Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File:                     mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier:          J1WbzYVBWjB08/b4lX6sme+OPaGym17l4ZIwnZx8bug=
Subject key identifier:   5E:2D:CC:F5:A4:01:D6:E8:F2:9B:E4:13:41:DB:88:14:FE:85:7F:42
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer:       /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial:       01962E9977825BD7B949FBD697AECE99051D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number:          1306
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: G3bPtDx0TvVdf4ayVJDtbWUroio.roa (hash: 0QDqlFsV7bJD4enXREu7nHOgEbbLdZBSnVYjPXImw60=)
                          2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: c3JXMv0mdRubzN0UUXPYuxw1ZqPuULYAX+AoQcqOTaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:77:82:5b:d7:b9:49:fb:d6:97:ae:ce:99:05:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=5e2dccf5a401d6e8f29be41341db8814fe857f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:0a:a8:2a:3d:bc:ed:97:3d:a8:fb:ac:58:
                    1e:72:56:2f:7f:3f:7c:ee:e6:87:2b:e9:b1:98:5b:
                    8a:ee:5a:f2:1c:61:f7:51:bf:35:8f:96:6f:b1:92:
                    78:7c:93:ef:21:29:68:31:7b:15:0d:9f:aa:3d:b6:
                    06:61:8a:72:a1:d9:e5:2e:fc:ce:f0:a0:de:08:5c:
                    c3:5f:17:f7:5c:5c:61:89:e5:ec:1c:3e:4e:45:de:
                    79:ee:c6:0e:e7:6e:3d:8a:a9:1e:7d:57:4e:94:2d:
                    20:00:1d:22:2a:b7:3c:cc:34:36:4f:14:62:ad:34:
                    b3:13:bb:6e:00:a0:36:95:7b:4e:38:ee:05:46:77:
                    37:5e:37:ce:dc:4d:c4:14:24:b8:0f:2a:10:ab:38:
                    4d:9a:1b:96:2b:9f:b1:ab:a8:dd:17:31:9b:1a:96:
                    de:f2:4c:c8:5f:5f:de:17:f4:0b:6b:c2:d5:f6:12:
                    f0:10:2c:fc:04:61:dc:c0:2a:73:0e:be:45:9d:d1:
                    0c:f7:ae:f5:cd:47:d2:3d:e6:da:4f:af:52:70:bb:
                    44:0c:2b:4c:69:5b:c0:27:8c:b8:19:d9:c9:2d:da:
                    8a:1c:d4:ee:74:6e:0e:ad:1e:1d:b3:73:a0:12:c4:
                    1c:53:a5:2c:ca:dc:63:bf:ec:87:07:59:b9:53:0c:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2D:CC:F5:A4:01:D6:E8:F2:9B:E4:13:41:DB:88:14:FE:85:7F:42
            X509v3 Authority Key Identifier:
                keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bf:f5:25:a2:79:e0:b4:7e:4e:30:ed:f6:64:d7:0d:2d:99:
         af:98:14:a8:70:e4:aa:e8:b1:b0:3f:79:b5:a8:a7:3a:28:9e:
         51:d1:f8:70:a0:8a:ff:da:4f:92:f9:a7:2e:a4:b0:1e:e3:97:
         a2:35:14:a5:e4:b5:b1:0a:e9:b2:21:8e:22:29:4e:94:f5:28:
         cd:19:0c:df:6d:a8:24:95:42:c0:cd:2c:78:4d:db:74:19:bb:
         ca:9a:d9:18:78:56:e5:6c:6b:57:d6:03:a0:76:83:dc:c6:19:
         c1:40:e9:2d:8f:49:3f:94:a1:2d:02:d5:94:fd:4e:76:89:3f:
         86:01:06:30:f1:d1:ff:9c:c2:92:5e:e8:6d:7b:ca:b0:1b:dc:
         bc:f6:78:a8:f7:93:d2:2c:c6:75:f8:27:27:ec:23:cc:b5:3a:
         d5:3f:c5:d3:0a:b2:38:0e:7c:52:00:5b:3e:a7:bf:db:32:c9:
         fb:e5:6f:c8:5d:80:3e:08:5c:f3:71:21:df:91:34:45:b8:99:
         fa:7f:05:1a:1e:8c:9a:c7:a5:d9:9a:22:94:e0:6c:c9:70:be:
         c0:39:69:e3:b2:45:6b:6b:6b:7f:42:20:6b:aa:29:76:91:dc:
         1c:28:ad:dc:b9:bc:34:fb:6c:0b:e9:28:4d:a7:e9:fe:74:0d:
         8b:39:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----