Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
File:                     d6TN722YqQcT__52cRNId5pjKgo.mft (raw, json)
Hash identifier:          rlWT1JQi3Ej1+AsX1RcH1fE85/xIJcobi4jAauHrIsY=
Subject key identifier:   09:7A:37:3F:59:02:65:C1:0E:74:06:C5:F4:0D:CC:E5:19:3A:1D:44
Authority key identifier: 77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A
Certificate issuer:       /CN=77a4cdef6d98a90713fffe76711348779a632a0a
Certificate serial:       01962ECFB746FACEF79C0E63C32DB4CF06CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: d6TN722YqQcT__52cRNId5pjKgo.crl (hash: HDPddeDNmjbmstYEaIgM6M3orcwIEi1cLlQi9Z2l0Jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b7:46:fa:ce:f7:9c:0e:63:c3:2d:b4:cf:06:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a4cdef6d98a90713fffe76711348779a632a0a
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=097a373f590265c10e7406c5f40dcce5193a1d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:ea:aa:56:21:47:96:47:f4:84:b4:35:79:
                    49:2e:ec:e7:ed:5f:69:71:a3:a8:f2:65:e2:d6:cb:
                    21:3e:62:2a:a5:10:d0:2b:0f:5a:94:a4:0e:76:f8:
                    8b:ab:c7:a4:23:3d:93:eb:ec:b4:62:54:c8:0c:3c:
                    fd:a9:42:de:7c:da:84:6f:6f:08:e4:4f:e6:1b:f7:
                    95:b9:25:4f:d1:df:7f:e3:bb:76:08:83:e9:1c:71:
                    e3:1f:cd:5f:f9:0b:1e:91:1f:ae:8c:16:e4:2c:69:
                    b9:ee:40:37:d7:d2:6b:11:3f:90:af:00:54:63:31:
                    b1:d3:dc:7b:a5:df:fb:f3:59:cb:18:c3:ce:5e:d6:
                    30:ec:ac:bf:59:bc:b5:43:47:13:07:ce:d6:7d:c1:
                    c5:6f:fa:40:3a:0d:5a:c9:40:9f:b3:0e:94:c5:84:
                    c2:ca:a9:28:ca:79:98:fd:74:f8:94:d1:31:ff:ac:
                    80:54:f4:43:9d:99:06:4c:0c:8e:52:b2:68:b0:37:
                    69:de:5d:e9:40:5a:fa:59:f9:8f:74:e4:bd:a5:93:
                    4a:a3:e1:e1:0f:7e:66:14:50:f9:bb:02:4c:5b:dd:
                    2c:b6:a8:8c:5e:fc:6b:4f:ee:ce:1e:61:bb:cd:fe:
                    32:b3:ef:7c:76:21:1d:c8:d6:9b:82:58:06:84:18:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7A:37:3F:59:02:65:C1:0E:74:06:C5:F4:0D:CC:E5:19:3A:1D:44
            X509v3 Authority Key Identifier:
                keyid:77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3c:ab:69:00:bc:b1:88:4a:1b:1b:d4:5e:2a:65:14:3c:46:
         7d:a0:d8:4f:fb:03:c9:9a:f4:73:6e:e9:50:02:08:3e:7d:b9:
         ae:94:7d:06:42:2f:72:5b:d5:45:5a:b8:3c:ca:1e:df:33:c2:
         90:76:97:29:91:fa:d4:37:43:76:8a:15:e5:12:62:b4:1d:17:
         af:b7:7f:50:8c:d8:de:d2:8b:71:06:1b:23:0b:b2:d5:34:66:
         7c:bb:32:81:41:fd:bb:6b:da:4e:e5:66:7b:6a:56:d8:56:9c:
         e9:56:5f:c1:67:5a:3f:21:f8:dc:6d:8e:80:fe:4e:67:56:37:
         6c:8e:60:ca:9f:ef:71:fd:1f:df:62:2e:47:cc:5d:ef:71:ac:
         c1:b8:08:c2:5b:41:ac:d9:b1:4b:75:34:fe:2c:05:fb:2d:1e:
         13:a8:47:c0:de:4a:1c:01:f4:bb:50:23:7b:59:56:f8:a3:b7:
         47:06:f1:69:8a:94:b1:45:bc:32:df:38:db:96:27:f6:e2:3b:
         09:4a:73:80:1a:84:8e:af:72:ff:d3:23:57:bd:1f:96:fb:52:
         3e:de:03:8d:b7:68:83:14:54:03:da:a6:09:05:65:6f:ec:ab:
         66:3a:e6:c9:23:0b:78:3f:db:6e:4b:33:8a:35:15:47:6a:e1:
         be:ae:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----