Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File:                     9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier:          HmYlShPQsOMxMgGAjxCQTutUufDur5EyPkRWow5BP+o=
Subject key identifier:   05:00:44:01:CF:69:21:36:DD:6C:BE:F3:AA:5F:AF:5E:0D:6C:94:51
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer:       /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial:       01962F7419947798477DA53A78086DEFB8F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number:          10BC
Signing time:             Sun 13 Apr 2025 14:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:00:59 +0000
Files and hashes:         1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: QOecPZ1cuodfvSIll0OiZhfeQHsCaNCdhMEnYybhJzk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:19:94:77:98:47:7d:a5:3a:78:08:6d:ef:b8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
        Validity
            Not Before: Apr 13 14:00:59 2025 GMT
            Not After : Apr 14 14:00:59 2025 GMT
        Subject: CN=05004401cf692136dd6cbef3aa5faf5e0d6c9451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:dd:36:8f:5f:7d:57:76:5e:26:b8:cd:1c:
                    45:ff:67:65:32:db:26:54:5d:47:d6:ad:ad:03:78:
                    a9:91:7c:b8:2b:58:fa:9a:06:49:39:7b:42:ac:d4:
                    98:71:9f:95:e7:7d:fd:df:c0:38:27:a2:53:82:28:
                    1f:ee:6e:21:ae:ba:8e:94:33:f7:20:bb:9d:26:80:
                    22:75:32:e8:28:79:9d:a4:69:4a:f9:be:dc:c8:a5:
                    da:85:ff:fd:b8:57:db:98:81:51:4c:38:50:93:26:
                    83:65:21:83:28:0f:a2:f0:3c:9e:b8:5a:a5:0b:6b:
                    f0:d3:4f:13:63:f5:53:ca:79:3f:19:66:7f:ba:db:
                    8e:3b:1a:ac:99:7a:ed:8b:9f:f6:52:30:93:b5:22:
                    40:50:ef:2a:db:ab:ed:cc:e6:3d:64:3b:94:cb:82:
                    7c:8d:ac:b5:7a:e2:de:d2:2f:fc:24:76:49:0a:b1:
                    03:7b:de:57:07:61:69:7f:ef:ce:fd:49:3b:5e:c0:
                    0a:59:3c:28:b3:9c:70:9a:ae:42:1e:22:a0:58:69:
                    03:64:15:ae:9f:fc:46:12:f1:4e:6b:60:00:9e:21:
                    8a:b3:e8:93:56:ac:92:6f:67:70:d5:2e:3d:c6:d8:
                    c2:4d:e5:7f:55:a1:1d:3d:f7:40:d5:1c:86:56:3a:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:00:44:01:CF:69:21:36:DD:6C:BE:F3:AA:5F:AF:5E:0D:6C:94:51
            X509v3 Authority Key Identifier:
                keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:63:a3:88:fc:82:f3:34:5e:91:38:19:81:60:3c:a0:1f:44:
         60:2e:ea:ae:0e:10:1f:99:8c:6a:d7:44:7c:df:74:84:df:63:
         03:51:3f:96:86:92:a5:a3:d6:a7:38:e7:f1:21:4a:c9:b7:42:
         db:6b:e6:38:b0:cb:44:ba:a1:46:cd:2f:17:23:0a:a3:3b:83:
         f8:b6:59:b0:b7:1a:5d:9a:a7:9e:3a:3a:a9:77:f1:5c:36:b8:
         ee:52:a0:50:24:5e:ad:0f:c1:52:6e:f6:bd:3d:1e:79:5b:dc:
         b0:21:c7:af:05:b1:6b:88:26:33:fc:b3:62:20:c8:3f:cd:c1:
         46:c3:91:6d:24:50:a6:52:92:73:8b:cb:cc:0c:93:bf:72:30:
         2f:21:0a:4a:16:d1:8f:fd:55:bf:cf:76:d3:8d:55:fb:8a:1f:
         0d:5a:8d:6c:4b:e5:de:88:a9:bd:02:a0:3c:ea:3d:11:05:c1:
         ae:97:bf:aa:54:0b:94:97:6c:39:d4:d6:73:d9:a0:4b:37:25:
         aa:78:9d:ca:1f:28:4c:be:6d:d9:e6:0e:0b:fb:e6:df:76:ab:
         5e:04:65:76:69:61:cf:05:f3:a1:89:f5:c7:04:6c:05:3a:77:
         24:5a:0c:f9:55:27:e1:b0:ea:cb:17:0c:64:ae:12:9f:e9:ae:
         3a:77:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----