Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
File:                     MMOt1700croWgExJC2ahCXZZvTE.mft (raw, json)
Hash identifier:          vFK0i/RFsnWvxMer4tkbVRGiCb2rASO0FBarrLhLGi0=
Subject key identifier:   E1:D2:81:93:DA:37:23:F0:73:11:97:5B:B8:35:EE:12:08:89:62:F8
Authority key identifier: 30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
Certificate issuer:       /CN=30c3add7bd3472ba16804c490b66a1097659bd31
Certificate serial:       01962F74A2C96A716C2D7405CE1B6F29B090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
Manifest number:          0A9D
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: MMOt1700croWgExJC2ahCXZZvTE.crl (hash: oiRxKg3ff/70xq1XzFiC0jX2Z1hssZrrpMf5NMuPioI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a2:c9:6a:71:6c:2d:74:05:ce:1b:6f:29:b0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c3add7bd3472ba16804c490b66a1097659bd31
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=e1d28193da3723f07311975bb835ee12088962f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:4e:65:07:fa:b5:6d:b8:f8:07:fe:86:40:
                    18:75:5a:57:5e:fb:64:aa:72:5e:28:cc:b3:89:39:
                    38:47:53:3e:7e:08:91:2b:7c:f8:52:f2:b3:22:95:
                    09:52:1b:38:6c:f5:5d:27:5e:a5:fd:13:47:81:96:
                    bd:ee:f9:a5:04:94:1e:a1:9b:65:af:a7:d2:a0:90:
                    96:7e:61:6a:70:24:ac:ed:4c:64:b9:14:11:ff:f5:
                    a9:67:90:75:96:ea:a0:00:dc:8b:50:b4:52:8e:26:
                    f3:80:f0:21:a1:1a:eb:d2:46:a5:bd:c5:4e:a4:5e:
                    1b:01:37:bd:1a:a3:1f:c9:cf:8e:ae:57:d6:86:54:
                    b0:d7:5c:e0:98:11:f6:2b:69:e6:a6:a4:b7:f5:ba:
                    ce:a8:df:58:a8:14:ca:0f:fa:5a:54:2a:05:42:cc:
                    f5:c4:34:86:80:fe:2d:cd:98:98:eb:64:3a:c8:6a:
                    09:4b:a0:dd:a3:c8:2d:6f:f3:a0:77:f8:3b:64:39:
                    17:05:b9:8d:ef:04:f9:98:7d:f0:c1:c2:68:7f:dc:
                    37:18:0c:b1:a5:a0:dc:85:06:b4:55:23:03:97:2e:
                    1a:46:0b:d2:b0:44:f5:e9:34:45:d1:f5:ab:63:e6:
                    2a:ff:24:59:c1:6a:25:d7:71:67:a1:f7:ed:e4:44:
                    2d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D2:81:93:DA:37:23:F0:73:11:97:5B:B8:35:EE:12:08:89:62:F8
            X509v3 Authority Key Identifier:
                keyid:30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1f:c6:58:c2:bb:d1:1e:99:e8:7e:30:9f:39:7f:aa:dd:d7:
         df:e6:a4:27:30:96:a2:8c:24:eb:9d:ac:2a:ab:a6:e8:a4:c5:
         a5:94:87:fb:79:07:38:65:6f:dc:de:67:16:c0:d4:e6:13:4c:
         45:ac:cc:2d:c6:fe:1e:87:f8:96:0e:32:eb:52:ad:ab:92:d8:
         21:2b:92:e7:69:af:b2:85:7d:d0:18:9e:38:c8:86:2d:49:e7:
         62:e6:da:93:0f:10:0c:e2:ed:41:bc:cc:3b:6f:e9:a1:5f:9f:
         67:20:96:83:88:fb:73:4f:cc:27:65:26:6b:9a:d0:52:ec:c4:
         61:8e:d7:0f:d5:a8:06:b3:b1:28:b2:66:d5:4f:fa:51:26:44:
         0c:d5:56:d3:98:af:68:60:62:22:b2:52:ce:f4:85:16:ce:8b:
         03:73:b2:eb:60:8a:85:ac:f9:d0:c8:db:e5:01:fe:2c:76:2d:
         50:51:a7:f7:8d:47:6f:53:dc:3e:3c:f5:a4:76:22:57:ed:b3:
         d5:30:bf:5a:72:26:33:12:17:ef:bd:74:31:76:37:b0:03:91:
         56:e4:3d:62:f2:a8:93:4f:90:aa:e1:fd:09:01:cc:85:8f:35:
         e8:57:04:ec:4f:7d:c1:7d:05:73:cc:ff:cc:fd:d5:61:7a:cc:
         64:87:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----