Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
File:                     llE13UJRn92j3T_aqdszV4FfrXU.mft (raw, json)
Hash identifier:          Hz9NlH0r+a06yQ3M5DsRyIPtGdEVKc7jh0MwyT4GFIM=
Subject key identifier:   AB:0B:6F:F5:D7:A8:6F:05:26:B2:A0:07:E2:8B:23:F9:DF:51:78:E9
Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
Certificate issuer:       /CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Certificate serial:       01962ECFB6B3228766EA7889296CB938B2F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
Manifest number:          1251
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: eP_-uRGXRpi4WhMbX7jhB9aXd5g.roa (hash: Ij7xKzGQVqQU38kvjmTNToko/fNpur4SF9xRWlCB2/Q=)
                          2: llE13UJRn92j3T_aqdszV4FfrXU.crl (hash: O/uVQLPvl4XN1zoFIzoja230qu9qBWXNHYpb/gOtpaY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b6:b3:22:87:66:ea:78:89:29:6c:b9:38:b2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=ab0b6ff5d7a86f0526b2a007e28b23f9df5178e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:30:7d:18:71:3b:f3:10:4d:b2:94:e5:b6:
                    25:6c:92:d5:cb:91:ac:4d:0e:48:d5:3a:e4:07:aa:
                    d2:f1:99:ba:1b:d1:70:7a:f7:8d:ad:0c:f0:63:49:
                    1b:7c:9d:60:ea:64:fb:67:43:67:4e:5f:aa:0c:e8:
                    8d:b4:77:cf:7e:c0:93:c5:56:73:ef:3f:1e:d0:f7:
                    36:c3:bf:01:99:2b:99:db:57:24:36:93:24:bb:2b:
                    df:35:33:36:27:80:d7:ec:d7:e2:7b:03:cf:f9:b7:
                    e0:07:c7:7e:70:74:f1:41:bf:46:05:8e:2c:93:e3:
                    d4:22:4b:5d:3a:51:14:2a:06:e9:eb:3a:f3:f1:53:
                    42:29:36:ab:0a:28:c0:5d:bf:5f:83:1c:b3:6b:79:
                    ea:40:90:ca:cc:21:54:e2:17:7f:34:db:de:fa:16:
                    79:55:d6:53:c5:c9:ed:be:50:e8:d6:82:2c:05:71:
                    3b:6e:3e:88:c1:0d:b0:ef:27:86:36:55:b7:93:96:
                    18:ea:ed:75:27:a4:ef:c3:56:88:cf:fd:28:1c:8a:
                    dc:3e:17:2d:a1:71:33:87:43:bc:e5:1d:02:26:d6:
                    9b:7e:35:b5:94:62:7c:08:33:ac:bd:3a:fe:7a:e6:
                    5a:cd:49:92:11:2b:27:17:9f:91:35:7d:e7:32:d8:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0B:6F:F5:D7:A8:6F:05:26:B2:A0:07:E2:8B:23:F9:DF:51:78:E9
            X509v3 Authority Key Identifier:
                keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:73:f0:b2:1c:15:cd:0a:57:fd:a8:db:c3:77:c7:55:74:8e:
         0f:c4:3f:fa:bc:d1:2c:22:65:b9:eb:62:e7:93:f0:9a:42:9d:
         ae:3a:c6:fe:f9:02:ea:ce:92:40:85:54:5f:a4:ab:6b:7a:9d:
         8d:15:e4:9a:1c:0c:08:12:ad:07:ab:4d:26:18:b2:01:d2:0f:
         a3:15:ee:28:35:1e:34:24:89:d5:99:5b:da:21:9e:c5:d9:17:
         09:a0:5e:a8:c7:77:99:a3:9a:0e:c6:2b:73:9b:2d:c2:d3:52:
         a3:07:bd:b0:17:b7:38:8b:e1:05:ea:07:9f:df:43:a1:04:0d:
         41:bf:c8:8b:99:db:1b:f1:97:3b:a1:e7:fa:b2:a7:c7:bf:9f:
         50:6d:d5:db:01:ce:f8:8c:20:24:cc:d1:36:c6:4a:70:d6:e5:
         4d:b6:09:3a:ff:ec:29:c7:7b:95:9c:7d:a0:79:5c:b0:54:88:
         92:3b:5f:07:05:4e:e4:0d:9a:dc:57:1f:b7:fe:2c:44:4a:c8:
         e7:89:fc:38:26:83:ee:e8:0e:77:14:77:36:2a:32:b4:cb:99:
         ce:0b:27:d5:7a:c1:e8:54:2d:88:b1:34:97:47:85:59:df:52:
         f2:73:04:44:ef:52:13:24:ab:2c:0a:ef:ac:ce:69:72:68:49:
         fe:06:47:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----