Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File:                     2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier:          XF/Kd6wX+E1pg5jORvp9mi95xqzhMQw5P+4cqFda3oM=
Subject key identifier:   07:5A:20:80:09:A3:E4:88:0E:37:A0:BD:2E:D9:DD:9F:7E:60:CA:1B
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer:       /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial:       01962F74F485071EF9906780A5D1EFFB9CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number:          0110
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: rKhx/WDk3IFZNXF7b+fDdyomYQUO2UIgyhgeUclOAsQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f4:85:07:1e:f9:90:67:80:a5:d1:ef:fb:9c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=075a208009a3e4880e37a0bd2ed9dd9f7e60ca1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:ff:80:f5:4a:44:5c:17:95:72:d1:35:15:
                    8f:4b:44:72:c6:9f:9d:43:1e:e6:59:1d:39:fd:72:
                    1e:a6:af:17:4a:7c:78:66:c4:e1:db:c1:01:48:33:
                    81:d9:28:de:b1:b1:e1:d7:35:dc:29:fc:0f:59:b2:
                    da:64:00:ae:fb:a5:e7:41:df:e6:a1:87:0d:34:2e:
                    fd:9f:3d:35:3d:8b:88:95:1f:c8:14:f9:36:50:0e:
                    f8:34:1c:41:78:5b:bf:8f:3e:db:3d:8b:47:ab:a2:
                    9f:b5:79:83:a1:b9:86:01:c1:fb:59:f7:1d:c2:c8:
                    3f:7c:4f:aa:cc:00:fa:52:5d:00:df:a2:ba:15:db:
                    98:b8:7a:49:18:b3:6e:7d:eb:73:eb:ca:cd:e0:57:
                    0c:8d:ee:8c:fa:cb:ba:44:22:00:47:21:df:e2:1f:
                    8e:51:9b:17:bf:e9:7d:ec:c4:e8:c5:1e:54:af:ed:
                    6f:a3:66:1a:bd:4c:69:6a:36:ed:9c:13:6c:bd:21:
                    b0:db:fe:45:e2:66:04:e7:2f:12:7b:8e:ef:0c:e1:
                    16:1b:f8:fa:21:be:85:a9:65:db:90:cc:4d:7c:90:
                    59:5e:ae:50:1d:ac:fd:42:b8:0b:bd:35:d3:4f:ad:
                    2e:f1:bb:a3:0e:b2:fc:dc:52:c3:3e:fa:1c:8b:f6:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5A:20:80:09:A3:E4:88:0E:37:A0:BD:2E:D9:DD:9F:7E:60:CA:1B
            X509v3 Authority Key Identifier:
                keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f0:db:0e:8a:b7:1f:af:62:6f:87:05:d1:57:24:af:cc:36:
         8b:1b:ba:53:d8:6f:ba:08:98:c4:30:cc:94:91:cd:4c:d0:b8:
         05:96:2d:26:11:7e:a5:1a:4b:09:b2:f1:d8:11:bd:f8:78:6b:
         6b:2d:de:de:77:b5:7e:5a:0a:67:8e:8a:1d:63:41:c0:54:4d:
         db:25:26:dd:09:5d:50:9a:e0:54:58:47:1a:a5:85:7b:1e:01:
         6f:33:57:0e:74:42:ef:eb:f1:ec:d4:63:bf:0a:2a:e4:f9:3f:
         78:12:82:26:6e:8f:3d:60:72:6e:2b:58:f6:3d:14:d3:1b:eb:
         82:31:5b:dc:af:b7:69:04:ac:bd:70:38:c5:9c:a3:ae:7e:dc:
         ba:3d:1d:32:1a:39:45:41:1a:ba:d3:fa:67:50:6e:b9:da:7f:
         28:16:c3:e6:5b:bc:93:33:bf:f0:d2:fb:58:84:68:36:77:90:
         a2:08:1c:27:93:09:b2:cd:59:dc:81:ed:33:cf:ef:f1:be:85:
         24:06:2f:3e:b9:2c:c5:a3:e2:d4:3e:1c:c4:9d:72:39:d5:f9:
         09:24:cf:f4:fc:73:3e:05:27:28:14:5f:3b:12:2b:99:83:55:
         16:44:5c:61:59:b5:ae:8f:27:c3:43:66:62:76:4a:b5:3a:44:
         1b:4b:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----