Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File:                     mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier:          A3yoRi4CMqaCuG0LIBuu7Qhoohr4Sp30f8z26b0YFCw=
Subject key identifier:   47:B8:AC:11:C2:2D:EA:D3:B6:40:25:65:9C:33:27:CE:88:44:B0:AF
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer:       /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial:       01962F06C36C29C62604658687EFD41DEA4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: wv2+jatJvHAk/2yw2+kFwNVj8l5DtgjTe/CW5KBY+1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c3:6c:29:c6:26:04:65:86:87:ef:d4:1d:ea:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=47b8ac11c22dead3b64025659c3327ce8844b0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:bd:a0:a0:47:21:e9:f4:7e:e6:97:23:15:
                    62:19:9d:ef:49:9a:df:96:ad:f4:2a:ba:07:88:1e:
                    f5:3f:38:ee:2c:36:2a:33:59:9a:87:33:14:bc:2b:
                    20:20:3a:b6:dc:4b:b4:7e:e4:07:2a:9c:c6:a6:b0:
                    7f:af:90:cf:e4:5a:2c:b0:67:79:d6:4d:a6:53:55:
                    74:40:fd:2c:a9:45:87:3b:c7:36:4d:0a:39:9e:35:
                    db:25:ae:a9:d7:61:62:a1:20:49:b6:f3:cd:fc:35:
                    fd:d6:bf:e5:19:ff:ac:38:bb:cd:2f:c9:21:84:0b:
                    1a:4c:dc:97:ab:8b:ee:b2:a4:35:f6:ec:b1:71:d0:
                    52:f9:50:a7:30:4d:d7:b3:22:c9:14:f9:7a:88:e0:
                    51:a5:05:cf:9f:9a:ca:9d:2c:78:b7:08:c7:85:b6:
                    f6:d9:eb:fc:60:aa:e9:fe:f2:b6:b1:54:c0:a5:e0:
                    6d:b0:ed:1a:40:56:ce:49:be:a8:b9:30:fa:ee:b0:
                    5c:34:98:c5:68:61:f7:fb:04:0e:0d:e5:d1:6e:ab:
                    16:14:22:45:6f:f6:02:ed:39:d6:74:06:ed:ce:36:
                    0b:cf:28:62:6a:14:92:93:d0:06:1d:25:4b:bc:19:
                    29:55:5c:6d:c2:42:1c:85:09:07:ff:2a:10:56:dc:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:AC:11:C2:2D:EA:D3:B6:40:25:65:9C:33:27:CE:88:44:B0:AF
            X509v3 Authority Key Identifier:
                keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:71:47:86:0a:c9:fd:bc:e1:39:6e:f9:e6:04:2d:d6:5d:2c:
         d9:8d:28:d1:08:1e:93:ad:6a:cd:b1:13:01:7c:cb:d0:4c:16:
         ea:59:ab:7f:ad:2e:20:c3:b6:a9:12:46:7f:0e:ef:24:4c:35:
         4d:d6:70:99:04:50:ca:77:7d:8e:48:07:31:cb:d6:bc:ab:e0:
         7e:e4:92:9d:84:a7:60:6f:d6:58:b5:ed:93:9d:8b:bd:67:14:
         d3:f8:28:0f:b3:68:e4:92:50:c0:28:8b:aa:e4:71:c5:77:ca:
         82:88:07:d2:7e:3d:9e:32:32:5d:30:f4:c0:5a:e0:78:48:29:
         71:8f:04:70:e4:af:96:15:5b:9a:3a:84:2d:ae:8f:2d:da:cd:
         af:3f:86:4e:20:ab:43:5a:85:e3:a1:2e:bc:7f:65:64:40:19:
         44:ff:55:22:e1:3a:06:1b:d2:45:eb:47:b6:34:68:db:e6:ef:
         2e:b3:d3:cb:60:5f:4b:11:11:ab:7b:09:1a:33:0b:cb:47:a9:
         d9:be:fb:f0:ed:a3:55:e5:3c:0b:d9:9c:a7:81:91:42:b7:a1:
         73:5c:93:25:cb:6b:a5:26:ee:e6:e0:41:d9:8b:02:ca:15:64:
         9b:d1:11:04:88:eb:29:81:18:f0:ad:20:4b:d7:8a:93:2d:78:
         dd:c9:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----