Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
File:                     Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json)
Hash identifier:          SormZTSOQX988USzRjVhQ6r6nqtIH7awiD6nLp1vuS4=
Subject key identifier:   89:70:3F:C0:73:7F:DE:D6:8C:7A:46:81:FB:9D:3A:EB:78:6E:B7:D8
Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
Certificate issuer:       /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Certificate serial:       01962F7420384B674FC12619355AC66125E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
Manifest number:          09F1
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: 9tP13YpBYz0n4VMOlwPq3OS1EXT/Og47pq9/WGRtBcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:20:38:4b:67:4f:c1:26:19:35:5a:c6:61:25:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=89703fc0737fded68c7a4681fb9d3aeb786eb7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d1:c0:de:5d:ea:64:d3:b2:20:96:65:8c:19:
                    c8:c6:41:b1:95:73:77:80:fa:51:94:da:31:e9:d0:
                    29:5a:af:c0:97:0e:61:eb:7e:72:cf:2b:0f:a2:c7:
                    b2:17:dd:24:47:af:2f:b4:ae:45:45:ce:a1:e6:a4:
                    7c:04:84:c9:ea:d5:7e:fc:84:81:93:51:19:e1:4e:
                    46:94:56:87:33:54:96:de:36:63:64:68:03:65:1a:
                    2a:2b:47:fc:97:0d:ab:6a:8e:bc:d4:d6:2b:d4:3d:
                    71:35:28:d4:15:22:a4:fa:fd:40:b0:fa:94:8f:b2:
                    9b:09:92:25:aa:2f:64:1e:16:ea:cd:d2:35:14:94:
                    16:42:25:58:7b:10:ef:c0:59:2b:fc:b8:9f:95:02:
                    d6:ee:14:b9:9f:09:b2:a4:4c:33:0c:c2:db:d1:4f:
                    06:82:15:36:ed:2f:25:f0:61:1e:39:11:aa:96:b0:
                    f4:5f:ad:7d:9f:f2:aa:90:ea:55:dd:8d:d6:ef:66:
                    9c:3d:8a:75:ab:dc:46:af:8e:fb:f0:9b:60:8c:82:
                    a5:ed:9c:ba:89:0c:4d:36:ae:4b:18:b9:35:3b:27:
                    74:8d:b3:40:55:6c:c9:68:d7:89:ab:d7:36:d2:10:
                    2a:0f:48:2c:11:8a:ee:99:c1:6f:26:5c:a1:03:c5:
                    5e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:70:3F:C0:73:7F:DE:D6:8C:7A:46:81:FB:9D:3A:EB:78:6E:B7:D8
            X509v3 Authority Key Identifier:
                keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b6:a5:52:9a:10:1a:9a:22:89:d5:12:e9:49:fe:f1:34:89:
         63:de:9e:e9:5e:d0:0e:60:a5:da:36:a0:74:87:40:d2:8e:1e:
         a3:64:96:62:7d:60:88:d3:d2:02:f3:46:af:a8:f5:35:7c:84:
         3d:00:86:64:99:45:51:96:ca:5f:2f:66:9e:b7:a8:50:5e:65:
         36:9b:9f:01:bd:af:3c:3e:8a:c4:72:bb:ce:52:59:56:7b:8b:
         6e:e2:d6:78:20:c1:78:2e:13:6e:b6:24:dc:93:34:e3:20:3a:
         b9:55:bb:4b:38:91:83:78:a6:4a:59:e8:a3:f0:46:0e:16:c7:
         d3:ad:0e:6d:17:76:0e:fe:77:28:7b:9a:62:f7:e5:f8:03:95:
         84:fd:94:64:43:7f:dd:a4:f6:37:c2:e1:b6:99:2f:9e:49:8f:
         37:3a:5a:ba:c8:eb:57:91:3d:8a:8c:eb:a0:50:93:c6:2d:25:
         4d:d5:38:ed:5a:46:55:4d:85:b7:02:71:31:4f:a8:fe:0d:19:
         03:6d:e2:77:ef:33:5b:7a:93:59:e5:45:56:f3:90:69:38:8b:
         f9:a7:66:bf:f5:a0:6c:43:0d:ff:49:c8:59:34:4b:29:03:33:
         f2:9d:77:43:8a:a1:0d:db:11:db:f6:e3:c1:02:84:24:10:b6:
         1c:33:8d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----