Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
File:                     lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json)
Hash identifier:          SQxpkx09tWREd/XBxKvtcF4mKo88eVzw7rw6PNe1TaI=
Subject key identifier:   93:B3:1E:89:0E:E1:AD:7C:E0:06:99:11:A0:7E:12:DB:72:E1:AA:9D
Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Certificate issuer:       /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Certificate serial:       01962F06A788A307001E803497AD2BDD2063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: rBzYXOqXjzeda7XXHJFfn6RzJh+d+MguevBX6ZaRnO4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a7:88:a3:07:00:1e:80:34:97:ad:2b:dd:20:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=93b31e890ee1ad7ce0069911a07e12db72e1aa9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:ff:c0:ec:19:a6:83:54:bb:6d:48:4f:a7:
                    ba:83:9e:64:f9:f7:27:75:74:8b:43:88:0f:8a:48:
                    b5:b2:19:99:90:ff:61:0a:2c:e9:de:eb:d3:70:5b:
                    43:48:a6:92:2f:6b:11:5d:75:ae:3b:b7:3c:c3:50:
                    21:3a:02:75:6a:49:9e:df:6e:79:53:b9:55:d1:1b:
                    17:70:68:5f:b1:1a:a4:39:67:c3:de:18:50:cf:c8:
                    5c:b5:49:e4:a6:d4:8f:42:b3:3c:26:10:75:6d:8b:
                    0c:2b:65:48:e2:f7:f2:a9:88:dd:46:d9:f1:5f:30:
                    54:60:43:b4:5a:40:69:f5:00:48:8a:d7:93:87:12:
                    8d:ed:ac:68:fc:08:47:bb:3e:1c:f0:40:1f:01:9b:
                    5d:99:d2:4e:0f:bc:00:a1:9c:60:ed:95:48:53:b5:
                    2d:ff:cb:2f:0b:3a:67:f2:2a:82:20:e8:a5:b6:91:
                    31:44:f4:30:3e:6c:bc:cf:fd:11:88:a4:f2:65:b1:
                    b2:cf:48:81:0d:03:fc:1d:ca:17:95:d6:c8:80:a4:
                    7d:25:db:0f:40:40:78:ca:56:78:15:df:2b:9f:98:
                    7b:bf:74:83:57:ce:d0:99:f3:54:7a:c0:28:e2:9d:
                    b7:b9:c6:bc:a7:65:9b:fe:a1:c8:8d:16:3b:01:e1:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B3:1E:89:0E:E1:AD:7C:E0:06:99:11:A0:7E:12:DB:72:E1:AA:9D
            X509v3 Authority Key Identifier:
                keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c1:d2:89:a5:70:7b:2a:06:57:06:1a:df:93:70:f3:12:f9:
         92:f3:7d:65:d1:6d:74:f5:23:7a:bd:1e:2a:d7:21:b2:d1:35:
         4c:ad:d3:75:df:07:fb:6d:90:3b:94:82:f6:90:94:5d:01:95:
         df:b5:be:88:3d:1e:bc:d2:dc:09:2c:c0:1a:d5:d7:59:e7:4a:
         71:fd:ca:f7:0d:3c:a3:70:36:73:f6:74:d7:26:15:2c:c2:9a:
         fb:87:37:16:39:e3:08:ff:d8:99:26:c9:31:f2:5b:00:34:c6:
         62:98:f5:69:47:f1:3c:74:48:27:5b:c0:46:57:a0:d9:9f:9a:
         db:bc:89:41:5e:85:61:d6:a3:ed:4c:17:eb:3e:76:2f:a7:9e:
         12:73:2b:68:b3:8b:23:ec:26:60:41:dc:c2:af:59:46:91:81:
         f3:2c:84:dc:74:30:d9:77:41:56:c2:2f:2b:35:f5:d2:c4:2b:
         df:f3:d1:42:29:6a:e5:b8:dd:79:e3:39:d0:50:87:3b:34:64:
         2b:69:aa:17:19:62:f7:8b:81:30:b7:fe:16:aa:d4:f1:dc:59:
         89:1b:2e:92:36:54:3f:db:43:79:2e:0c:16:63:73:4f:c3:6e:
         9e:ce:a3:6e:00:12:b1:5e:d9:01:17:3f:c3:c4:d9:aa:42:50:
         8c:54:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----