Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
File:                     fAMRalBjzm8X_OpTUcneSgxosN0.mft (raw, json)
Hash identifier:          ArJqyls44Y5CeHhxJgyl22bs+TjOLN9VSLRYxmlcFsU=
Subject key identifier:   7B:9C:51:E8:F8:63:04:D1:89:32:EE:F8:62:69:D8:E5:75:EA:3C:64
Authority key identifier: 7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
Certificate issuer:       /CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Certificate serial:       01962E98A823416E7E028C8A2C990805A947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
Manifest number:          09A1
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: fAMRalBjzm8X_OpTUcneSgxosN0.crl (hash: FcgRE+xE6LwNb/rW+T1uE7Ww0u581PgUGnV4+tafRus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a8:23:41:6e:7e:02:8c:8a:2c:99:08:05:a9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=7b9c51e8f86304d18932eef86269d8e575ea3c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:d0:76:c7:2c:18:fd:0f:d3:a5:2c:53:86:
                    3e:e4:33:d6:2e:61:0b:33:09:19:86:b1:c8:bb:22:
                    b4:3a:15:00:d4:a7:ba:a9:21:6c:4e:99:aa:bc:95:
                    3b:5a:4e:eb:ea:ef:87:2d:e3:4d:f4:4f:6e:34:64:
                    78:b5:aa:82:f5:1e:3f:64:41:08:b5:fb:a7:d5:74:
                    08:9a:e1:54:72:43:3c:e3:15:1d:22:5b:61:fc:0c:
                    25:5b:2d:a7:71:78:ab:fe:26:0c:b8:1a:c5:c8:41:
                    3a:a3:e1:62:ee:e0:0f:eb:ef:8f:eb:b1:89:40:f7:
                    bb:ef:57:a4:d5:7c:c6:ee:a7:b5:a7:66:54:f1:80:
                    08:63:95:b0:bd:ec:98:4b:db:59:d9:ce:8b:d5:d5:
                    69:cf:95:63:3d:4e:ad:aa:c3:6c:72:c6:ab:09:97:
                    49:7b:c3:05:f6:06:31:05:15:ac:9b:63:fe:34:25:
                    7a:ee:a7:3f:74:e1:6d:6f:10:55:19:91:79:c0:73:
                    59:ff:8e:12:97:07:7e:c7:c4:dd:c2:f7:b0:1f:10:
                    7b:e0:d5:dc:d1:91:bf:1a:b6:17:83:0f:73:0a:be:
                    0f:72:86:1a:99:5e:69:e9:51:f0:e4:9a:2a:e1:48:
                    c8:bb:93:e6:fb:8f:b3:cb:fa:35:db:88:13:2c:16:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9C:51:E8:F8:63:04:D1:89:32:EE:F8:62:69:D8:E5:75:EA:3C:64
            X509v3 Authority Key Identifier:
                keyid:7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:4f:95:8f:7f:0a:57:a5:7c:20:af:ba:91:1f:77:ff:4e:
         87:1f:69:88:3a:81:cb:5a:f5:58:ec:90:85:0f:c1:f2:db:d3:
         dd:3e:0a:84:f0:ed:30:56:c4:7c:97:cb:12:71:e8:d2:3d:c1:
         ef:3e:73:88:a8:91:07:51:28:08:36:2a:96:b4:53:b3:9b:42:
         14:00:34:7e:cc:79:1c:c5:87:d1:38:3a:7a:52:c9:62:7a:77:
         c7:04:52:15:67:18:c2:8b:0b:78:bd:0b:56:df:2d:03:e3:3a:
         d8:d5:bb:e7:97:90:11:3f:15:c0:cc:1e:b2:f2:02:7a:a5:61:
         e9:bf:c1:36:76:dc:8b:89:fd:be:2b:72:fc:e2:37:76:fc:8d:
         02:2a:d5:55:75:03:1a:4a:1b:55:2e:e5:a6:76:41:84:19:8c:
         7e:85:1d:11:6a:54:5e:76:ea:86:00:a8:5f:02:78:e0:99:87:
         a9:0d:d6:9c:ac:59:f3:5c:0f:46:53:39:3c:f9:9a:51:c4:4c:
         5c:97:8a:2d:86:c6:e1:75:40:f3:09:44:ac:2b:7f:d2:87:49:
         26:fb:a2:3d:8a:f6:89:8a:2d:ef:e7:95:c7:b8:fc:9c:3e:ad:
         0d:43:53:b9:86:fb:a6:b1:fb:a1:b0:04:48:ba:1f:58:1c:db:
         d2:67:35:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----