Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File:                     9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier:          +aUmSkmaM5YPcuAZaN8N4exPtqdEGXvn5vTQgr9trsY=
Subject key identifier:   D0:6B:17:F2:90:72:9F:96:57:18:15:8E:93:FB:55:98:0C:37:10:85
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer:       /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial:       01962E99B2F953F5F558663CA37CBBAB19C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number:          081C
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: 4mR3n1A4/9orHFO8jfjgZu35Vz1zOP+6KAoHLNY+2Nw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b2:f9:53:f5:f5:58:66:3c:a3:7c:bb:ab:19:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=d06b17f290729f965718158e93fb55980c371085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ef:ab:e0:a0:fa:81:5e:88:32:1a:b6:12:c6:
                    60:d1:87:9c:7c:c5:c2:b5:08:50:d0:a7:06:ca:9a:
                    86:33:62:b0:80:c5:5f:ce:a3:be:eb:f5:9e:0a:1e:
                    53:3e:f4:c9:55:85:89:ce:54:16:23:3b:47:ac:f2:
                    ec:68:75:8d:45:67:9b:87:91:e3:42:22:f3:3e:5f:
                    e4:c6:cb:ca:ca:6b:07:2e:cb:55:cf:94:d6:9b:63:
                    ce:e0:90:9f:07:ba:46:64:bf:28:26:10:e6:13:02:
                    f8:fe:fd:69:c6:43:fd:f2:13:78:f4:39:2c:71:e7:
                    4a:66:fa:ca:cb:90:f1:df:ce:f4:7a:30:6a:e6:d5:
                    55:b7:c4:35:a9:cc:9c:83:00:b9:d6:81:8b:e4:17:
                    71:0e:8c:5e:b7:10:d6:6c:a1:73:8b:ec:b9:97:fb:
                    cf:8e:a5:bf:4c:75:fb:1a:12:1c:35:36:59:71:48:
                    8a:6e:8e:47:bb:a0:69:35:0a:4a:76:57:f8:d3:5b:
                    30:a7:ab:d8:12:e1:eb:e6:7b:3f:8e:00:16:8b:09:
                    68:91:3a:59:2b:57:fb:4b:e1:db:12:0a:81:9c:7a:
                    2b:be:9b:f1:aa:b9:b3:1f:37:5c:5d:c4:44:09:51:
                    2b:ca:2d:9d:6c:b4:c4:0a:26:ed:56:12:d8:05:da:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6B:17:F2:90:72:9F:96:57:18:15:8E:93:FB:55:98:0C:37:10:85
            X509v3 Authority Key Identifier:
                keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:10:4d:20:33:e8:3f:58:97:c4:33:55:f4:f1:09:74:b1:23:
         0d:41:02:1e:52:a8:f1:b1:1e:01:95:46:26:10:e8:29:c4:02:
         d8:63:da:f2:49:e9:55:e0:26:45:58:15:f9:3b:df:97:3a:fd:
         54:83:0b:7b:9c:c9:b2:0d:77:a0:65:05:f4:0c:36:a6:0f:e3:
         46:a1:5b:0d:ac:e1:67:f9:3e:6e:62:00:75:c8:4c:ab:4e:a7:
         67:79:cf:f6:c8:6b:db:cd:2d:f5:fa:8e:85:88:97:e5:47:36:
         75:6c:47:b3:7f:bf:76:dc:ce:18:4b:f8:8e:f9:b1:99:c8:26:
         20:61:29:4c:2c:72:0d:d3:3a:f6:46:d8:79:97:3d:1c:36:03:
         33:c1:a5:5c:64:a9:13:c9:f6:26:8b:cf:10:68:c6:85:3c:bc:
         7c:d5:e0:01:ed:7d:ee:fc:75:68:09:57:ca:7a:5e:1e:6c:c6:
         53:25:c5:f1:7f:7e:23:a3:60:c7:ce:f3:a4:77:88:8a:e1:4a:
         59:35:06:e5:ed:87:4b:9c:6a:a8:95:69:26:ae:10:7c:dc:30:
         bd:4c:5a:f1:bf:fb:84:20:9e:ef:f2:c6:e3:34:8e:3c:99:0c:
         fd:24:7c:d2:70:82:b2:f6:c9:1c:96:90:71:e7:10:52:3d:b7:
         a0:be:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----