Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
File:                     xVRM5A0R1h07gKfRAyMBI_t9aKU.mft (raw, json)
Hash identifier:          e+TbRNq+CVqbwMaPoRG98Jf//phYGYo92YZwNx8GeNw=
Subject key identifier:   77:BB:06:01:7B:71:83:49:9C:45:FB:92:AC:90:AD:DF:AB:FE:2B:00
Authority key identifier: C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
Certificate issuer:       /CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Certificate serial:       01962DF4365D81DFBCB7FF371CF804E46E69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
Manifest number:          0E09
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: xVRM5A0R1h07gKfRAyMBI_t9aKU.crl (hash: DbR4CSSPgI4UfuHJEWq8q3VF6h6PgpMGTfRdfn6H16k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:36:5d:81:df:bc:b7:ff:37:1c:f8:04:e4:6e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=77bb06017b7183499c45fb92ac90addfabfe2b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:9f:02:53:b9:7f:11:0d:e7:c7:5c:5f:02:
                    f6:e9:00:33:30:4e:7d:57:1f:51:13:cb:19:33:8e:
                    56:77:95:f9:d8:83:ba:23:96:43:63:02:3a:6e:7f:
                    6a:87:57:27:29:1d:0b:2d:73:f0:10:d7:ce:88:db:
                    df:2d:66:9a:d7:1c:ea:14:06:c7:33:41:a6:af:22:
                    28:25:63:75:b1:ba:36:05:24:42:72:19:e0:15:b7:
                    75:36:c9:3c:5d:27:72:8e:32:ca:9c:6b:2a:3b:22:
                    3b:4e:29:c9:79:5c:da:2b:a3:83:f3:fa:2b:6d:07:
                    72:c4:15:45:bb:f1:a4:9b:8a:23:f8:cc:a9:ff:88:
                    ce:30:63:1c:d5:d4:75:00:ca:83:82:a7:19:95:dc:
                    8b:91:cc:36:df:75:2a:15:76:58:c9:96:c3:88:0c:
                    74:2b:79:bc:b9:6a:79:5d:e8:b2:c6:95:d9:ba:36:
                    fe:b4:90:96:fe:c5:06:3b:b1:0f:f6:df:50:49:a1:
                    ae:c5:b7:7d:40:15:6a:f4:0b:b1:64:e0:58:2a:91:
                    90:79:2d:35:7b:be:1c:1f:6a:60:1c:08:0b:60:73:
                    65:5e:e0:df:c9:b7:f8:78:43:af:0b:aa:4a:d5:38:
                    52:d9:36:d6:3f:5d:f2:b5:7c:48:8f:db:42:4c:98:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BB:06:01:7B:71:83:49:9C:45:FB:92:AC:90:AD:DF:AB:FE:2B:00
            X509v3 Authority Key Identifier:
                keyid:C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:fd:7d:90:f7:34:7e:c5:16:d9:84:41:40:72:9a:fd:97:
         21:bb:fb:b9:97:87:27:d8:6b:5e:82:f4:4f:5c:c0:6a:45:57:
         10:26:6b:0c:a3:e0:1c:4f:95:27:06:fb:cb:58:8e:e6:64:12:
         63:69:c1:b6:55:79:2b:9d:b3:56:32:7a:88:5b:88:a0:73:9b:
         cb:0f:37:b4:17:b8:7c:d3:95:ab:6c:7f:25:56:a4:70:ab:30:
         0a:b9:3f:a8:84:ad:dd:bb:4c:a8:28:af:5e:a7:2d:e3:41:6d:
         99:c3:f7:82:4b:2c:2d:6e:64:a7:6d:a6:f3:87:c3:8a:86:81:
         19:79:2c:a9:60:ae:2b:21:3a:03:81:f6:bc:8f:f4:a7:1a:eb:
         7d:4c:ce:f7:a1:9f:fc:10:15:c4:31:58:53:6b:f9:76:91:5b:
         c1:19:de:e3:70:f4:69:d1:69:6e:6e:52:9f:2c:27:99:61:ad:
         e1:85:a7:a0:a8:1d:59:8a:6e:03:df:2c:b4:1b:bb:5c:b4:2f:
         d1:80:df:70:9a:fa:78:7e:c9:5a:81:51:be:d1:c5:db:67:00:
         bc:17:ff:7b:a3:fa:f1:84:3d:f2:94:e4:c2:b1:7e:65:b3:2b:
         41:cd:6a:75:66:2b:62:cc:ca:1c:06:de:3f:74:c0:5e:c8:48:
         e2:1f:5f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----