Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File:                     mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier:          f53Fhy8LwlRU5sijI5/pbVkDVpqzIuubUZQk+pVCdLQ=
Subject key identifier:   45:99:CE:8B:F6:C6:02:1E:53:CC:D5:3E:82:97:6A:E6:7A:B6:CF:99
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer:       /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial:       01962E9925E6962C107C79EF47BDFBEDBA4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number:          03DC
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: z1Fhc4nweAYmjAKF5qUllh1Jo1zLbnuDtlE1T5xmSO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:25:e6:96:2c:10:7c:79:ef:47:bd:fb:ed:ba:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=4599ce8bf6c6021e53ccd53e82976ae67ab6cf99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:f2:0f:b4:70:a2:91:41:61:4f:c4:61:96:
                    a5:67:51:4c:1b:c2:7f:65:4c:d0:c3:27:67:96:55:
                    0c:75:07:ea:5e:3c:98:49:36:87:25:fb:0e:54:72:
                    9d:1f:4f:d6:fd:35:ca:2a:5b:c3:f4:52:a3:c4:e6:
                    70:60:e8:9d:f7:79:a3:8f:f5:e1:cd:95:2b:e3:2f:
                    6a:bb:8d:42:c8:86:e2:bd:6b:c0:6e:c8:41:e5:9e:
                    2e:33:54:f4:a9:cb:b9:16:bc:ed:09:88:a4:50:7a:
                    1e:1f:9d:52:e9:46:a3:9e:60:03:7a:f7:02:30:97:
                    e8:f4:e8:e3:27:6f:28:55:cb:6f:ed:ca:a6:0e:8c:
                    92:69:22:b4:56:63:da:47:a9:cb:d5:99:cd:8f:0d:
                    cb:04:2b:fc:60:81:05:79:7a:f2:17:79:64:2a:78:
                    44:24:2e:bb:c3:a9:e5:6a:16:02:a6:12:7a:d1:07:
                    85:01:f9:72:83:95:7f:a0:75:8a:09:3c:ae:8f:66:
                    cf:30:e9:ca:0c:31:f5:81:79:0a:38:07:b5:69:00:
                    5e:69:fa:31:a6:aa:a1:8d:f6:fc:9d:5b:6c:67:7a:
                    df:2c:ef:72:94:c1:56:83:e3:12:30:f1:fb:44:35:
                    79:70:3d:87:85:88:66:95:57:0e:1f:18:bf:f5:8a:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:99:CE:8B:F6:C6:02:1E:53:CC:D5:3E:82:97:6A:E6:7A:B6:CF:99
            X509v3 Authority Key Identifier:
                keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e8:01:5f:a4:17:5b:d1:90:72:82:d2:69:68:cb:e5:5e:bb:
         35:63:f2:75:55:ae:0e:4d:fb:c4:16:d6:80:80:0f:d1:73:2d:
         d1:93:88:94:df:e0:45:39:80:e9:6e:5e:87:a8:23:48:a9:42:
         06:76:19:ca:21:41:a3:1c:b7:bf:6b:a2:2a:ec:1c:2c:14:59:
         bc:af:61:f2:13:cf:09:06:51:2d:d0:f5:eb:46:cb:e1:83:0a:
         db:a4:4f:23:80:04:4e:82:30:77:aa:8a:43:4d:15:fd:10:3a:
         dd:43:b5:98:29:58:ac:21:d0:c7:8a:c0:74:19:ce:0f:58:86:
         56:d5:bf:3e:e6:76:24:23:3d:c7:7b:15:88:4d:7d:e5:64:35:
         f2:74:d5:61:22:ab:c9:d4:ee:8b:a8:89:a7:92:1a:c8:12:60:
         6a:fa:0b:8d:42:18:15:fe:33:e3:da:02:2b:1a:72:11:6e:cb:
         33:6d:1f:21:b3:6c:19:2f:16:4a:12:e9:2d:63:06:9e:f2:6d:
         e3:5d:f4:17:5e:f4:69:87:db:9e:42:3c:64:ae:69:74:c0:7e:
         1f:f0:94:f8:dd:89:65:6c:88:70:44:e5:6f:3b:e8:2b:f0:fd:
         09:70:ec:fc:ab:f9:f5:2d:b7:09:ef:55:86:1a:3b:72:fa:a5:
         3f:8c:3a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----