Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
File:                     MFMuPcNxjy4bVWppRwsec53TkCI.mft (raw, json)
Hash identifier:          01P7sEWhSAzEAaFT1A6WAfuoVrskuH4wljZ2sI0kXuc=
Subject key identifier:   E4:56:26:D6:E7:A1:73:7F:50:AE:AD:76:78:CA:82:73:E8:10:B3:15
Authority key identifier: 30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22
Certificate issuer:       /CN=30532e3dc3718f2e1b556a69470b1e739dd39022
Certificate serial:       01962F7425F361E08EF89BCA0B6ABD82F4D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft
Manifest number:          0A8C
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: MFMuPcNxjy4bVWppRwsec53TkCI.crl (hash: FBqJN04iuHFjaDkLccG3xMQPg9qpRq1Fn2lj4qd+IxQ=)
                          2: gcvZb-H-QkR_u2nZg2XXj4qsub0.roa (hash: eOyY8yl+p8N7UEzFU3Q8jcWAiNPWbKDEoBQqZkxOiME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:25:f3:61:e0:8e:f8:9b:ca:0b:6a:bd:82:f4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30532e3dc3718f2e1b556a69470b1e739dd39022
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=e45626d6e7a1737f50aead7678ca8273e810b315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:89:e0:c4:df:9b:6e:1d:e3:78:f7:bc:6c:
                    0c:bc:ec:c8:79:2c:36:d6:57:27:c7:fd:65:36:59:
                    7f:eb:50:60:ec:bb:07:79:f0:0d:9e:5f:e5:48:76:
                    93:72:5b:39:2b:8c:23:7e:dd:54:3a:2e:97:b9:7a:
                    b4:27:d2:ab:1f:5c:d7:fb:75:08:d4:26:4f:c6:b6:
                    09:51:d8:e6:8e:b1:a2:c6:0f:b7:5d:90:78:33:46:
                    76:3a:3c:39:c1:62:f8:4b:5b:6e:38:4f:89:60:45:
                    df:0a:dc:fe:61:1f:74:4a:57:91:6f:7c:e0:d3:bc:
                    35:aa:08:2f:2f:e1:72:f3:5b:c6:48:9e:1e:02:cf:
                    f5:4f:01:dc:40:c1:e4:e3:11:d5:db:e8:18:42:f1:
                    a7:d7:0a:e8:46:ae:39:a1:9c:b0:d5:d6:36:f6:f7:
                    00:82:bd:bd:b3:03:bf:f2:3c:3f:80:60:6e:0c:2d:
                    b2:03:81:57:01:c0:81:07:e6:84:5d:82:16:29:2b:
                    87:f8:f1:a7:b1:0f:7c:b7:ff:57:81:81:02:63:0c:
                    da:06:6d:71:8f:95:8c:1b:78:4e:60:47:15:15:43:
                    b0:b0:62:33:a6:d8:86:f8:94:5c:45:4e:dd:36:e2:
                    73:e3:1f:70:79:42:6a:8a:43:26:a7:c8:ec:46:84:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:56:26:D6:E7:A1:73:7F:50:AE:AD:76:78:CA:82:73:E8:10:B3:15
            X509v3 Authority Key Identifier:
                keyid:30:53:2E:3D:C3:71:8F:2E:1B:55:6A:69:47:0B:1E:73:9D:D3:90:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFMuPcNxjy4bVWppRwsec53TkCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/972d71-5e7f-4cc9-af87-66ad1dc87363/1/MFMuPcNxjy4bVWppRwsec53TkCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:dc:02:44:38:e5:62:7a:f6:c5:40:1c:8a:5b:e4:6f:54:3a:
         4f:d1:6b:f3:f0:7e:98:05:4c:cd:f6:0d:96:e8:ab:de:30:50:
         ef:c6:c4:09:91:bf:4d:53:3b:0c:ae:56:07:ea:32:e0:b5:a6:
         d8:33:78:66:92:d7:97:56:13:c8:2f:04:10:71:72:df:bf:d1:
         f7:47:bb:fd:ce:a1:4c:3c:58:bf:1a:4e:5f:bd:c7:5a:76:01:
         87:d1:76:70:25:95:41:f3:e7:5d:5f:89:73:1a:8a:45:5e:fd:
         6a:32:fb:60:08:aa:cf:22:a2:0d:89:8e:c5:4c:16:33:aa:ed:
         96:2e:b0:dc:ad:76:c6:c1:4c:51:a5:e6:ce:35:ad:5b:c5:8f:
         0f:e4:8e:c0:ea:00:62:c0:28:5e:5d:dc:02:bc:4a:8d:32:60:
         c9:fc:cf:50:84:1a:ee:55:5d:34:b3:31:04:f7:de:42:c7:e1:
         6c:62:7a:49:87:a2:69:33:40:67:24:84:5d:83:94:17:83:62:
         d4:a5:cf:8b:ea:dc:b7:a1:c8:17:95:cf:88:83:dc:a7:86:74:
         08:8b:98:7f:a6:6a:e9:07:2b:cc:40:46:13:4e:9a:66:5d:3f:
         67:c5:78:47:b5:c3:77:94:57:e3:04:31:1d:1d:9d:44:16:27:
         95:16:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----