Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File:                     la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier:          8l9hJXve74hAfwME+XTIXWrD4ArYBZpQi349VAaonmI=
Subject key identifier:   A8:F1:B8:B8:EE:A4:B5:6E:BE:44:1D:C8:ED:C3:63:DE:2C:08:5A:9E
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer:       /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial:       01962E99A36901780D9932BF7B59CD8E8D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number:          0C59
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: HagugIHfY5E0mhGjkPA1UNB1/9l/OgzU8o5KI+FDkg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a3:69:01:78:0d:99:32:bf:7b:59:cd:8e:8d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=a8f1b8b8eea4b56ebe441dc8edc363de2c085a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:82:8a:26:a5:7f:63:c7:7e:09:66:5a:52:
                    c6:1b:a4:b7:b3:23:27:b5:59:56:44:10:0e:fc:7f:
                    2f:9b:ae:a1:0f:c3:5a:25:8c:4f:25:02:30:c1:15:
                    c5:1e:cf:7c:33:97:5b:32:7c:10:42:db:55:50:bb:
                    3d:4e:1a:d9:86:46:1f:a8:c7:4c:a5:bb:7f:dd:9e:
                    9e:0f:ba:f8:5a:3f:a6:63:32:61:99:d0:0c:7e:fa:
                    0a:e6:58:09:f5:76:64:5f:09:71:25:5a:6b:70:3c:
                    d5:c4:bb:fd:73:df:db:de:30:23:b0:18:e7:ba:05:
                    c0:9e:52:f5:d8:cc:33:53:a0:47:00:cf:08:08:ee:
                    df:4f:97:22:4a:92:4f:75:75:f2:39:00:ec:46:18:
                    db:56:76:60:bb:91:cf:a7:55:8a:00:95:86:ff:ea:
                    2d:18:02:51:b2:61:f4:2d:5f:48:e4:cf:cc:5f:c4:
                    9e:90:8a:6d:fa:26:e2:0d:a0:0e:c0:66:08:e0:04:
                    58:1d:24:3d:fc:14:3c:af:ab:04:4e:cb:2f:b3:02:
                    b8:78:fe:04:6d:0d:18:4f:b9:d9:08:b7:a7:92:8d:
                    64:f7:1f:82:ce:39:6d:eb:72:de:21:a6:ab:ca:b6:
                    4c:a4:db:9a:d4:bb:86:d0:15:20:7b:ad:e3:f6:e2:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F1:B8:B8:EE:A4:B5:6E:BE:44:1D:C8:ED:C3:63:DE:2C:08:5A:9E
            X509v3 Authority Key Identifier:
                keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:18:b8:0a:6f:75:fb:a7:38:48:63:42:56:5e:89:22:3f:af:
         ef:25:da:1e:03:ec:4c:29:ca:51:ae:94:88:f6:10:b7:bd:67:
         79:1d:58:5e:cb:88:36:db:0d:10:20:5c:12:ed:ce:a9:35:58:
         46:ba:49:0a:f1:08:c5:55:2d:02:68:50:42:e0:06:b1:bd:bb:
         e3:2c:c3:6c:67:89:ab:1d:ab:a9:cc:f0:3d:d9:b5:b0:44:a6:
         b6:1f:74:e4:f1:73:bb:80:7c:2c:d2:c1:76:37:56:73:3e:9f:
         cd:03:d7:84:c8:c3:e2:0f:a3:48:8e:df:01:6e:37:41:3b:0e:
         26:fc:f2:0e:01:b5:f9:38:a3:52:ae:50:d3:1f:17:ef:0f:42:
         e1:17:fe:99:c9:03:c9:5a:96:fe:e1:26:c0:b5:c5:8c:14:17:
         30:a9:e3:e4:99:7a:05:2a:35:5a:10:24:6f:f1:76:c0:92:84:
         3d:b7:02:a6:04:46:0e:bb:11:ea:56:d3:41:18:e8:43:8c:ee:
         10:32:aa:21:2e:8b:28:cd:36:4a:df:e0:cb:ad:86:b7:49:f0:
         55:a9:d0:1a:37:bf:c7:94:fe:32:42:ef:c8:a6:7a:1a:a7:58:
         a8:24:b0:1c:22:a0:4f:f3:14:87:72:48:86:e4:69:22:46:2e:
         80:d8:8b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----