Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File:                     169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier:          UeUzORl/F7M8ykKJxitRebivznHLmkCwgZMHchRWze4=
Subject key identifier:   94:D3:35:C6:F5:E2:E4:B6:76:07:CC:02:FE:26:F3:19:32:B8:89:DF
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer:       /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial:       01962F3DB5DCA0CB1FDDA3CC113760385C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number:          0A93
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: sU77I7dJ6bT+elMxvCWyayWZ9daF31NY+ZyEToQJ41I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b5:dc:a0:cb:1f:dd:a3:cc:11:37:60:38:5c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=94d335c6f5e2e4b67607cc02fe26f31932b889df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:5d:a2:24:dc:b0:dd:d5:37:3f:36:c0:f6:
                    e4:2b:6c:b5:4f:f0:d3:f9:32:38:26:1a:69:c1:74:
                    d4:37:4b:57:b6:ae:0b:cb:8e:14:d3:79:de:a2:6f:
                    78:a9:6b:7c:79:19:0d:71:46:66:0a:0d:13:ae:f8:
                    92:cb:5f:6e:ec:4d:f7:5b:5e:da:df:4d:3c:0b:ba:
                    9a:05:af:01:a2:ff:67:6e:52:1f:17:f2:9b:ed:22:
                    05:32:12:26:df:9b:7d:d9:78:37:bb:9c:29:81:2c:
                    04:38:04:f3:0c:3e:89:ba:7a:a0:db:75:18:93:13:
                    fa:08:35:46:d2:62:1c:9f:e6:94:6b:1d:fc:6b:60:
                    cc:72:90:0d:29:c5:cd:14:27:3b:36:2d:41:38:3a:
                    58:30:80:2c:16:bd:43:17:3c:38:7b:10:65:fe:7b:
                    79:54:07:7c:33:68:f7:30:17:85:a3:37:92:61:44:
                    24:07:61:92:ce:7e:5c:6b:54:6e:79:5e:cf:a4:e5:
                    75:41:fd:e6:60:b8:6f:dd:0e:78:0f:d3:1e:f4:8b:
                    28:b2:70:68:22:f2:87:12:3a:5f:18:b1:07:ef:a0:
                    99:aa:3f:56:43:0d:e1:83:94:51:45:57:5c:71:3d:
                    e8:b2:69:af:75:c6:53:af:66:6c:eb:cd:ce:5a:ab:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D3:35:C6:F5:E2:E4:B6:76:07:CC:02:FE:26:F3:19:32:B8:89:DF
            X509v3 Authority Key Identifier:
                keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:94:e1:4c:be:73:d9:67:b9:fd:da:e5:5c:11:cd:79:1a:ec:
         84:d8:d0:d2:fc:2e:36:b8:ef:8c:e6:51:52:37:d5:c1:d5:c8:
         a4:dc:be:32:c7:f4:89:cd:20:6f:12:55:9e:ea:8f:96:1a:ae:
         9c:a5:05:01:3b:87:bb:a8:23:c6:00:78:31:b0:da:98:96:cc:
         67:11:00:eb:63:70:c3:f3:e6:bf:b3:17:e0:b6:ce:6b:b6:08:
         27:74:d2:df:9c:62:5d:6c:4f:e0:3a:2a:2a:dc:e6:35:8d:20:
         f7:e8:bb:0d:98:79:48:68:49:59:81:e0:4c:2a:3b:10:33:0c:
         72:47:67:b2:8e:a9:a3:ff:aa:db:21:02:08:17:6d:10:76:20:
         96:a3:ed:b9:36:18:cf:12:a6:57:d0:53:95:ff:c3:e0:a8:e7:
         f1:f0:32:f2:0c:c3:7e:fd:ee:36:9e:c0:a4:cb:6b:ec:b4:ff:
         c0:6d:2f:44:dc:c8:58:8c:c5:1f:aa:29:17:81:ca:fe:94:b0:
         2c:22:36:83:a8:6e:3d:89:9b:df:26:c9:11:02:cd:7c:be:2c:
         57:92:8d:07:0c:5a:05:04:fd:79:71:eb:bd:b8:9f:a4:fb:67:
         f9:1a:33:fd:02:dc:67:e2:6e:74:3d:b4:50:d1:0a:96:c2:f0:
         42:0c:8f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----