Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
File:                     SEpnLpkiPCcMFLXib_82qLzOTPI.mft (raw, json)
Hash identifier:          +IqRBFRO0Q9eG08zpBjhPKtnQQ7Bti3HcY6f7GoG2hE=
Subject key identifier:   06:7A:6F:90:31:B0:F6:E6:56:59:58:88:87:8F:05:35:2A:34:A3:44
Authority key identifier: 48:4A:67:2E:99:22:3C:27:0C:14:B5:E2:6F:FF:36:A8:BC:CE:4C:F2
Certificate issuer:       /CN=484a672e99223c270c14b5e26fff36a8bcce4cf2
Certificate serial:       01962F74CE498AB7303BC09B7C9CA3AC4CBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: SEpnLpkiPCcMFLXib_82qLzOTPI.crl (hash: 08nw1YLL/xuBGbfZj9LfF7zBD9dmh2E4YH/HkkxpoNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ce:49:8a:b7:30:3b:c0:9b:7c:9c:a3:ac:4c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484a672e99223c270c14b5e26fff36a8bcce4cf2
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=067a6f9031b0f6e656595888878f05352a34a344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fe:de:cf:82:72:aa:c3:f6:ff:99:c6:fc:d9:
                    50:14:b0:4a:a4:48:5b:7a:69:87:62:3c:3e:bf:e1:
                    dd:c2:4a:6a:8a:b9:fc:3b:9b:ed:12:8d:bc:a5:4a:
                    c3:9f:bf:a0:b3:96:55:07:69:88:76:91:69:89:1b:
                    3d:5f:f2:98:9e:63:e6:79:a2:98:6f:9a:1f:3d:94:
                    ab:d2:f7:20:d9:5e:50:32:b8:7f:6f:a6:e5:14:3d:
                    d5:41:03:a9:2a:2e:36:ef:25:6a:22:59:1b:dc:07:
                    08:55:fb:6b:96:b1:25:67:d4:7b:38:bd:f2:e9:a8:
                    4d:5f:5b:e0:2e:d2:9d:b9:c9:b6:25:e6:60:f7:59:
                    d3:e6:33:b4:ec:eb:4e:d1:fd:c9:d0:31:79:c1:25:
                    a2:fa:39:a2:44:ea:11:54:99:a6:cf:ed:91:c2:95:
                    bd:1f:5f:dd:64:c4:0e:e6:5d:ca:4f:ab:3e:e6:67:
                    f9:ba:ae:ec:7e:72:6a:76:67:74:13:9f:2e:bd:6d:
                    51:2e:1a:25:63:a3:3b:6d:ef:20:5e:1a:8f:2c:de:
                    26:c2:9c:17:cf:89:fe:cf:38:fa:16:01:8a:02:a7:
                    af:a3:c4:b0:85:dc:f1:22:b1:94:0a:ca:26:60:ab:
                    17:5b:d9:8c:63:25:fc:eb:b8:58:a0:9c:27:21:86:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7A:6F:90:31:B0:F6:E6:56:59:58:88:87:8F:05:35:2A:34:A3:44
            X509v3 Authority Key Identifier:
                keyid:48:4A:67:2E:99:22:3C:27:0C:14:B5:E2:6F:FF:36:A8:BC:CE:4C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:81:9e:f0:ef:8b:8f:3f:d9:99:d6:4e:72:c1:e6:35:33:93:
         73:2f:4b:b7:44:6a:23:7a:b4:8e:a0:1e:5b:2c:74:dc:e0:09:
         9a:3a:d5:37:ab:5b:7f:44:37:de:85:4c:c5:6e:c7:41:46:30:
         99:94:14:e4:a7:5d:8a:c3:d7:29:71:8c:ed:b0:28:3e:65:04:
         5a:e4:79:35:50:b7:30:b2:f9:a6:d5:f5:16:b7:5e:1f:ae:a9:
         d4:fb:b2:f0:88:43:85:4d:ae:8e:b9:69:2d:78:79:9a:40:64:
         a3:d9:42:15:1a:a2:68:97:fd:88:a4:a9:d2:0f:d0:33:62:52:
         73:d3:60:df:ca:e8:78:79:4f:34:af:de:47:41:5c:60:0c:56:
         15:0f:51:6c:a9:6a:4b:07:f7:1c:50:e9:20:48:a8:3e:76:dc:
         8d:6d:10:11:ee:f1:88:af:15:f4:fa:72:62:fd:42:94:36:ce:
         b1:af:50:0e:9b:c7:ae:30:b9:f0:65:f8:55:82:3e:2e:48:7a:
         11:c3:1d:ec:ea:e8:bd:9a:f1:63:b0:ba:2b:5d:af:6a:8b:65:
         63:04:6a:0a:c8:9c:99:97:28:0a:9e:f2:77:e8:b0:7b:a9:23:
         2e:0f:e8:48:33:60:bb:1f:8f:55:e8:fd:f8:29:3d:b8:f1:0e:
         50:1a:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----