Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
File:                     lM53iNLj_vf8ANXOEz19bcAPhik.mft (raw, json)
Hash identifier:          4L88FcMUQbzqd7n9Vel9l0JsPinQyb6vDuVkUFOf8DE=
Subject key identifier:   87:0E:C3:D9:EC:C1:AA:D3:C6:08:5F:86:35:61:6B:46:41:51:F4:67
Authority key identifier: 94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
Certificate issuer:       /CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Certificate serial:       01962F07432B627D10426831EA7A611995EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
Manifest number:          0C60
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: lM53iNLj_vf8ANXOEz19bcAPhik.crl (hash: vqeH8JWRK2jpzowseynW810R+EkbPcQL946YitkFWuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:43:2b:62:7d:10:42:68:31:ea:7a:61:19:95:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=870ec3d9ecc1aad3c6085f8635616b464151f467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:86:03:5f:88:85:4f:58:05:2e:d6:c8:fb:
                    30:6d:99:aa:31:f4:7e:41:03:5d:1e:b1:54:ea:9c:
                    d9:d9:ca:73:33:a6:8a:3a:21:3a:0d:11:59:91:26:
                    21:2c:db:13:90:9f:90:7a:21:6a:16:c9:2a:bb:5f:
                    5e:ac:e9:81:25:a3:58:19:1c:b8:30:30:00:6d:c0:
                    e1:5b:44:78:4f:85:01:03:39:07:fc:48:72:70:e4:
                    ab:be:03:f7:48:bd:3a:f1:ef:e8:ab:f6:cd:6e:50:
                    b2:bc:15:1c:e5:97:c6:61:ea:5c:43:dc:e9:fc:6f:
                    ce:93:f8:fa:d0:27:99:64:b9:5d:a7:85:03:8e:43:
                    db:f4:88:41:38:87:49:a6:9f:1e:1a:9b:55:6f:81:
                    ac:4d:42:6b:66:c5:33:52:f1:4d:ab:d1:77:e9:a9:
                    e2:55:d5:2c:f6:4f:7a:1e:46:5f:97:6b:cd:08:30:
                    b2:4f:8a:8d:be:65:86:56:e6:e1:c4:d2:17:31:65:
                    e2:fa:bd:e2:a9:22:df:25:38:77:6b:95:fe:ab:6c:
                    e7:16:6e:8e:02:91:dd:2a:2f:61:97:ad:0b:0c:58:
                    95:28:4f:d0:71:9a:17:ce:5e:54:6e:1a:2c:2f:81:
                    42:62:2f:16:12:e8:fa:e5:84:5f:10:17:e1:23:a6:
                    fa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0E:C3:D9:EC:C1:AA:D3:C6:08:5F:86:35:61:6B:46:41:51:F4:67
            X509v3 Authority Key Identifier:
                keyid:94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a4:9c:9d:5c:36:ce:59:91:ee:05:51:25:16:33:6d:e8:43:
         08:87:9e:d2:a8:dc:b6:7d:20:43:0d:66:00:03:7f:19:a0:67:
         e5:3a:b1:07:72:ee:df:d6:48:8e:7a:e7:77:2f:97:b6:9b:b5:
         1a:3c:14:ed:5f:18:fc:c1:0c:ba:63:4a:52:4e:7e:ca:02:57:
         3c:ed:b5:a4:ef:bf:58:9d:ac:c3:36:8c:30:92:ef:a5:c7:fe:
         2f:74:22:ec:08:b3:db:e9:58:f2:4b:39:16:44:69:80:36:0c:
         b9:71:0f:68:8e:47:e9:68:51:da:9f:f1:02:6a:0f:d0:4d:f7:
         49:cc:4d:3a:f0:aa:13:20:fd:00:88:45:bf:ac:80:d3:95:16:
         2f:0e:1b:9f:23:9d:ae:ec:00:5b:cd:7b:0d:a2:30:b1:e5:ef:
         d6:20:7c:a9:b9:06:5b:a9:5b:de:19:a6:23:73:8e:88:d0:41:
         0d:80:1d:32:63:21:c4:2a:ae:f3:ad:6e:79:04:25:83:09:21:
         d7:8e:22:36:01:6a:13:3a:57:6c:69:79:b3:0e:3a:5f:e1:a3:
         68:85:59:66:ea:a8:d8:14:07:83:f2:9f:3c:ce:79:68:08:3c:
         3e:63:18:18:ad:b6:ee:0a:a4:0a:9d:3f:e1:cd:c4:7b:e2:fa:
         f9:65:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----