Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
File:                     R0APQz0S1oqeufakK688jFKVyFI.mft (raw, json)
Hash identifier:          XJVAEzHMgBTE4heK+0FI8h9yMbYg/ovsumnmJd+HKwg=
Subject key identifier:   65:57:77:9A:2B:1C:F6:22:26:F8:B1:93:0C:7C:4B:F0:86:CC:55:F6
Authority key identifier: 47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
Certificate issuer:       /CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Certificate serial:       01962F3D9919868F587B58386936B3E92CF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
Manifest number:          11E1
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: R0APQz0S1oqeufakK688jFKVyFI.crl (hash: 2I/45yZKNW53H25cxGKfI4kiv0VY3wgrLpl+dU1Q5Rs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:99:19:86:8f:58:7b:58:38:69:36:b3:e9:2c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=6557779a2b1cf62226f8b1930c7c4bf086cc55f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:64:10:d6:12:c3:ba:95:5a:4a:16:98:e7:
                    d8:28:97:a7:6d:27:4e:24:f8:93:e9:ee:1e:4c:87:
                    6d:34:1e:da:a2:71:e4:47:a3:5e:aa:9f:cf:f9:10:
                    ca:75:99:74:67:3e:28:1f:2a:f2:fd:3b:ad:b1:22:
                    64:bf:11:49:d5:28:b0:f8:32:e4:05:70:90:5d:09:
                    88:93:11:83:40:9a:81:67:fc:82:29:94:d4:01:c6:
                    13:94:62:8b:1c:86:d7:c3:47:74:6a:58:fb:06:29:
                    5a:25:51:99:fe:54:b6:b0:58:e4:4f:1e:dc:45:8b:
                    78:96:5e:6b:87:a8:07:09:04:08:de:39:67:49:a8:
                    b9:fa:86:c2:f8:bb:04:2c:fc:27:f7:2b:58:be:8f:
                    c4:43:68:68:ee:09:35:47:77:17:ed:5d:b0:4b:41:
                    9e:cd:7a:cc:27:a1:ea:5c:4b:a4:21:6b:38:c1:cb:
                    71:9f:cb:79:64:41:0c:03:73:ce:3a:3e:bc:43:b1:
                    57:9e:09:38:62:df:91:db:ed:f1:09:11:70:90:9f:
                    8e:48:03:aa:18:64:1e:50:5c:2c:d7:e3:4e:a4:be:
                    41:8d:b4:fe:d9:51:ac:11:ab:97:0e:48:20:dd:93:
                    1f:26:9b:25:51:9a:68:13:a9:8d:9e:f3:86:a8:1b:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:57:77:9A:2B:1C:F6:22:26:F8:B1:93:0C:7C:4B:F0:86:CC:55:F6
            X509v3 Authority Key Identifier:
                keyid:47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:7f:4f:96:57:de:dd:a3:78:e9:45:77:02:bf:b6:d4:38:
         d9:43:ac:93:3b:f5:c9:3b:c3:8e:ee:aa:07:cd:82:6a:98:08:
         a7:c5:6b:45:23:50:79:5f:1b:9f:5a:e8:ef:25:62:b1:1e:9c:
         1c:a3:90:00:2f:74:3d:60:0b:be:33:53:17:ce:82:e0:8c:c8:
         58:2b:50:89:ec:33:9a:0b:b0:9b:b7:f5:23:84:17:7c:51:06:
         d2:9a:b6:9f:c6:eb:71:6f:6d:b1:a7:71:d9:ab:a8:4a:f4:b1:
         40:eb:06:c0:97:bb:b7:09:5b:53:c2:3e:94:69:c5:ea:10:fc:
         f3:86:64:43:27:b4:62:86:3b:3b:d5:29:6f:c1:00:fd:0b:83:
         db:4d:9a:e5:38:01:fe:5a:5e:33:61:43:bc:d4:6a:f4:3f:4e:
         e7:06:b7:47:b3:a3:65:95:9a:36:44:3c:a2:bf:72:1d:9a:9c:
         c4:ea:d1:57:96:c1:68:38:e0:02:58:f1:9d:dd:eb:c5:3b:b4:
         13:fe:d4:94:fb:64:a7:88:f7:d7:1f:87:65:82:73:c1:01:13:
         89:ac:56:46:a2:09:ae:54:84:29:ca:04:d4:36:f4:fa:a7:a1:
         83:bf:3e:3b:86:1c:13:25:4b:37:be:d5:7c:b2:52:35:90:69:
         35:aa:b3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----