Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File:                     2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier:          /2UK1RZspfchlUdR4j5FiZ6hWRSHqHyBIf1UR6YBVWo=
Subject key identifier:   45:D2:6B:3C:D9:B8:44:3E:AB:8A:2A:48:63:C6:CE:59:27:2F:EB:D5
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer:       /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial:       01962E99D58B1BE2F50947D01081AFC47BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number:          0988
Signing time:             Sun 13 Apr 2025 10:02:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:35 +0000
Files and hashes:         1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: 8KHkbB7IlNLEv9Zj2vCReMnI4zYA9iI3pALCGIf+Uro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:d5:8b:1b:e2:f5:09:47:d0:10:81:af:c4:7b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
        Validity
            Not Before: Apr 13 10:02:35 2025 GMT
            Not After : Apr 14 10:02:35 2025 GMT
        Subject: CN=45d26b3cd9b8443eab8a2a4863c6ce59272febd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:b2:14:73:68:e1:ee:12:0b:48:65:97:87:
                    59:16:0e:22:43:23:87:88:dc:70:7f:83:06:ce:29:
                    1b:fb:65:da:f1:42:fb:54:a7:c5:d0:57:07:70:1e:
                    4a:cb:e6:d9:26:cd:8c:11:96:64:1f:8b:78:73:07:
                    c3:3f:53:65:4d:f8:77:6f:3c:23:97:07:0f:cd:75:
                    1b:fd:7e:67:2e:44:db:2b:89:a8:34:22:0b:19:68:
                    4a:78:4c:a5:62:03:c7:ca:46:e0:ca:f3:a6:e2:9b:
                    d1:8c:19:fe:f4:8d:ce:7a:08:af:dc:aa:d8:25:5d:
                    60:d8:ea:31:db:79:b5:8e:fb:50:5b:0b:2a:2f:9d:
                    1b:67:bd:8c:42:7b:86:a9:dc:df:e5:57:9f:3f:aa:
                    b9:f5:b5:72:03:dc:94:7e:15:11:89:ae:57:f0:ba:
                    41:82:65:67:40:26:83:f3:4a:bb:48:14:d1:9e:a7:
                    ed:a0:9f:95:af:c5:03:c6:15:4f:1b:b8:02:b0:85:
                    66:62:1d:ee:c3:d2:1f:0c:52:3c:6f:fc:5c:dc:63:
                    f2:a6:ef:34:3e:26:46:de:51:48:ad:1e:8a:04:46:
                    a8:09:b1:64:5e:ac:89:18:95:f2:26:fe:b3:ff:de:
                    44:a0:2f:2f:4b:41:5b:52:7f:8a:25:84:0e:43:f7:
                    40:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D2:6B:3C:D9:B8:44:3E:AB:8A:2A:48:63:C6:CE:59:27:2F:EB:D5
            X509v3 Authority Key Identifier:
                keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2f:be:89:68:ee:1d:5f:21:26:eb:73:dc:03:96:55:84:8c:
         8a:be:d5:56:f3:2d:e6:67:7f:d8:37:d3:48:f1:ee:c2:87:af:
         01:2a:f1:b1:65:e6:6f:85:3f:42:7f:21:b5:ca:c8:26:d4:6e:
         6a:ac:ab:42:b8:e4:58:2c:54:05:c3:ac:32:ab:eb:7e:71:25:
         73:07:d7:80:27:9a:63:41:1a:2d:55:ee:78:28:e7:02:a2:32:
         f4:01:69:63:19:47:95:25:30:e3:bb:73:4b:29:4d:ec:64:66:
         bd:a0:e7:7e:0a:52:e0:09:de:c0:98:66:38:28:84:b8:50:10:
         9c:25:60:36:e0:aa:ff:0f:1b:ea:c9:ba:68:8c:13:5b:2c:d1:
         32:19:c8:f1:1e:69:55:36:2b:a0:a6:e5:59:3c:25:1d:40:c4:
         db:2b:55:21:4c:68:b3:a7:7e:17:28:98:9f:05:53:34:5c:e8:
         0d:bf:df:98:b1:e4:76:59:da:fd:45:15:fd:6c:dc:b5:31:26:
         be:9c:e4:f8:77:de:b5:0a:98:7d:e4:f3:9c:05:62:d9:57:ef:
         41:04:b3:80:07:b7:c8:33:92:25:1c:d6:c2:40:fa:3b:c0:6e:
         07:95:11:5f:a4:a9:00:fd:e2:81:63:6e:fb:04:dd:1c:9e:3e:
         34:6d:e3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----