Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File:                     mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier:          eVopbm2tqUMaKxR1adpeiDLuXvbPTQ8CYto2Ofcj3TQ=
Subject key identifier:   96:00:D7:0B:0C:1E:1C:A7:70:6D:A0:98:4B:75:7F:2D:01:38:03:17
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer:       /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial:       01962E2AFAB62964849313911071F4D1F3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number:          0276
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: zGhrYn8WZIHqH+/6iDnGrEDMm+fsGWnPlbMTK2p70H0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:b6:29:64:84:93:13:91:10:71:f4:d1:f3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=9600d70b0c1e1ca7706da0984b757f2d01380317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:18:0f:48:53:30:c8:10:fa:af:45:9d:c2:
                    d3:6b:7e:a2:6b:86:24:17:07:ed:08:6e:a6:b0:43:
                    cb:d9:7f:87:63:69:c5:a5:e5:fa:70:5f:e9:2d:8b:
                    4c:5c:ae:b4:46:a8:52:db:e0:77:03:cd:bf:62:d6:
                    db:e8:12:81:8b:4f:ce:87:f9:d3:49:16:c1:d6:f8:
                    84:40:5b:c8:ac:a5:4f:c3:d7:48:a0:37:d5:d8:25:
                    27:00:df:5e:8b:ed:c2:f7:1d:ef:3a:6a:95:55:fd:
                    d5:46:4d:9d:45:a6:76:5a:48:35:5e:08:01:15:53:
                    e0:32:dc:97:02:55:74:3c:57:2e:05:a7:8f:23:77:
                    b8:3f:cf:b9:8c:90:6b:83:2d:68:2e:07:e8:7f:7d:
                    6b:59:44:c3:ec:36:09:75:20:ab:ef:51:d7:51:e8:
                    48:34:28:b7:ad:c4:8b:75:8c:ef:67:13:2b:72:8f:
                    d7:47:2e:76:58:e2:a4:89:8a:3e:65:b3:a6:96:a0:
                    a0:a6:4c:0d:7d:72:42:3b:51:56:6d:9b:b6:bc:22:
                    5a:37:26:a0:64:db:04:8f:98:dc:b8:eb:b6:8b:93:
                    37:8a:83:14:c4:36:60:49:c5:30:4f:1c:00:79:b3:
                    dd:f2:32:78:cc:75:1b:6c:d3:1c:74:12:3e:a1:93:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:00:D7:0B:0C:1E:1C:A7:70:6D:A0:98:4B:75:7F:2D:01:38:03:17
            X509v3 Authority Key Identifier:
                keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a8:31:ef:09:1e:48:5e:d9:01:df:5d:bc:3c:51:f2:98:81:
         50:57:75:dd:57:b3:cd:ee:02:b5:6b:53:11:96:2f:f0:88:44:
         0a:6e:41:05:eb:59:fb:26:b3:c3:94:52:3b:56:5b:e6:5c:13:
         f6:a1:5d:30:e6:67:64:dd:93:98:1f:f8:c3:07:a0:e2:68:ce:
         90:5d:d2:35:98:13:89:3b:e0:f7:88:3a:14:dc:eb:03:87:5e:
         22:75:21:6a:09:97:43:f3:67:26:60:dd:50:1a:6e:37:91:47:
         5c:0a:06:1b:02:57:0e:a6:f4:38:c4:80:d5:3e:1b:51:ac:97:
         a9:1a:e9:b5:a0:b1:8b:11:64:cc:b4:f3:be:07:65:0e:f1:9e:
         bf:04:a4:a0:62:db:5d:92:f1:eb:b4:18:16:43:41:7b:f5:8a:
         bf:e8:b1:29:c4:a8:45:83:21:c6:3c:59:47:bc:4b:9c:e2:63:
         c7:86:22:c3:ba:de:f1:7e:4d:9c:04:e1:f6:ba:58:43:f6:b2:
         9b:3a:55:8d:82:4c:3c:4e:6d:d7:ba:63:f4:01:17:48:da:b4:
         40:28:98:34:b8:83:81:08:66:10:dc:d8:f4:65:72:b7:79:87:
         aa:f2:c7:28:35:26:07:09:ff:e4:b6:c8:00:02:49:5c:4a:25:
         3f:5d:26:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----