Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
File:                     1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json)
Hash identifier:          hlIEf1oYLAwK5EuXZcE+/U7AMJKRq7TmQKVfFvkz0WE=
Subject key identifier:   36:BD:59:FA:E2:74:0D:45:1E:AD:89:B9:21:7B:88:3F:CD:DA:36:64
Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
Certificate issuer:       /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Certificate serial:       01962F0670998C6B7482D2A6C3736FB9941F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
Manifest number:          0203
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: cpfYjYxE4DyKqfRzkpXR5wgCQs+MqGWf+Yk0oGByZus=)
                          2: mjk_9mBIX2K41ASneFahi5WxQms.roa (hash: qL7nGWS3Awht9PmP0vDzSTXhKhc/jIpjX536PZtB9fQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:70:99:8c:6b:74:82:d2:a6:c3:73:6f:b9:94:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=36bd59fae2740d451ead89b9217b883fcdda3664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:00:c5:7b:6c:48:15:e4:03:6b:47:f5:2f:
                    b7:5a:87:0e:46:b2:3f:77:cf:41:c9:c2:83:6f:f4:
                    ab:0c:8a:3c:c5:17:0c:f3:ee:ef:4f:45:77:e4:60:
                    c7:c1:a7:22:e2:ce:5b:e5:af:45:95:08:45:cb:55:
                    50:d5:b0:0b:b9:f2:74:5e:aa:cd:29:16:c0:16:dd:
                    01:8d:c9:41:2e:6f:be:55:3c:8b:09:3e:78:f9:f6:
                    1d:62:ac:3c:2f:ee:af:15:9b:15:01:8c:eb:c7:dc:
                    b1:45:53:f6:52:f9:1e:0d:07:79:e9:4d:3b:b3:e7:
                    48:86:ad:df:45:93:47:9c:24:63:49:b2:30:fd:36:
                    fa:ca:ce:3e:75:63:a3:1c:08:07:76:3a:e0:a5:8e:
                    0f:aa:5b:87:3d:5f:04:36:b7:2a:4d:13:72:b4:2c:
                    0c:69:5b:f2:b6:ec:62:81:67:fe:ce:54:12:e0:39:
                    a7:35:74:16:82:ca:04:db:7f:5c:a1:d3:3b:a6:fd:
                    49:ba:b0:0c:5f:ae:80:59:14:a2:11:e6:aa:f0:b2:
                    55:fd:ae:9b:51:b0:0b:19:c6:ec:e4:42:76:7b:ea:
                    1f:65:99:48:87:97:ff:b0:a4:ae:f6:40:81:f2:8b:
                    a7:7c:b7:69:07:94:ad:f3:d5:58:5a:99:57:39:2c:
                    c1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BD:59:FA:E2:74:0D:45:1E:AD:89:B9:21:7B:88:3F:CD:DA:36:64
            X509v3 Authority Key Identifier:
                keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ee:57:6a:2f:64:4d:ef:dd:4f:f8:03:43:c9:ca:e7:34:06:
         71:71:72:02:aa:48:31:5e:48:49:a7:2b:4b:c4:a7:00:a9:82:
         ac:0c:4f:b0:93:04:a4:dc:90:be:8f:83:6f:0b:ca:2f:49:19:
         f8:b5:48:f7:98:c9:65:19:8f:4d:77:58:d7:89:eb:75:e7:52:
         3f:51:84:e6:fd:49:78:89:22:36:86:90:6d:9f:51:71:f2:8c:
         5f:d5:cd:1b:98:62:6d:b6:4f:a2:c0:88:1d:84:de:89:59:a6:
         7e:74:26:c0:2d:8c:a9:bf:96:7c:b1:c2:77:0c:88:20:4e:53:
         0a:a9:70:2f:e5:00:28:5a:09:4a:91:08:e8:a7:9e:5f:19:2f:
         ee:c9:dc:7a:f2:1e:d0:e7:2e:85:0e:9a:1e:ff:1a:04:33:eb:
         d4:6e:c4:e9:dc:f1:fd:6d:fe:94:cb:3f:20:e8:42:25:d8:ea:
         d6:7e:82:15:99:2c:3d:17:5a:85:8a:5e:01:b2:ec:ce:e9:56:
         92:b8:a3:e1:bd:76:aa:ee:90:99:b8:e3:12:3f:dc:ef:88:9d:
         e7:22:1c:97:62:cc:bb:05:0b:7e:d9:1a:e4:d4:54:49:8e:cc:
         af:ec:cb:cf:5f:e7:e3:eb:32:f9:7a:8f:67:13:aa:65:9b:a3:
         93:de:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----