Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
File:                     MGavc-_zrCH_F6CVL_Nw5gykS10.mft (raw, json)
Hash identifier:          xq2sHVzrOHeVj6jDT0ib8jE44x5E40BDN+SJzX00ugc=
Subject key identifier:   8A:BE:4C:2B:53:72:33:66:E2:DD:B6:A8:8E:A6:67:D5:87:27:49:3B
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Certificate issuer:       /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial:       01962E61C75E87A6A7663C5A98479025E7CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: MGavc-_zrCH_F6CVL_Nw5gykS10.crl (hash: 3qAyUshacURlUv9WKl+I7MBoVldiGkX+WWVVlUpREs8=)
                          2: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (hash: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c7:5e:87:a6:a7:66:3c:5a:98:47:90:25:e7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=8abe4c2b53723366e2ddb6a88ea667d58727493b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:ad:ab:0a:b6:85:07:ec:c1:b4:14:93:48:
                    71:7c:7f:ae:84:cc:70:40:58:58:57:4d:03:18:3e:
                    d4:6a:a2:c3:b0:18:7d:a7:13:0c:c1:10:4b:ed:2b:
                    8d:4a:1b:1d:c9:aa:50:cd:1c:c9:84:e7:13:4b:04:
                    5c:40:eb:b6:c9:ce:b3:38:40:c0:d3:ea:9f:3e:57:
                    77:68:ba:77:25:b1:91:00:71:fc:3a:fc:2f:45:79:
                    93:e7:e3:82:76:be:fb:6e:df:dd:92:02:2b:26:38:
                    8e:09:48:14:fd:40:aa:4f:f6:8b:36:db:7c:06:a8:
                    ad:07:01:07:54:c6:a7:bb:ed:86:55:d8:7e:3b:ef:
                    c9:47:ee:54:ce:52:b3:27:c1:85:f7:3c:3d:26:39:
                    b7:e1:03:8e:71:f9:77:64:0b:2c:5b:a7:f2:27:8f:
                    33:6d:af:89:1a:60:d7:1a:3f:c9:db:4c:38:d4:18:
                    95:9b:17:50:b6:48:15:2a:77:ed:9f:e8:0a:8c:b7:
                    0d:58:3f:fe:45:81:20:cb:5d:15:e5:05:e1:86:dd:
                    ed:36:a3:b8:a8:de:bb:8d:cc:01:3e:3e:04:31:2e:
                    f2:16:e2:ae:3b:02:5f:7f:26:f9:cf:18:c9:b6:7b:
                    45:c8:81:87:bc:7b:31:b8:a2:53:7a:97:fe:7e:9e:
                    2a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BE:4C:2B:53:72:33:66:E2:DD:B6:A8:8E:A6:67:D5:87:27:49:3B
            X509v3 Authority Key Identifier:
                keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a8:10:87:19:79:34:4b:06:6c:b5:f3:82:cd:86:14:61:6a:
         c5:37:27:c4:22:8f:61:d7:73:34:a0:a6:73:50:dd:dd:87:89:
         62:0c:10:b0:30:d7:8e:be:7c:6a:4d:24:23:1a:45:bf:57:fc:
         48:4d:9b:be:67:33:8b:f3:cb:f2:ed:be:bb:dd:ea:aa:bd:87:
         41:27:a5:b2:1f:66:ec:5b:70:2a:60:6d:db:a0:9c:eb:c7:6f:
         d5:55:a6:83:c6:45:bc:73:18:cc:a1:83:90:99:d3:f2:9d:44:
         b1:87:b0:e1:8f:a3:6a:6f:c7:d3:d2:d8:50:75:83:c7:c3:ec:
         17:a7:63:6e:1c:4a:2a:7f:26:63:7f:cc:b3:8d:97:8f:0d:ea:
         85:bf:fb:26:fa:bb:26:5a:44:13:f8:50:2f:10:85:81:dd:b1:
         26:e3:54:7a:32:45:29:4e:6e:f7:7a:48:b5:e2:ce:c9:d3:f8:
         56:cd:b7:e2:c6:e7:6f:78:60:a6:16:ea:2e:b6:3e:8c:4f:14:
         42:66:02:e8:89:b0:f7:21:3b:c9:be:fe:c9:98:c6:9a:89:05:
         a5:39:25:b7:de:f1:ec:7e:31:7a:5a:99:35:8b:bc:3b:90:d3:
         cd:f6:be:57:6f:d5:c7:f7:81:0c:18:2f:a6:44:41:07:09:7f:
         f7:70:ec:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----