Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
File:                     maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft (raw, json)
Hash identifier:          VgY+xwxqso+DkHeWppjXwyqyY686eOvjspQHHMUTZJc=
Subject key identifier:   BB:BA:47:81:2A:F3:D5:90:63:3E:4F:F7:53:87:2C:59:E8:74:AE:72
Authority key identifier: 99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8
Certificate issuer:       /CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
Certificate serial:       01962F74974E318C917137E0423B1D727151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
Manifest number:          10A8
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl (hash: M1eISd0XdXbrr1fVgCmAtAI5FwGT5t5CT2AXKo5PxLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:97:4e:31:8c:91:71:37:e0:42:3b:1d:72:71:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=bbba47812af3d590633e4ff753872c59e874ae72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:d0:56:90:c1:c4:98:fe:89:5f:64:01:f3:
                    09:dc:b2:e7:d9:ac:99:a1:1a:a2:6e:29:16:aa:ad:
                    f6:6a:2e:5d:4e:f1:6d:79:03:7a:5b:57:9a:45:4a:
                    6a:9e:26:d0:b0:5c:25:77:cc:c0:5b:f0:ac:16:e0:
                    9e:83:ef:74:25:6d:64:74:5d:54:b8:3a:78:e3:86:
                    6e:e0:b6:42:60:bc:43:8f:b0:d5:0d:f0:fc:c9:34:
                    6d:7d:c1:90:5f:8c:32:6d:99:2a:7d:06:fc:9f:56:
                    5e:6a:9c:0b:8f:15:a2:7d:31:bb:22:76:e6:4c:83:
                    90:6a:8e:e9:8d:72:f4:3a:aa:63:dd:ac:b8:92:f4:
                    cf:60:99:1a:01:c4:99:53:51:62:7c:5d:51:d0:69:
                    59:93:50:bd:7b:ad:d9:c9:d6:5a:6c:0c:91:18:c9:
                    5b:7e:4a:ee:40:5d:64:60:48:98:5f:f8:a5:72:a8:
                    38:57:80:7f:13:4c:c3:95:9a:a6:f5:66:d4:4e:5e:
                    19:79:ed:a2:56:1c:c9:b3:1e:24:80:17:93:0f:1f:
                    db:f7:9a:a8:98:b2:44:b7:02:a0:d3:0b:f7:a0:88:
                    5b:6e:d2:3c:38:9d:e4:9a:90:1f:a3:f1:8f:e1:43:
                    fd:83:70:c4:d9:11:77:77:d0:94:bb:bc:3a:73:25:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BA:47:81:2A:F3:D5:90:63:3E:4F:F7:53:87:2C:59:E8:74:AE:72
            X509v3 Authority Key Identifier:
                keyid:99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e7:19:17:e4:a0:dd:03:b2:1c:51:3a:87:23:13:ea:c2:34:
         0c:9f:41:ab:8b:e8:7e:cd:20:aa:cb:f7:ef:85:27:87:2f:19:
         b1:d0:35:6b:ea:e5:47:98:4f:e7:47:84:72:4c:2e:ae:db:d4:
         0b:29:df:56:1d:10:5b:e3:df:90:de:5c:13:57:3b:e9:db:01:
         de:ce:36:dc:40:26:ef:98:5c:36:a2:68:64:d2:bb:34:de:7c:
         4c:06:42:33:39:90:05:9e:2b:ab:8e:4b:b7:08:e0:e1:54:bd:
         e2:40:03:9c:91:cc:d3:83:26:0d:bc:99:98:4f:7e:50:91:78:
         4b:46:b9:ad:dd:14:c8:64:03:56:c7:4f:e5:84:9c:35:d9:3b:
         ea:65:22:30:ad:b1:61:58:1f:b0:a2:bb:82:66:7a:c8:e1:ce:
         03:f2:47:f5:09:32:d3:6f:90:d5:19:43:10:82:00:b7:16:24:
         4b:4f:de:81:9b:35:34:04:f0:ae:33:b3:49:9c:eb:6a:86:84:
         46:f4:5d:5b:75:b0:a8:56:5d:fb:d2:6a:88:f7:ae:e0:f7:c5:
         43:51:29:d2:e5:88:5d:74:03:0b:33:9e:88:ba:5d:06:f8:0f:
         1c:76:5b:01:e6:16:81:9a:67:a6:57:d2:d8:5d:48:d5:99:d9:
         db:17:f9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----