Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File:                     E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier:          5qZvMoByIAs3HVe1c6aEY6scFVXaRjTdoU0FKAalosM=
Subject key identifier:   F4:05:4D:AD:0F:F4:3E:64:F0:82:29:F0:05:6E:FF:72:59:54:03:9B
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer:       /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial:       01962DF3ED29F55D002D8D15F582161FD8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number:          0B16
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: RcTch4vmztlAhvaoOz/Vj8oNpi3ciq5488nJ3GMJpkc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ed:29:f5:5d:00:2d:8d:15:f5:82:16:1f:d8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13dde69abccc65d08688ca83542633a219293227
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=f4054dad0ff43e64f08229f0056eff725954039b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:96:fb:9c:3b:3f:e9:f0:ee:df:4e:73:e7:
                    b7:b9:54:d2:d2:24:71:0c:db:d4:36:27:d0:85:62:
                    93:15:28:82:eb:0e:a3:30:12:2f:d5:0d:7b:30:d0:
                    82:5a:f1:ad:64:58:8e:98:d2:05:49:3c:7a:8d:b3:
                    9a:8a:c9:2f:cd:3e:c3:4b:a1:ae:60:ea:53:84:93:
                    d5:79:f0:28:8b:5e:58:d7:08:4d:26:92:f8:aa:d6:
                    09:64:a2:23:ca:fa:03:1a:96:0d:6b:1f:7a:58:cc:
                    d4:aa:a0:40:74:89:1c:e6:2a:9a:e6:5b:3d:21:f3:
                    62:54:a1:71:43:1d:6c:db:62:39:4c:12:de:06:66:
                    46:31:9a:87:49:9d:8d:31:6e:86:c5:d6:c5:33:df:
                    64:de:4f:0a:b5:f2:d0:7f:38:8d:34:ad:32:6c:86:
                    78:86:b7:43:0d:ab:92:58:6b:41:26:5e:bc:84:86:
                    88:62:bc:ee:8f:97:8d:7f:6e:8e:44:15:a4:1c:08:
                    5c:c2:69:dc:a4:01:e3:4c:c2:e2:4b:36:89:bb:83:
                    dc:f8:bb:47:87:90:bb:3e:92:1d:4e:63:0b:12:b6:
                    55:c1:ff:69:75:02:b2:88:35:f0:3f:ba:61:a2:70:
                    d4:d8:19:38:88:19:6f:fe:b9:44:c5:ae:67:c6:dc:
                    0b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:05:4D:AD:0F:F4:3E:64:F0:82:29:F0:05:6E:FF:72:59:54:03:9B
            X509v3 Authority Key Identifier:
                keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c8:30:a0:44:d0:ed:6b:a7:cc:55:03:8a:b7:b6:1a:ed:7b:
         7a:05:f0:a9:75:1b:5b:4f:f0:eb:e0:ce:e5:0a:3a:cd:61:59:
         bd:06:94:bd:93:5e:9d:a9:8f:af:ce:54:42:37:e7:79:ea:2b:
         d8:bb:67:2a:29:d8:23:e0:55:5d:47:ea:fe:f1:d9:28:71:e3:
         5d:99:17:82:d0:09:48:d5:f4:e9:a0:82:4e:ea:7f:bf:4b:81:
         3a:aa:9a:38:55:55:55:05:1e:d9:77:27:08:21:c3:b4:53:55:
         2a:db:ed:33:b0:ba:da:ea:bc:cf:c2:d8:b1:48:cd:14:15:cf:
         a1:9c:15:25:fa:e3:9d:21:96:e1:6b:f2:3e:a3:d9:de:97:c6:
         c5:db:60:20:37:aa:4f:6e:b4:02:26:93:a2:be:99:e1:c4:fb:
         28:41:6c:3f:ea:60:c3:6a:06:26:d8:48:fe:09:4b:85:b4:fc:
         ab:b7:ee:09:b2:81:ce:a0:38:61:76:89:a3:af:d6:2b:1d:96:
         f9:13:57:08:d4:df:4b:28:38:f4:d4:e1:5f:b5:45:46:e9:51:
         d4:27:3e:ab:a9:bd:f3:a4:a9:cc:24:68:19:bd:0b:d6:7b:8f:
         67:9c:9a:e8:89:7b:8e:6b:7c:b5:48:67:83:02:d0:d6:cd:29:
         01:cf:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----