Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File:                     lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier:          m9bpEanWBxLWsv+kjZXsmWXyy72YSAaLRpumFhzWxuc=
Subject key identifier:   30:4D:40:82:8F:97:49:3F:D2:DA:6D:4D:C5:2E:D2:E3:C3:44:9C:1F
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer:       /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial:       01962E61A7F7C10C19E30CAF3ED3950A4A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number:          0200
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: 0aj2iC8UozSayvcd0gVttauRXrk.roa (hash: 58D9vVvqyItBf62Z1ii/QTTlH8NhErcObr48aTP7eUU=)
                          2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: 7PZ8ISnvGbX+h/bEUcVJWmW4eZ1Xfwv2EwWVRBZKSX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a7:f7:c1:0c:19:e3:0c:af:3e:d3:95:0a:4a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=304d40828f97493fd2da6d4dc52ed2e3c3449c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:91:85:4c:a9:15:1c:dc:5f:98:5a:25:d4:12:
                    07:ff:43:45:60:3b:52:b2:c2:b6:d2:93:75:b4:70:
                    20:05:a7:00:6f:3d:48:55:a2:03:5f:19:1f:1d:04:
                    44:59:92:14:78:f0:cf:c0:cb:f9:0a:45:00:d4:a3:
                    b9:82:a3:55:7d:c4:36:85:41:20:c6:0f:d5:e9:3d:
                    7e:a1:8e:32:88:4f:3f:34:21:fd:0b:0d:96:23:47:
                    aa:73:1d:0d:69:73:03:a3:26:9b:2b:c4:e1:57:29:
                    12:ba:5b:bc:0f:10:6d:6b:30:88:9a:e4:86:97:69:
                    67:4f:cf:69:8b:d6:12:7d:2f:1d:3f:d3:b5:01:d4:
                    07:17:d5:f8:6a:64:96:99:4c:b1:2a:7a:10:6c:47:
                    a7:e0:bb:22:da:34:7a:68:a6:63:1a:1b:e5:14:58:
                    74:5f:b4:7a:ac:f6:ef:ad:24:04:bc:dd:b6:40:03:
                    dd:82:87:ff:ff:9b:7a:c3:14:59:36:8e:38:84:b6:
                    d1:a2:6e:11:6e:51:bf:cc:e6:ec:00:fa:05:3c:ac:
                    b1:d3:90:5c:33:4f:bc:45:16:18:a9:81:4b:24:cf:
                    71:04:a4:3e:ff:a0:83:55:e7:50:d3:52:0e:f2:f5:
                    ce:6f:77:3e:29:c9:fd:76:cd:4a:92:4f:b3:bf:d1:
                    b9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4D:40:82:8F:97:49:3F:D2:DA:6D:4D:C5:2E:D2:E3:C3:44:9C:1F
            X509v3 Authority Key Identifier:
                keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:52:08:8f:75:b5:88:71:0c:13:6a:88:d3:bf:ac:60:ab:9e:
         f7:3b:de:94:60:cd:ef:0d:8f:c1:72:b5:8e:52:ab:aa:c9:57:
         e6:be:13:a0:d7:6e:d4:6d:14:8d:49:23:00:e7:f8:ef:ec:fb:
         4e:9d:c7:48:3a:85:63:97:b5:22:97:51:43:0e:4b:08:a7:39:
         fc:b6:cd:f1:78:47:02:18:37:2d:a8:d5:89:ef:25:7b:57:a5:
         2e:be:4b:a4:67:ed:dd:f1:22:3b:26:43:7b:73:61:61:e8:47:
         8f:6f:85:59:c8:fa:c1:9f:02:aa:a0:24:72:72:2a:39:12:4f:
         24:b4:f4:e9:e8:8b:3a:87:6a:17:20:b9:ae:cc:08:0c:01:3b:
         2a:cc:62:a9:7f:81:8c:fb:dc:9c:6d:3c:f3:b3:fb:50:b4:ad:
         3a:4c:7b:83:3f:d3:1b:75:15:c5:fe:ac:99:af:ef:02:9e:c9:
         32:0f:58:64:cb:e9:78:7f:04:c4:d9:a3:78:d5:58:32:7f:77:
         2e:46:60:0d:99:ed:12:8b:0e:28:21:f2:ee:51:56:2a:49:ab:
         25:b7:23:81:0b:18:be:96:39:01:2d:d7:5e:db:2c:45:d4:95:
         66:b9:f0:d5:96:f9:2f:91:cb:94:8e:61:83:d8:79:94:c5:1c:
         4e:e4:d7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----