Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
File:                     MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft (raw, json)
Hash identifier:          W1FNu6sygXzZ2e0lzQZzJrAUzx9AGYrErSTvqhtEJG8=
Subject key identifier:   9B:2F:B8:FD:F0:EF:E1:11:6C:15:45:8D:3B:8C:56:D1:6D:6C:2C:01
Authority key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
Certificate issuer:       /CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Certificate serial:       01962E2B451DC87DEA0F4A4CB03B320DA586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
Manifest number:          0CE9
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl (hash: ZDbMcpPElg3mWM3IzjUO8b44Q7y/rNnVhuCjvRe1dm8=)
                          2: QXjAwQSpvYGLG9EKG43DcrvrWjg.roa (hash: /g3NGPvML9niLWrxGUEsCrw0JcuhbxCMPrgB31IKq7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:45:1d:c8:7d:ea:0f:4a:4c:b0:3b:32:0d:a5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310e2e9fb70668c796adce877b21e09a8a1ad029
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=9b2fb8fdf0efe1116c15458d3b8c56d16d6c2c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:98:71:7a:18:83:74:c5:2d:5f:68:32:a6:
                    d9:77:4b:e1:ef:ce:9b:1d:1a:10:ae:15:5e:16:de:
                    96:1b:e2:c5:bf:b6:bb:16:fe:70:22:64:b0:a2:9d:
                    c2:67:27:3b:f9:7d:4b:92:57:94:34:26:af:53:57:
                    a9:ba:68:06:0c:33:4e:c1:62:ee:f2:40:69:9a:08:
                    49:72:d2:4d:89:74:c6:ed:58:ad:7b:4d:4b:99:32:
                    28:6a:fe:f1:40:a3:3a:f4:56:ea:e2:2f:e6:8e:8b:
                    c4:42:65:f2:18:80:75:4f:7b:dc:04:93:13:f2:a9:
                    17:7c:b9:08:0b:0c:01:a1:29:f1:b5:6a:da:4f:73:
                    b0:c4:e5:40:65:3c:23:2c:c4:43:c6:2d:ae:e9:74:
                    49:18:b9:db:36:e4:da:2d:7d:08:16:6d:5f:a1:d2:
                    c0:30:e8:d3:93:01:3b:e0:da:e9:dc:db:d5:79:27:
                    55:ad:dd:86:f1:88:65:71:5f:7a:b6:6b:26:ff:45:
                    84:87:e1:41:20:eb:27:91:0a:29:5f:68:88:0c:ee:
                    6e:b4:e0:cb:58:9a:09:00:71:58:2a:99:f6:70:35:
                    94:dc:d3:b6:e8:8c:32:7d:29:ea:ad:2e:7a:be:e9:
                    cd:b2:5e:35:93:36:d7:dd:ff:d8:c1:fa:97:84:ec:
                    79:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2F:B8:FD:F0:EF:E1:11:6C:15:45:8D:3B:8C:56:D1:6D:6C:2C:01
            X509v3 Authority Key Identifier:
                keyid:31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:87:33:89:d0:16:4a:fc:c6:cc:7a:0f:01:75:43:10:b8:82:
         43:96:81:9c:da:4c:ef:8e:9a:9d:b0:99:ac:2a:58:d4:53:64:
         5a:b0:f5:02:c2:f0:82:f9:ee:7a:bb:3f:ed:a3:c5:40:56:79:
         76:05:9c:e4:8f:78:fa:ce:20:04:f5:d8:75:70:8f:f2:34:5d:
         65:45:1f:e1:d1:d8:86:2a:71:93:50:c0:a2:1b:07:f7:87:9d:
         1d:eb:5c:2d:a4:ef:e5:31:da:6f:49:44:08:49:fb:78:94:e1:
         b1:ad:50:93:cf:be:01:23:5e:74:e5:4a:18:f0:75:41:b6:f6:
         ed:68:70:e7:9e:ef:3e:bc:d7:b4:38:a9:4a:f8:21:22:38:5a:
         c2:c5:32:d2:6c:43:ce:d4:46:4e:ba:16:72:85:be:3b:5c:d9:
         7c:aa:55:e4:4c:d3:b3:e1:1e:e6:da:92:52:13:86:9e:32:ce:
         22:55:be:5e:10:8c:46:70:36:8e:a0:54:ac:e0:01:48:7e:d7:
         38:6b:f3:04:51:c1:41:b2:6b:ca:d5:38:77:9d:14:f3:9a:c9:
         e2:c9:51:e1:46:2b:f9:28:97:39:dd:5a:6e:86:67:b7:45:53:
         80:a0:cc:31:71:8b:bf:20:70:01:c1:a3:4c:b3:5e:d1:ee:40:
         5d:59:aa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----