10:94:07:a1:5c:60:48:b8:9e:
         d4:84:c5:2c:83:5b:48:57:e0:3f:61:e0:84:bc:b2:14:3b:56:
         05:0d:b0:4f:77:b6:d1:e6:0b:24:f4:81:f7:27:ca:a0:bd:2f:
         b1:d7:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----