Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File:                     MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier:          glREIVcdKlj2ts6nVAYxONJqwAEe/pEUkvQVAU261TA=
Subject key identifier:   BD:26:22:34:95:CA:BB:A9:1F:D6:D4:5F:1A:36:CE:50:9E:FF:89:01
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer:       /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial:       01962F06F189AEF9EC06F389E495449ED985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number:          0694
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: 57B-StK2AQ9sl4U1coOqd8wTgag.roa (hash: n83L+DsDXWJdoYcHoR653OskwlFSlFS/GtJPH3Goy+M=)
                          2: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: iv/NRZCd4zSqrwC5qeD6LfckKwEDknxp8RqgrAfVy+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f1:89:ae:f9:ec:06:f3:89:e4:95:44:9e:d9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=bd26223495cabba91fd6d45f1a36ce509eff8901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:b9:06:07:24:98:25:f4:dc:e2:dc:e1:76:
                    d1:c1:ff:eb:14:42:93:1e:c2:fd:d4:8d:f5:bd:b0:
                    ea:cd:65:67:6a:78:40:9a:f3:9a:4a:e2:b8:b0:40:
                    cc:0e:33:04:7d:0f:88:5c:86:13:97:a7:22:63:91:
                    73:fb:bc:9a:8d:a3:a8:a4:04:e1:88:0a:64:d5:f1:
                    57:bd:40:01:d6:63:09:15:d2:f6:a1:22:a5:45:52:
                    d8:82:5d:71:17:38:fd:32:a4:3c:dc:de:7a:e6:96:
                    05:d8:9d:82:1e:15:0c:c0:62:0b:6c:da:4b:90:09:
                    29:ad:82:b3:b5:8d:df:6e:cf:10:15:f0:c2:e4:a8:
                    57:b4:e1:df:86:8e:1b:7a:5b:32:25:d8:48:13:83:
                    f6:f1:9f:93:66:74:30:66:29:83:46:01:2c:48:b3:
                    07:51:20:a2:f6:30:42:a1:75:7e:79:7c:a5:96:67:
                    0b:0e:fb:ef:f4:cb:8c:11:66:1c:99:b6:cb:bc:47:
                    94:5e:6a:2e:72:8a:59:ef:47:e1:4b:5a:37:11:1e:
                    c0:e7:9d:03:34:d7:fb:f5:40:db:2b:fd:92:a2:1c:
                    09:b7:92:94:ce:7b:2f:d7:2a:4e:9a:d4:90:da:63:
                    98:99:c8:84:b6:86:30:7e:64:56:7f:d5:c0:ee:16:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:22:34:95:CA:BB:A9:1F:D6:D4:5F:1A:36:CE:50:9E:FF:89:01
            X509v3 Authority Key Identifier:
                keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:6d:75:5b:07:0b:9d:99:35:1e:38:39:a7:0e:81:4f:fa:4a:
         dd:3a:6b:a8:80:54:ef:94:e9:da:46:26:c2:e9:e8:c5:0a:78:
         85:a9:c3:2e:63:99:f4:b6:cb:bb:ec:81:5a:62:fc:48:bb:03:
         6f:23:78:ce:dd:74:c7:a6:af:91:ec:7d:85:3f:75:d4:ec:52:
         6c:8a:d4:91:b7:a3:c8:d6:e0:f8:85:95:90:8c:11:cf:15:c9:
         9a:83:68:31:38:c9:52:48:c7:41:9b:2d:58:c0:54:73:79:b4:
         41:60:d4:93:5d:a1:46:dc:56:7c:b6:41:a6:7f:8d:af:d6:2e:
         c5:3e:83:92:e3:86:be:a7:df:0b:39:7f:00:48:80:79:a3:26:
         ae:e6:93:98:85:93:37:6a:d0:73:bf:8d:27:30:20:09:85:5f:
         82:99:f1:77:56:4c:73:88:9d:58:ad:c4:51:3d:d5:55:85:d8:
         70:b8:00:8b:63:00:75:8c:a8:c2:9a:8e:4a:b6:98:52:f6:db:
         7f:b6:02:eb:d8:e8:c7:61:d5:10:87:09:d6:d0:e1:7b:2f:d3:
         b5:95:b0:4f:18:cd:f2:09:f3:3d:18:6a:03:2b:12:52:4d:05:
         d1:64:3e:7e:c2:21:20:d4:28:aa:e6:06:3b:7b:6a:1e:29:4d:
         1c:11:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----