Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
File:                     MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json)
Hash identifier:          i5FSxbKosSYwZGxO5w9jeVYYKnVgDgZ6HfDUJGlbjVI=
Subject key identifier:   78:F5:37:3B:CC:54:59:95:14:29:DD:26:57:69:AF:92:F8:B2:31:CB
Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
Certificate issuer:       /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Certificate serial:       01962E98EC99DC652F4C9FA54F6EABAC3B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: m6nNBCuKru+vn4RDpktb0iJAjQ2VEaN+R4BkkYX0IWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ec:99:dc:65:2f:4c:9f:a5:4f:6e:ab:ac:3b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=78f5373bcc5459951429dd265769af92f8b231cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:a7:d2:95:5c:b2:1f:40:ac:cc:1a:08:26:
                    cf:7a:df:0c:d9:a2:cb:74:86:2b:a9:82:e5:ad:22:
                    05:ef:43:6a:7d:6f:e5:f6:89:9e:0e:c8:1b:03:ac:
                    c7:2d:24:63:2f:df:e6:d4:7c:fc:59:48:ff:f7:40:
                    d9:c6:79:10:82:c1:c0:a9:a6:31:ae:fc:35:0a:d3:
                    1e:b0:d2:77:f6:d1:91:ca:89:4e:5b:c5:f9:59:e6:
                    e5:bd:37:b7:91:c6:60:52:a8:8a:d7:85:fd:12:80:
                    2a:6a:47:5a:88:32:97:c5:a0:9c:75:68:ec:9b:30:
                    05:2c:e9:28:cf:9b:2c:d8:a0:61:5f:58:e2:13:7d:
                    5d:c1:12:b5:47:09:f3:28:ff:7b:69:3a:c0:ae:66:
                    02:bb:86:6d:d1:9f:67:33:d6:c4:16:28:5f:50:75:
                    d7:90:28:f8:f2:78:bb:22:39:44:ab:a4:89:ef:92:
                    d4:b8:39:31:1e:0e:f0:ff:37:01:87:76:0d:59:ac:
                    b3:f5:6a:94:2e:1a:fb:a0:52:2d:74:2d:7a:35:56:
                    ca:03:1f:d8:e5:07:59:b4:f1:f3:8d:41:5e:e5:ed:
                    d5:dd:bb:80:83:23:ae:b2:a3:14:1b:61:e0:c3:b0:
                    53:60:8d:e4:f3:b5:4e:f4:b8:66:96:38:94:fe:ef:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F5:37:3B:CC:54:59:95:14:29:DD:26:57:69:AF:92:F8:B2:31:CB
            X509v3 Authority Key Identifier:
                keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:f5:63:7d:73:e2:fa:d0:07:b0:bc:ff:74:ab:41:b1:5d:
         bd:90:0c:d7:eb:3e:c3:1f:ed:a9:81:37:af:28:f1:55:2b:31:
         6e:b0:fb:91:1d:03:14:78:09:af:ea:07:8c:09:e1:46:6b:b2:
         e4:02:83:00:ae:33:f3:17:ac:7e:f5:7e:f8:6c:83:e0:61:fd:
         f6:a0:8b:47:b0:3d:4b:ea:0f:59:e0:41:74:12:a7:57:2c:6d:
         03:03:5e:59:20:e4:96:81:a1:45:38:e2:80:87:5e:f4:f2:f6:
         38:86:e8:ba:8a:45:7a:a0:3c:cf:f7:27:62:b3:cf:ee:ce:8a:
         53:e2:f3:ed:ea:5f:f5:23:3f:ad:fa:ff:ae:02:04:a4:b7:9c:
         ab:85:3e:46:2e:20:3d:31:ae:14:80:6a:fc:5c:2c:d9:26:5e:
         0b:b0:95:f4:09:ed:dc:3f:19:cf:9c:0c:44:e1:8b:fe:fe:1a:
         78:98:6e:0c:1e:c8:c6:b1:6b:03:ce:b5:3a:41:14:5b:63:6b:
         69:c2:a3:3d:7f:4e:28:4a:5e:8f:97:2c:86:d9:8f:30:5f:27:
         d9:13:43:58:70:59:b1:3e:41:fa:43:00:79:16:c9:f2:af:ba:
         f1:e3:21:88:53:a6:3c:c7:36:8b:4b:c2:bc:81:a7:a2:6f:09:
         3f:04:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----