Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File:                     14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier:          zkUSt3QPBbauCSVL26GeAfvpzmaGHkp0rZLjd2aa68g=
Subject key identifier:   D9:84:7A:0E:0E:B6:9F:81:73:50:01:3E:3A:4A:09:D7:23:A9:EC:9A
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer:       /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial:       01962E617EA396ED09C80AD9D72D37B9B685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number:          03C0
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: RLjM+GZHt8A36rE32i6MzVLn7XwCmMDS95B5Y/YSIdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7e:a3:96:ed:09:c8:0a:d9:d7:2d:37:b9:b6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=d9847a0e0eb69f817350013e3a4a09d723a9ec9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:74:b5:ab:8a:15:18:b4:d5:43:8a:28:61:
                    6b:eb:e8:52:8e:8a:7c:da:49:4c:61:93:94:85:6f:
                    56:ef:b4:95:40:46:58:8c:b3:c1:cc:89:90:e0:70:
                    c3:5c:e4:7b:82:e4:65:56:43:80:64:e9:05:86:af:
                    d4:96:62:b2:ae:0a:4c:f4:c3:67:8a:af:8e:e6:68:
                    71:56:ca:2d:99:5c:74:91:c9:45:59:2f:98:a5:29:
                    8b:bb:db:e6:e2:9f:45:a0:a4:24:18:d6:1b:8d:e4:
                    59:0a:45:4b:b3:a4:64:15:c4:3d:35:f5:ca:e5:d0:
                    96:4c:59:1b:29:e7:cf:fe:2a:e8:a1:5a:f1:b3:ff:
                    cd:33:60:e0:40:ab:4c:75:20:8d:20:ba:e3:b4:88:
                    74:4f:56:48:89:16:d7:8e:ce:fe:e6:85:00:9d:07:
                    8a:90:5e:56:be:5c:25:62:4b:68:d2:a2:d2:fb:6f:
                    83:ad:58:3b:dd:7f:64:af:01:27:de:65:6d:55:7d:
                    51:c1:63:7d:d0:1b:25:62:9f:e7:d5:ce:1e:6d:c4:
                    c7:1a:ae:0a:ae:2d:53:f3:c5:64:e8:27:44:aa:d9:
                    37:62:67:3b:e4:1c:02:3f:3a:20:2d:48:f8:44:af:
                    54:0f:9c:c2:64:40:a8:5e:6b:9e:38:8b:18:d0:2f:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:84:7A:0E:0E:B6:9F:81:73:50:01:3E:3A:4A:09:D7:23:A9:EC:9A
            X509v3 Authority Key Identifier:
                keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e1:d7:03:21:0c:07:06:fa:fc:03:d1:3a:7e:60:6c:51:b3:
         94:6e:ad:e0:43:53:91:80:0d:80:7c:2f:ad:9c:95:ea:e8:63:
         46:57:62:9d:22:02:5b:e6:fc:61:f4:b8:63:a0:3e:c6:ff:aa:
         20:1a:1d:b7:c6:21:8b:06:60:19:69:41:c1:2e:94:d2:c6:ff:
         77:5a:d1:33:0f:9d:db:f5:1c:a4:91:38:e6:6e:ee:29:00:f7:
         5a:2f:1d:56:20:03:97:c7:68:05:6b:0f:3c:cb:45:8a:48:4f:
         fc:0c:4b:77:99:31:70:b4:4c:c6:a9:32:10:03:b1:d2:25:db:
         4d:03:c4:df:de:fa:21:fb:b1:3c:11:4d:19:ea:47:74:1b:aa:
         1c:20:9b:bf:e6:54:29:91:7f:6b:bb:b3:3d:ac:67:5c:4f:59:
         8e:b5:54:08:76:87:ea:7a:b9:96:13:a0:d1:99:b0:93:20:65:
         4a:c5:fc:a0:9f:9b:0e:86:b1:0f:39:f7:fd:3e:14:ed:d9:a3:
         28:ae:5c:5c:8e:0f:f1:5b:17:6b:98:38:33:5b:7f:de:9c:92:
         a7:7b:a7:07:df:c1:c7:b1:99:f5:68:d0:90:bc:7a:97:25:ff:
         8c:65:97:2b:16:70:2f:50:bf:85:75:01:64:b1:cd:97:6a:25:
         7c:d3:20:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----