Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File:                     lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier:          qeXDn6wBZEX6oeoIpxBaPaGT/F8pGZ0T3VuqEZ+oGuk=
Subject key identifier:   78:87:F9:EE:AD:29:F0:D7:2B:55:D4:22:2D:6C:52:AF:C0:F3:97:12
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer:       /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial:       01962DF39DDE7C3642AFFBE6A0BBFA1E2D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number:          07A9
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: tyhhSlvtnOKp99buDYd7Nfnjxo6BDO5rK16ojTGtof4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9d:de:7c:36:42:af:fb:e6:a0:bb:fa:1e:2d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=7887f9eead29f0d72b55d4222d6c52afc0f39712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:b2:ab:f1:ac:40:d7:34:7b:bc:48:e7:60:
                    57:fc:96:41:d6:d8:cf:ed:5e:05:03:03:29:99:54:
                    9b:08:b0:55:a8:7e:87:d4:2e:fe:50:38:13:c9:68:
                    72:66:32:ce:2e:e6:73:d2:52:1f:7e:2f:0f:d9:14:
                    8c:de:65:e8:53:b5:64:c7:cf:09:d4:18:83:52:e0:
                    e4:9b:ee:34:a2:f7:54:1e:7e:7e:2d:19:7a:56:01:
                    27:a3:b6:84:4b:e9:85:b3:7f:c0:34:8d:aa:ee:22:
                    bc:94:8a:0d:73:1c:b4:fd:12:0b:dd:f9:48:fc:fd:
                    26:f0:a2:a1:92:d7:d4:37:b7:e6:11:f7:61:c4:af:
                    07:b1:0d:59:38:08:b5:98:29:e9:6a:97:9d:b9:90:
                    da:fb:81:d4:de:ef:7b:51:54:23:12:99:e0:09:85:
                    9e:46:0b:8c:07:51:95:af:64:7d:4c:6b:57:3d:b0:
                    69:73:1d:f4:27:e6:b4:54:f3:b0:4a:da:ce:c7:fd:
                    50:aa:d8:eb:3e:d3:3c:24:0b:69:7f:b6:97:de:c7:
                    c4:74:2d:52:ea:34:56:7d:d4:af:a1:86:c5:29:3d:
                    4e:1a:95:96:54:e0:7e:f7:06:bd:8e:cb:e4:ed:49:
                    33:60:f3:2d:7e:27:9a:9e:2c:70:44:4d:d6:d2:29:
                    65:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:87:F9:EE:AD:29:F0:D7:2B:55:D4:22:2D:6C:52:AF:C0:F3:97:12
            X509v3 Authority Key Identifier:
                keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ad:c4:62:8b:e3:1f:5f:e5:2c:21:77:23:f1:66:ee:39:5f:
         49:a4:9c:25:52:46:87:10:d8:e2:4f:63:b7:52:9e:d9:38:82:
         0e:db:00:5e:e6:6d:8a:a5:2d:cc:60:09:d6:20:17:8e:47:ca:
         31:3b:e9:a2:46:56:3b:ae:23:0b:12:61:ad:76:35:7d:64:46:
         41:28:a9:cf:62:f1:60:07:3d:b5:b7:62:6a:f9:8e:4c:0f:76:
         ff:aa:70:47:bf:1a:d6:bb:b8:fe:88:81:68:64:11:be:5a:f8:
         0a:c2:16:51:f6:14:2b:d8:8a:25:a6:24:53:75:98:da:75:8c:
         bc:8d:c6:8f:9e:9e:ee:a1:a0:aa:de:5c:66:37:c9:6c:23:46:
         76:c1:f1:fc:3e:72:96:df:ad:47:b7:d9:11:07:74:77:04:7f:
         da:88:45:15:fe:00:c8:12:af:3b:5a:f2:22:83:8e:e3:81:7f:
         d6:83:d9:6c:ca:58:b6:a2:27:4d:15:67:f0:3d:a0:92:20:9b:
         ea:21:82:96:a9:59:55:04:73:08:9e:de:b2:22:0a:bc:3e:dc:
         ab:d2:dc:9d:4f:6b:d7:5b:26:1e:67:fc:aa:2a:5b:f0:3e:58:
         1d:a3:c1:52:83:9b:a7:80:ef:2f:8d:c4:4d:96:6d:8b:ab:23:
         f3:8a:06:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----