Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File:                     ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier:          0nN1K6SM3nL1hJ7wkJ1r4MefdRe5swbRlLB/Ehz+tvY=
Subject key identifier:   F2:18:DC:C0:60:30:FB:B2:F5:71:00:6E:57:0B:E3:89:56:EE:F8:A3
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer:       /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial:       01962E9982EB52D7265E1C9CE85BA2B7B8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: Yv2W7VMMCwy9aUlqPdSTrDWjccadvS5+uHAeVOHHkfM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:82:eb:52:d7:26:5e:1c:9c:e8:5b:a2:b7:b8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=f218dcc06030fbb2f571006e570be38956eef8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:9d:d0:b7:4e:16:3e:a7:07:ea:12:8a:26:
                    9d:bf:c2:3e:35:c7:38:6b:95:d0:21:8b:cc:7a:fd:
                    b1:3d:5e:3a:b3:08:e2:07:2b:18:e5:ba:b4:c1:02:
                    4e:05:e7:e3:16:ec:3c:69:02:29:b3:fc:ce:d2:d5:
                    b6:cc:3d:04:3c:ff:5f:c4:85:80:21:2b:25:88:92:
                    fe:0b:67:86:f0:47:b3:ff:3c:69:1e:f0:60:46:06:
                    6a:18:2e:9e:bd:7f:16:eb:ab:5b:c0:e2:86:a6:4a:
                    2b:af:2a:8a:a4:5d:49:74:2d:c7:d2:d2:5d:ae:74:
                    17:9c:60:8e:13:08:44:c8:6a:ec:7a:0e:ba:7c:b3:
                    de:e6:07:a5:fd:05:32:3f:8a:bf:62:1b:87:4a:58:
                    84:cd:37:ac:cb:d4:97:a8:89:b0:fc:f7:f0:35:3d:
                    c5:3f:f2:11:aa:28:5d:69:6d:a4:8a:91:fa:44:8a:
                    43:ee:db:15:1b:a5:ab:3e:8d:4d:7a:8d:d5:9e:43:
                    1f:fd:b1:83:9c:12:63:2e:ac:a9:56:81:1a:f8:44:
                    22:d0:8e:6e:6f:16:57:82:b9:f4:9a:4f:5d:45:58:
                    ff:e4:ef:34:3a:f8:e6:7f:dd:53:e8:ac:00:ff:2a:
                    6a:d6:71:30:7a:39:0e:3a:7a:a4:c2:58:80:6f:f8:
                    99:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:18:DC:C0:60:30:FB:B2:F5:71:00:6E:57:0B:E3:89:56:EE:F8:A3
            X509v3 Authority Key Identifier:
                keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:73:d3:94:14:d4:94:d0:8f:84:ee:95:2e:ec:bf:ef:a2:e7:
         43:44:79:3a:16:14:89:8b:5e:78:5f:83:28:36:04:4d:34:2b:
         30:d4:43:73:be:e1:f7:82:04:3f:56:d5:2d:1a:e4:a7:0d:9f:
         b8:c0:97:a2:9f:c1:9e:4a:a3:c4:cf:1b:1e:86:20:77:b1:c9:
         89:42:60:99:4e:2d:e1:5a:21:74:a4:3a:59:30:53:01:c5:d9:
         e4:53:1f:c5:e1:0e:0d:7d:75:f9:45:b0:6d:76:4a:d3:a0:cf:
         85:75:d3:4b:ee:79:39:3d:f2:54:ec:d3:c9:d6:60:e1:12:de:
         c8:a0:3f:e4:e3:fe:04:23:56:ec:89:f2:f0:c8:23:65:d7:4a:
         51:73:2d:4f:44:66:ab:44:d8:fc:d0:7a:c4:e0:41:40:c3:97:
         00:77:c0:a6:b9:5b:d9:91:7e:dc:70:97:03:3c:b1:4e:36:e7:
         8e:03:1d:65:c3:32:4f:17:66:52:1a:ac:d1:fc:65:bd:ee:d1:
         3d:2e:98:d9:d3:e3:fe:ec:b5:52:46:2d:de:f0:4b:08:53:d3:
         aa:69:51:c8:dc:59:d3:8f:67:fa:8a:70:b1:4b:3b:b9:bb:86:
         8d:6e:ff:54:4e:e8:e0:43:2c:90:69:7e:e5:29:c5:80:b7:10:
         dc:f5:a9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----