Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
File:                     T7murXluvL6SUPqiksQOioWIx50.mft (raw, json)
Hash identifier:          9ABXYhohMWqzukHWCYrk3iAh3ROwUtLpQaKJeCgeRz0=
Subject key identifier:   D0:62:6E:64:1D:90:EB:26:FC:5A:AF:80:48:A4:E6:B7:A6:9E:38:EA
Authority key identifier: 4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D
Certificate issuer:       /CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
Certificate serial:       01962E993B70394A258F0E0CE6EBC15BD319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
Manifest number:          0FCE
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: T7murXluvL6SUPqiksQOioWIx50.crl (hash: Vj5478RbXdqeXcj8OVpvZ1y51hreWmYrl/Wsh4pstuI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3b:70:39:4a:25:8f:0e:0c:e6:eb:c1:5b:d3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=d0626e641d90eb26fc5aaf8048a4e6b7a69e38ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:93:25:c0:59:78:3e:02:ad:64:f3:c4:69:
                    31:fe:d5:fb:ea:8c:77:9f:9e:58:2f:bb:74:f4:a0:
                    aa:39:e5:bc:54:8d:25:f4:92:a8:c7:1f:54:d7:ed:
                    5b:99:13:52:2b:f1:92:d5:9e:ed:2b:49:22:e9:3b:
                    0b:93:f2:98:e4:81:e0:04:91:d0:8f:ba:82:6f:13:
                    be:1a:db:25:6e:82:9e:0a:4d:ca:05:3c:9f:dc:05:
                    bd:8c:09:26:d0:c5:5a:5c:21:d8:60:bb:18:bd:de:
                    e3:a2:d9:5f:00:68:a9:40:e4:16:3d:f0:b6:98:1a:
                    e5:d1:a8:9b:4c:3b:ea:34:b9:ee:a9:df:94:fd:86:
                    b3:f2:cd:36:5e:5e:d9:56:4f:23:e5:90:5e:17:ee:
                    d7:77:33:4f:34:dc:72:51:69:f1:81:03:49:39:8d:
                    c3:b5:80:c3:80:49:75:e6:71:c1:a9:f7:23:ad:64:
                    2e:51:fb:9e:a1:db:92:88:ad:b7:8b:fd:43:8b:be:
                    29:1d:2f:e9:c7:08:d9:f4:8a:71:e0:6a:ba:10:22:
                    68:4c:80:14:24:eb:08:ca:48:24:f2:b2:c4:da:db:
                    a9:bb:f9:19:9b:fa:13:81:66:9d:2e:69:a4:cb:6d:
                    da:32:50:1f:3a:a5:5b:87:42:13:00:f4:6b:e6:45:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:62:6E:64:1D:90:EB:26:FC:5A:AF:80:48:A4:E6:B7:A6:9E:38:EA
            X509v3 Authority Key Identifier:
                keyid:4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:35:53:e9:6c:83:8f:e8:d3:c0:eb:9d:c9:29:7b:08:10:
         44:d0:e1:34:bf:f6:ad:30:cf:0d:9b:20:e4:5d:a6:f4:0d:eb:
         91:53:a5:84:b7:80:1e:ef:d2:81:4d:89:e7:93:76:b6:31:ff:
         8f:b1:7d:36:4f:9b:55:50:5e:fa:db:8d:37:80:8b:54:4c:0a:
         a1:14:22:19:eb:50:a8:a4:df:11:30:e4:79:72:99:ac:64:c7:
         ad:b1:c5:0f:13:ed:c7:a0:2a:c4:da:3c:56:fd:2c:f2:34:62:
         be:a4:c2:4d:57:e0:ba:49:a0:a9:e2:d1:cf:a4:04:b5:a4:1d:
         6d:e8:86:a4:a1:67:8a:53:e4:53:2e:96:a7:55:0d:c2:c6:d0:
         c7:c2:27:44:ab:29:af:32:fd:be:51:63:9d:68:2f:d5:f7:a5:
         e0:5d:4c:c6:de:a9:5d:e2:20:c6:d6:96:d7:af:18:b4:aa:2a:
         74:a9:05:ad:c0:40:85:1c:0d:39:e4:d6:27:9f:1c:e0:74:4e:
         70:21:d9:73:de:3d:41:37:07:65:50:4d:aa:80:4f:32:36:cc:
         54:8c:fd:9d:ae:dd:01:8c:ee:00:6d:f7:5c:65:82:77:6c:86:
         e2:2b:42:41:c3:21:42:1f:ea:ca:37:28:0a:9b:e7:a7:33:13:
         ad:e3:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----