Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
File:                     clOCbDGl92CXvNwqL2UZiKE2flM.mft (raw, json)
Hash identifier:          M99YndHZuMDQO7tXzJMMBVSdqq0uSQXCgSwtI0Z0yK8=
Subject key identifier:   1D:21:D9:85:17:DA:C7:9A:AF:33:34:BB:2E:73:79:AE:DB:8E:4D:83
Authority key identifier: 72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
Certificate issuer:       /CN=7253826c31a5f76097bcdc2a2f651988a1367e53
Certificate serial:       01962F07454E183CC6786068AE4EB1F3E034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
Manifest number:          07C2
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: clOCbDGl92CXvNwqL2UZiKE2flM.crl (hash: UKLi0GjxHSI9io3lEZAzpSeKFhKluZ8/hMi+Z7eM35A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:45:4e:18:3c:c6:78:60:68:ae:4e:b1:f3:e0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7253826c31a5f76097bcdc2a2f651988a1367e53
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=1d21d98517dac79aaf3334bb2e7379aedb8e4d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:cf:c8:81:67:e2:88:45:ed:c3:38:d6:53:
                    52:50:b0:19:01:45:5c:e1:54:09:16:c8:04:15:a0:
                    9d:e5:cf:e4:b2:47:65:cd:5e:1a:39:b2:b2:6c:c1:
                    1d:27:a6:f2:9f:a3:35:71:76:6b:bb:1d:7f:0d:40:
                    59:3f:31:88:98:a5:62:fb:a6:a5:6c:a2:2b:59:8e:
                    3e:aa:bd:e3:95:ff:50:cf:90:3d:c5:c3:c1:30:61:
                    d7:92:1e:f0:1e:6d:fa:3e:a1:18:41:43:23:74:27:
                    4c:2f:c6:e3:dc:b8:9a:84:35:e5:b4:15:39:1e:86:
                    6f:1e:ce:93:87:33:ba:44:4e:0e:0a:0e:1f:7f:17:
                    ee:7c:be:da:d8:15:b0:88:ab:c0:2d:aa:6b:c4:be:
                    28:82:fb:38:9d:e7:a7:50:bb:38:f5:ab:66:68:6f:
                    3a:40:b6:ae:79:da:81:96:9b:c3:8c:40:0d:7e:4f:
                    20:19:01:f6:3a:b1:a3:7f:6d:8b:e4:8f:d9:cb:31:
                    1c:76:80:2f:4d:67:97:6d:7e:2d:cc:b5:a6:62:6a:
                    e6:8b:d2:4c:f9:d1:9e:b9:53:fe:08:01:85:38:08:
                    7f:c2:c7:5c:98:73:19:c3:36:2b:47:2b:24:9c:e6:
                    8e:69:3a:31:a3:ce:be:3c:88:2f:54:22:32:bd:38:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:21:D9:85:17:DA:C7:9A:AF:33:34:BB:2E:73:79:AE:DB:8E:4D:83
            X509v3 Authority Key Identifier:
                keyid:72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:30:f1:02:57:d8:9b:c2:4f:27:c0:43:82:e9:a1:71:f9:
         a2:ed:d3:01:5e:ab:67:f5:d9:b6:b2:d4:03:34:f7:84:af:90:
         e9:26:55:d2:14:0e:51:72:26:65:87:e6:ea:97:cc:81:90:dc:
         d5:d9:01:b9:27:89:05:14:d4:3d:fc:32:a9:49:6c:80:63:39:
         49:06:d8:b8:a2:40:f6:0c:cc:4f:4a:7a:44:ba:ce:d8:6b:f5:
         6e:a8:52:bb:6e:e8:0a:3c:84:19:3c:56:90:99:31:fc:a8:da:
         bc:6e:dd:b7:f0:c3:ac:a0:a7:64:8a:92:9e:ff:d4:31:b5:7e:
         57:5a:7c:94:da:25:71:f2:6e:0e:0d:6c:86:66:d8:cb:e0:85:
         2f:8a:51:12:05:54:8a:f2:98:e8:d8:35:2a:ee:3e:5a:f1:2e:
         d1:86:b7:7a:ce:7f:a3:6a:ed:5c:c6:1e:78:c1:21:48:ab:74:
         ba:12:fe:48:f4:28:14:fb:6b:d4:52:ad:3f:a9:0f:1e:71:05:
         84:76:53:47:b0:63:dc:a6:f9:4e:bc:ca:10:bc:9e:72:29:55:
         ce:7a:f8:87:01:7c:ae:41:d4:84:8b:5d:87:5d:c5:9a:e3:a2:
         f2:27:8a:7f:ef:10:a6:91:b6:f2:fe:8d:6e:e5:b9:31:c4:80:
         ba:60:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----