Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.mft
File:                     Ma-3caS5EQsRSqgHr7cIaxplN54.mft (raw, json)
Hash identifier:          tRGR8/Kq3uFS3uVwFQhZvRb2swt4xxXKscc+Le4twSw=
Subject key identifier:   4C:C3:9B:D6:50:9B:51:C8:87:D9:AF:22:B2:96:79:64:99:91:0D:6D
Authority key identifier: 31:AF:B7:71:A4:B9:11:0B:11:4A:A8:07:AF:B7:08:6B:1A:65:37:9E
Certificate issuer:       /CN=31afb771a4b9110b114aa807afb7086b1a65379e
Certificate serial:       01962E98959D345C66F08B4577CF38F63E28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ma-3caS5EQsRSqgHr7cIaxplN54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.mft
Manifest number:          02A6
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: Ma-3caS5EQsRSqgHr7cIaxplN54.crl (hash: vNaSvqrXatJ/iWKqztpwYnf+gDBTqBAbuCS5mz21368=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:95:9d:34:5c:66:f0:8b:45:77:cf:38:f6:3e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31afb771a4b9110b114aa807afb7086b1a65379e
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=4cc39bd6509b51c887d9af22b296796499910d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:9c:1d:c5:91:04:05:b6:72:3e:01:3f:d5:bd:
                    26:ec:fe:a8:02:50:27:7c:02:5e:8d:58:8e:b2:d6:
                    b3:30:e4:4b:dc:27:1b:a9:91:85:62:95:45:03:c6:
                    b0:04:e3:cf:0f:f2:ac:fb:10:40:4b:9f:b4:62:c3:
                    a7:6c:6f:02:08:21:43:06:61:cf:a2:e3:83:3d:2a:
                    ec:0f:fe:a1:e6:65:2f:09:84:f2:99:d1:f5:84:05:
                    76:d7:eb:b4:f6:16:ff:ff:65:60:f9:dc:a1:8b:7b:
                    fe:a3:57:1e:77:22:6b:91:f4:e6:de:46:83:c7:5e:
                    95:a5:71:b4:b2:f9:90:86:01:1f:fd:7b:9a:25:14:
                    75:0b:49:f3:b8:c1:7f:86:ca:17:20:f3:45:cc:31:
                    b8:d6:2c:63:a9:2f:70:ca:00:77:b7:2a:16:d5:c1:
                    cd:94:86:83:74:a6:2b:93:3f:02:33:b7:1b:44:ac:
                    2d:d2:38:52:3c:05:7a:d9:5f:1f:83:03:d7:34:58:
                    dd:54:07:c9:63:63:75:f6:af:2b:cf:fe:9e:33:9e:
                    54:8b:25:7d:8c:05:82:04:d7:61:35:d4:74:59:dd:
                    78:ee:cb:bb:1d:b2:2a:98:81:d9:0d:bf:ca:a5:af:
                    c6:25:1b:14:0e:f9:06:b8:06:ea:12:a6:38:9f:d4:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C3:9B:D6:50:9B:51:C8:87:D9:AF:22:B2:96:79:64:99:91:0D:6D
            X509v3 Authority Key Identifier:
                keyid:31:AF:B7:71:A4:B9:11:0B:11:4A:A8:07:AF:B7:08:6B:1A:65:37:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ma-3caS5EQsRSqgHr7cIaxplN54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/13d48a-d0ee-4d55-a33b-b0eb4c06a1e7/1/Ma-3caS5EQsRSqgHr7cIaxplN54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:26:9e:25:9e:b2:bc:cf:ae:ce:93:f2:35:a2:52:11:b2:19:
         f0:a9:31:0c:65:b1:0e:ef:08:e5:f7:52:a4:9e:f2:2a:43:1c:
         31:d4:02:dc:4b:f2:e4:a6:63:9b:48:6b:a9:33:d2:61:5b:1a:
         2d:26:ff:24:3d:e8:4b:b9:72:a9:7e:e2:f2:bd:61:dc:d0:87:
         8b:ff:db:aa:06:1b:64:54:76:21:23:ca:af:5d:2c:d4:69:3d:
         02:71:e2:bf:d0:69:9f:3e:40:c2:4e:00:0d:85:91:d4:98:d6:
         41:cf:5b:38:00:24:56:b8:78:ed:c7:d2:57:ee:23:99:e1:4c:
         1c:d6:d0:e2:9a:01:0e:30:6d:ad:d3:4f:38:9b:ca:28:e9:79:
         db:37:d0:f0:36:91:50:05:09:ad:f5:db:40:6c:c3:cb:1b:57:
         a8:93:4a:5f:f1:8f:a5:27:b8:bf:b8:9b:d6:8e:1f:4e:6b:f8:
         f2:90:9d:fb:77:b4:97:ba:cd:0d:09:3b:c2:c2:30:40:17:66:
         28:64:ea:b0:f7:86:bc:71:1e:99:cc:17:c4:4f:c6:d2:81:b1:
         95:ea:fb:14:56:62:2d:cc:55:b6:f4:29:61:48:05:55:3a:e8:
         c0:36:c0:7d:e8:cc:b5:8d:c6:4b:03:5b:06:82:79:17:be:e6:
         e8:ad:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----