Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File:                     9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier:          CVVN2N+fvaSlI6f5tli8/lqb3DHTfLTLi/Ff3bbaN6M=
Subject key identifier:   D7:52:78:35:77:AA:67:37:30:B9:85:8F:73:7D:60:34:65:D9:BF:80
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer:       /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial:       01962E9986DA8BA5BA61BAD16ADC9F4DC2EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: aqdQiRv0I90SsQkl12ILb1QS03nZmYdmyVrsUSucNDw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:86:da:8b:a5:ba:61:ba:d1:6a:dc:9f:4d:c2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=d752783577aa673730b9858f737d603465d9bf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d1:df:ff:64:d0:4c:fc:33:aa:9f:22:a3:c8:
                    06:46:88:c4:d3:0d:e6:f1:63:aa:01:8a:ee:9c:30:
                    f4:55:66:fd:40:17:c0:c3:03:e0:86:91:28:d4:40:
                    8e:a9:00:b3:4e:bd:09:fb:c7:a6:2c:19:ea:db:5c:
                    20:72:a2:a5:8e:65:fb:1b:26:c3:39:b8:81:66:63:
                    81:76:82:3b:52:02:5c:a8:f0:ef:89:9c:04:b3:d9:
                    3b:7a:46:a9:db:2a:8d:a9:c8:98:d7:4b:57:c1:00:
                    e1:2a:c8:97:50:99:9a:68:b4:85:52:7d:96:56:03:
                    32:f7:d2:3f:15:e7:fd:01:0d:2f:30:91:fe:df:27:
                    6c:b2:61:ae:d1:df:1c:8c:b0:c7:0b:57:70:c0:b9:
                    78:b4:a3:7a:ca:21:9f:4b:2b:43:5f:50:29:c6:7c:
                    ae:cf:d1:ba:cd:7c:b9:38:82:ab:bf:3e:41:f4:bb:
                    fa:15:73:5b:52:3e:80:eb:38:39:39:da:35:5e:a3:
                    64:99:0c:42:c3:c9:a8:f5:ec:6e:3d:86:8d:d6:34:
                    44:d4:16:68:c6:55:f5:87:d6:03:67:07:eb:2d:d6:
                    66:29:94:a6:9b:8b:43:5c:06:77:42:13:0d:aa:3c:
                    dc:4f:e6:05:7c:bc:60:d3:b6:b7:cb:3d:16:b7:3e:
                    fc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:52:78:35:77:AA:67:37:30:B9:85:8F:73:7D:60:34:65:D9:BF:80
            X509v3 Authority Key Identifier:
                keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:c7:62:1c:e1:34:7d:0c:43:a9:83:d3:5c:16:56:81:a6:
         53:a4:12:e6:31:98:82:93:90:87:ff:5f:2f:3d:11:0b:05:22:
         4b:07:9d:ff:02:f9:9d:4a:65:31:96:22:06:e6:aa:13:46:99:
         7b:5e:d8:91:d9:d9:28:c1:19:47:58:a4:e3:dd:72:5c:9c:f3:
         af:06:e7:4c:c3:a7:b4:0f:7b:12:9e:2a:ca:db:e1:99:bb:82:
         f0:f5:2f:37:99:a0:53:72:49:cc:81:41:f9:05:54:fd:ad:38:
         fc:9e:ea:c8:27:1c:2c:46:5a:41:3c:6c:84:e9:d9:bd:c7:c7:
         c5:29:bc:9b:72:cb:6b:2c:9d:04:db:3e:69:d0:0c:be:0b:16:
         34:92:49:7d:6b:c6:f5:64:6a:2f:74:7b:57:d2:a7:c0:19:5b:
         f9:79:8f:a7:37:04:0a:e6:15:80:ce:ee:b0:65:ef:ee:44:49:
         85:28:0d:60:02:2a:4f:4b:ce:a8:06:47:5c:75:af:e7:f1:ec:
         04:2e:89:63:fb:f0:66:ad:01:3a:5c:5d:d6:e6:16:f6:cb:a3:
         45:5b:ce:90:12:33:d5:bb:f3:4f:02:32:39:58:c6:f1:e2:9f:
         21:e9:61:df:d1:e7:45:b5:fb:c5:67:e8:93:c4:87:0d:5a:df:
         dc:db:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----