Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File:                     c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier:          ESF9YZJqA41rYoCXVR+x52VkH5sBo5xw36qBEmFnmDw=
Subject key identifier:   3C:CE:78:EA:CE:B4:4F:98:91:93:80:1B:CC:55:E9:BF:2D:EB:B7:A8
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer:       /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial:       01962E997FC9B59B019D426FB334A1EEDB37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: 5Fih2HM2fUBQdaktFdbQnzLGSsjJ2qW10nQzO6nCCEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7f:c9:b5:9b:01:9d:42:6f:b3:34:a1:ee:db:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=3cce78eaceb44f989193801bcc55e9bf2debb7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:23:1e:36:5c:c1:1f:47:11:60:94:9a:97:0a:
                    87:04:79:d0:6f:62:e1:da:bc:6c:7a:8f:c4:20:9c:
                    c9:5e:fb:fd:22:ac:c7:af:3f:1c:0a:7e:f7:c6:1e:
                    e1:03:bd:dd:27:24:16:6f:7b:a0:45:24:0c:74:6b:
                    72:c9:0f:42:49:29:a9:c0:31:88:8c:19:21:58:a4:
                    a0:66:f0:62:00:81:0b:0b:d1:76:1a:a7:05:06:9a:
                    f3:12:0f:be:d1:f2:08:48:b3:53:61:59:f8:83:e0:
                    2c:d1:41:a3:92:40:a0:64:96:40:ef:e2:33:da:d2:
                    22:21:62:02:43:4f:a4:c3:52:b3:c7:8e:0b:8c:53:
                    6d:59:94:60:13:63:02:79:46:20:f0:b1:d3:1f:04:
                    5d:d0:47:f3:56:37:c3:98:8d:5d:9b:56:33:b6:f8:
                    42:a9:b0:c0:09:ff:79:cc:36:80:d0:50:25:9e:23:
                    6a:aa:2f:fd:ab:8a:37:fa:60:85:17:0a:8d:0c:48:
                    a2:7d:25:2a:fe:4a:a0:79:ac:b3:5d:06:77:ca:7d:
                    fb:85:67:27:79:b0:53:d2:bd:e1:77:d2:28:f2:00:
                    a1:91:9b:9e:95:79:04:0a:c7:96:61:78:33:54:20:
                    06:72:68:e2:73:19:99:9f:9e:7a:7d:8c:f2:4f:f9:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CE:78:EA:CE:B4:4F:98:91:93:80:1B:CC:55:E9:BF:2D:EB:B7:A8
            X509v3 Authority Key Identifier:
                keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:fe:ab:26:62:80:10:3f:4d:4b:dc:b2:2f:b7:27:bf:ac:6f:
         3b:80:3a:4e:a6:45:ea:22:d3:0d:7e:f1:27:37:8d:7d:b2:b3:
         f5:23:21:a7:1f:45:6d:e0:a0:85:81:13:b5:95:5b:50:9b:19:
         47:95:a0:c5:21:39:ab:59:93:0b:01:e8:26:e7:cd:9d:92:24:
         fc:f8:53:a6:ee:0e:50:3f:75:70:b5:64:c6:9e:01:a9:8f:e1:
         93:f5:e4:07:3c:4b:ed:dc:a8:d3:5a:86:78:76:a9:bb:d9:25:
         50:9b:15:ac:02:96:ef:dc:3b:82:03:db:be:7d:96:ed:2d:46:
         cd:f9:8c:ae:a8:bb:66:82:27:33:db:e6:72:9c:da:34:7d:d8:
         61:12:8a:a2:cd:50:8c:76:62:0e:4f:c8:8b:a2:72:39:ae:7a:
         12:1d:29:b9:93:ad:f8:4c:5c:a9:1b:2f:ac:e1:15:6a:ae:1c:
         48:e2:02:b5:c3:89:05:cc:77:7d:2d:c8:b6:5f:d0:ac:af:06:
         36:93:f5:88:6d:b4:d0:a4:8f:4d:50:2a:7b:a7:c4:52:60:9d:
         19:f9:e4:79:8e:b4:11:ed:16:8c:50:bf:71:30:41:e6:32:f2:
         38:62:0b:81:3a:14:cc:b4:3a:2a:1c:ee:24:0c:ff:e5:b1:4d:
         c7:3a:d0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----