Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File:                     9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier:          he42cLSDwbybS+fllFl/3VCPyRrO+oHOumjWgQjXIBU=
Subject key identifier:   F1:F9:9D:2E:5F:02:56:4C:A3:4E:0D:0E:19:34:71:DA:AA:DE:12:DB
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer:       /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial:       01962F069E309C5561A23C1229A1E7334812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number:          0454
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: Q2FSELspyFiIccGH9dqsWyIK/DumDlGCZ9s6w21SdQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9e:30:9c:55:61:a2:3c:12:29:a1:e7:33:48:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=f1f99d2e5f02564ca34e0d0e193471daaade12db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:0e:48:47:b6:ea:0e:a5:58:82:fa:88:a7:
                    01:91:fe:58:69:1b:e2:0c:2a:67:a5:cb:9f:4a:b7:
                    3a:72:4d:94:6e:fe:d7:f9:61:76:52:61:38:75:f5:
                    34:73:09:c2:c8:c0:5f:fe:b8:49:8d:8c:fa:65:e2:
                    7a:d8:a0:05:f8:63:68:2c:4f:c6:d2:de:45:56:08:
                    4c:7b:40:54:85:c6:1c:92:db:d9:5b:50:92:84:48:
                    f6:54:95:ad:4b:af:ef:12:bf:b4:a8:b4:e7:10:66:
                    22:ac:bc:40:30:34:26:2d:56:12:81:64:2b:f9:f5:
                    75:99:c0:e9:44:78:ef:95:1b:03:12:9a:bf:22:a7:
                    81:e7:61:62:41:28:d8:07:88:75:67:af:88:99:7e:
                    a4:ce:80:f4:fa:34:a6:b8:0d:e7:cc:64:42:a8:3c:
                    0b:f9:40:60:b7:8d:91:7f:05:1e:2a:20:16:03:2f:
                    ed:52:92:dc:3a:79:2f:29:f8:8c:b5:23:f0:74:2d:
                    cb:0a:f1:14:b8:f1:d4:1b:e6:a4:f8:27:e9:67:1f:
                    98:6a:8f:ff:23:49:82:b9:51:2c:74:d8:28:e9:53:
                    4a:9b:9b:f3:5e:0e:f1:df:fd:60:a5:f0:db:bf:9b:
                    95:81:f9:b3:15:0f:bf:af:3e:4e:f5:d3:2a:66:ea:
                    97:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F9:9D:2E:5F:02:56:4C:A3:4E:0D:0E:19:34:71:DA:AA:DE:12:DB
            X509v3 Authority Key Identifier:
                keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a8:6b:77:28:3a:7d:ff:ce:78:1e:b3:cf:04:bb:c3:75:4b:
         83:18:81:ec:37:b2:9c:37:87:be:50:1a:1a:7e:2c:99:97:64:
         d1:42:ed:ab:bc:2e:0d:93:37:72:a1:8e:d4:29:f5:67:d9:a9:
         82:54:ac:8b:9e:d4:dc:e7:c3:dd:68:00:e4:fb:41:ee:48:35:
         7c:8f:5a:f8:a9:3f:6b:c2:ac:e2:e0:bc:e3:82:e8:1c:05:66:
         8f:f4:b8:f0:7d:12:5d:8e:a4:ea:11:b2:5a:9b:21:47:a0:af:
         47:95:fe:95:2a:23:43:88:c8:33:b6:07:b7:ce:db:45:81:91:
         32:b4:d7:90:b2:43:26:bf:b8:e3:83:75:66:42:e2:e1:c3:4b:
         93:5e:7a:db:4f:48:71:67:9b:bc:e5:86:50:94:ce:9c:3f:b0:
         29:a2:b1:d6:7f:4e:fb:b4:02:4e:f7:fe:32:5f:52:4d:bc:67:
         38:7b:f1:0d:9d:92:8f:35:e4:1f:0a:be:cd:6e:41:ea:ae:11:
         79:28:9e:45:58:73:77:19:d6:d5:06:72:a3:e8:e0:60:6e:c3:
         98:62:80:2c:6b:8f:bd:e6:e7:8d:95:90:d9:9a:ce:5f:16:f1:
         de:f9:5b:c9:2d:f4:61:14:e9:4d:ae:d0:be:c6:8c:a6:d1:c3:
         69:aa:49:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----