Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
File:                     LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft (raw, json)
Hash identifier:          b4gSbgsKiFrHK+Z4cVoKhZ6iHGkDejAONyhbGktQwGs=
Subject key identifier:   61:50:B0:4E:53:42:60:AD:BF:E2:1D:07:2E:03:12:5F:C2:5A:2E:24
Authority key identifier: 2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43
Certificate issuer:       /CN=2c9822008d9cc7012d6030429b28d858dbbaca43
Certificate serial:       01962E99457C6D84A87258743DBFA0CFAB1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl (hash: tUkRONqhilT9RYHfYbbhtF6Xr4soJVbI2MZGgFMhdzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:45:7c:6d:84:a8:72:58:74:3d:bf:a0:cf:ab:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9822008d9cc7012d6030429b28d858dbbaca43
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=6150b04e534260adbfe21d072e03125fc25a2e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c1:b3:8c:33:1e:82:14:68:e4:17:51:5e:e4:
                    20:6a:05:4d:65:26:08:3e:9b:e1:d7:71:67:3b:02:
                    9e:95:af:8b:2c:aa:ea:92:2c:66:eb:02:4b:66:cb:
                    b2:e4:cd:f0:0d:f4:30:66:91:74:6c:e8:31:1d:92:
                    8e:e1:db:11:ee:91:e2:fc:aa:9a:0f:58:7c:b7:d7:
                    b0:74:ba:3c:c8:67:a1:5a:99:56:3e:bc:a8:fd:08:
                    a4:8d:46:9b:d0:af:99:21:8d:b3:bb:15:b2:2a:d5:
                    bb:58:3c:92:9c:1a:31:2d:97:6d:a1:30:05:94:af:
                    a6:2c:d6:fa:40:ce:12:44:f0:c1:fa:41:f4:de:4c:
                    ce:1d:83:94:44:03:9d:8b:36:ca:db:25:f4:60:aa:
                    0a:fa:7f:17:6d:a8:7d:cf:10:e9:11:b9:ae:36:fc:
                    ab:59:99:c5:66:4a:a5:df:80:22:a9:be:ff:21:ed:
                    41:0c:e4:6d:14:74:3c:c7:c6:b8:41:f3:92:fb:37:
                    ce:22:99:eb:b4:78:c4:1d:62:38:48:49:30:fb:a8:
                    f0:fe:db:ac:14:2f:f4:a0:9f:b5:14:a6:b7:e9:f6:
                    1f:b8:9c:3c:b0:cb:a2:6c:0e:cf:8d:a9:d1:bf:55:
                    a0:c8:fc:64:62:e5:3f:37:b1:ab:9d:f0:b7:3c:68:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:50:B0:4E:53:42:60:AD:BF:E2:1D:07:2E:03:12:5F:C2:5A:2E:24
            X509v3 Authority Key Identifier:
                keyid:2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:28:d0:f0:71:d1:cb:04:0a:12:d9:a8:5a:0f:8f:08:5e:75:
         4e:5c:37:6c:86:d2:e9:e1:3e:10:ea:a4:00:bb:d0:1b:88:2b:
         c7:74:c7:f4:0c:37:6f:dc:d1:c5:82:42:be:f6:3f:06:f7:2d:
         55:f3:0d:ac:ff:c3:db:e2:ef:0c:1d:be:27:0e:93:18:53:99:
         09:21:35:d2:07:73:0f:5c:77:8f:7a:58:fd:b4:1b:09:89:48:
         53:b2:a6:e0:fe:3f:47:01:ef:12:4c:f2:12:0a:1a:6e:2e:4e:
         cf:34:a1:0c:2d:15:b9:19:5a:d7:33:6a:20:d1:9d:38:4b:d8:
         a4:58:9e:be:4b:03:59:74:26:e1:f2:2f:13:5e:6f:54:da:e0:
         55:4f:29:d5:53:aa:e1:cd:5b:80:77:a0:bc:b7:3a:45:f8:48:
         52:56:30:56:0b:79:50:a4:fd:57:bc:82:6a:69:48:8e:eb:cb:
         df:32:79:d3:ba:10:ea:32:e6:3e:27:15:19:20:10:47:29:1f:
         85:be:a0:ac:64:cc:e5:d4:40:7b:31:9a:94:4e:66:92:8b:95:
         c3:21:cd:45:9b:b3:d8:38:2f:f4:b3:6e:7f:c5:b5:88:ac:30:
         34:f4:37:5e:f1:60:5d:36:af:95:b9:01:2c:13:ca:d7:52:6b:
         f0:c6:5f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----