Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File:                     MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier:          y5sSK3hsTJc7Yl5FKrxVSQVPlJhdaUQMtLMyCQcuZpI=
Subject key identifier:   81:CE:31:C6:54:52:62:7B:8F:31:68:CE:9C:43:07:3A:DF:AF:22:D0
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer:       /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial:       01962DF3D33C575A788DB5D722DEBF63BC2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: RQB4rKE8j2Lf+WiIvda4e20EAF0Z6iMGWqJoUMfU5GM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d3:3c:57:5a:78:8d:b5:d7:22:de:bf:63:bc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=81ce31c65452627b8f3168ce9c43073adfaf22d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ae:35:0b:0d:ac:7e:46:01:93:56:ae:1f:f6:
                    d4:96:fd:25:25:6c:f4:31:41:48:b0:e7:6d:d1:95:
                    16:6e:9e:5b:7f:8d:95:7c:0d:7b:4e:5a:cf:e1:01:
                    ec:d2:81:2f:8c:6b:ec:a0:b2:8d:2b:65:52:fa:86:
                    12:17:b4:e2:9f:52:7a:d8:45:97:29:d6:71:fd:84:
                    09:62:ad:cf:e4:98:ef:20:80:87:2a:e7:63:02:19:
                    90:3f:25:bc:9d:0d:2b:ac:34:af:19:9e:d9:43:c3:
                    3f:df:5e:ed:34:ca:4a:ab:bf:1f:8e:a0:7b:1b:cd:
                    61:f3:3a:41:aa:ac:28:1e:b9:63:72:e1:d0:b6:2a:
                    50:a4:5c:87:c6:be:6d:30:a8:35:bb:a1:7e:1f:e6:
                    be:0f:f3:ab:c2:3c:87:8e:15:6d:e7:63:ca:3a:dc:
                    7e:df:2d:96:f7:e3:50:36:53:ea:cf:4d:eb:82:30:
                    7b:1d:6d:43:cf:70:3b:78:2d:e6:e5:e9:89:00:3e:
                    b9:22:b7:57:f4:77:ee:55:e1:c5:16:1f:2a:28:4d:
                    c0:90:6e:67:89:21:c7:cb:96:03:c9:d5:cc:20:63:
                    80:f7:aa:e1:a1:3b:62:ab:5f:14:07:e4:7b:cd:14:
                    b9:d5:d7:c0:14:e0:d9:36:d5:9a:bf:c8:f3:91:f4:
                    f3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CE:31:C6:54:52:62:7B:8F:31:68:CE:9C:43:07:3A:DF:AF:22:D0
            X509v3 Authority Key Identifier:
                keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:82:75:93:88:91:cf:22:99:ed:dd:65:5b:28:8a:2c:1d:8e:
         b7:58:a1:f9:33:06:7e:f2:55:60:04:b0:6b:5a:7d:25:43:aa:
         bc:f7:a7:16:44:f4:3d:34:f5:05:2c:4b:db:9c:b7:be:e6:61:
         6a:08:9b:29:7c:49:81:5f:35:f5:58:b0:c2:8a:21:4d:16:dd:
         32:d1:bd:33:1e:e4:ad:2c:01:8b:77:c7:a4:4e:11:89:18:25:
         30:32:92:7c:c3:dc:e0:f2:f3:cc:c9:ec:e4:63:bc:59:12:38:
         7e:9d:d4:b2:53:f7:8e:cc:91:ee:6d:e4:dc:9a:63:b2:d6:a3:
         f7:8e:c3:ab:9f:29:94:fc:25:43:6a:46:0c:5f:07:b0:3f:91:
         50:a8:2c:fe:8f:39:80:2d:54:70:cc:0b:3d:d1:ac:08:04:a1:
         35:4a:56:90:8b:af:cc:ef:16:90:13:9d:0f:35:e7:f5:70:e2:
         85:be:83:1f:fe:e9:cd:73:8e:6d:93:58:22:9c:e9:60:7b:c3:
         17:3c:bf:85:17:c8:f8:33:69:a5:ce:98:2a:79:33:d5:37:06:
         f8:17:79:76:ff:d3:2a:44:bd:87:3d:b1:f2:5b:1b:e2:38:2a:
         0b:e8:a6:eb:33:93:f8:f7:70:b6:9f:aa:52:fd:2b:6e:97:9c:
         68:83:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----