Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
File:                     d6dcTie5EIG4MB56fE_ZA-AmGGI.mft (raw, json)
Hash identifier:          1vEnfvbPsXmq8AdO6/9ni8cqTT7RpEPPNf+FwU2YPU4=
Subject key identifier:   C4:7E:71:B5:DB:5C:95:D9:52:BA:AC:98:8F:1B:4F:3E:DC:B3:22:F5
Authority key identifier: 77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62
Certificate issuer:       /CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
Certificate serial:       01962E98F535AA15381C375B3361615AE834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft
Manifest number:          0469
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: d6dcTie5EIG4MB56fE_ZA-AmGGI.crl (hash: YrUYjCw4+6Kad3leYhHY2nTsh5ng67fH4eRQQmr5Rnw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f5:35:aa:15:38:1c:37:5b:33:61:61:5a:e8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a75c4e27b91081b8301e7a7c4fd903e0261862
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=c47e71b5db5c95d952baac988f1b4f3edcb322f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a0:6a:a2:1b:53:4b:4d:56:8c:2c:24:3c:14:
                    06:f6:44:bb:96:81:4d:b6:6f:3a:e2:fc:1a:1f:dd:
                    12:0e:2a:0b:e4:13:6b:34:dd:cf:16:f6:79:9c:1d:
                    f1:16:4d:6e:b8:c4:11:3e:5b:5f:87:03:e7:05:ce:
                    f6:c1:9e:01:83:53:9e:b8:46:e9:f0:c4:4d:39:ae:
                    07:06:e8:4f:0e:1c:95:e2:a7:6f:34:eb:a8:62:95:
                    06:98:4a:24:00:c2:84:55:f9:bd:5f:ab:4f:f9:38:
                    34:ef:f8:f5:23:39:b9:4d:f2:fd:3f:3e:e6:f8:5f:
                    dc:7e:51:d4:b1:90:ce:0f:bc:25:17:f5:04:dd:9c:
                    54:92:20:41:f3:25:ca:7c:b9:0f:5b:6d:1f:15:3a:
                    cd:35:0c:6b:f9:f9:5d:68:3a:e4:af:e0:f5:11:ac:
                    16:0e:5a:c3:b6:c6:2f:93:2a:95:45:ad:cc:3a:45:
                    e8:a8:91:2b:bc:f4:43:98:34:03:36:31:84:e3:b5:
                    23:16:04:a1:fe:47:8b:3b:cf:30:e0:c3:4b:03:7a:
                    97:c9:e1:8a:0c:84:25:de:d2:0d:25:bb:21:7a:4c:
                    e2:8f:a6:68:28:34:cb:be:a7:08:88:9f:13:6f:3c:
                    84:d4:f5:7a:69:ce:f6:9a:c7:2f:6c:11:e0:f9:64:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7E:71:B5:DB:5C:95:D9:52:BA:AC:98:8F:1B:4F:3E:DC:B3:22:F5
            X509v3 Authority Key Identifier:
                keyid:77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c5:89:ab:d3:7c:56:0e:9b:f4:92:22:f4:15:08:76:b2:0f:
         e6:34:55:3b:5d:99:ee:54:8f:dd:df:a1:15:b9:b7:63:bb:ca:
         db:64:60:8c:32:2f:62:8a:53:06:8c:1e:12:26:81:cc:7f:54:
         a7:f7:fd:3c:1d:58:5c:e9:84:79:93:6e:46:d9:9a:96:96:db:
         52:ce:63:37:84:2f:81:a9:92:f5:cb:b8:bc:1a:74:ad:cd:0e:
         d0:c7:ee:23:87:52:93:63:da:17:c0:8a:4e:6a:c0:a9:29:7f:
         bf:0d:c7:9e:dc:df:d4:1e:7f:58:8d:32:55:77:07:52:8c:f4:
         26:46:22:f7:bb:a1:ee:f9:d5:ae:cb:7b:c0:c0:97:ad:ff:fd:
         46:00:4d:d3:8d:c7:33:f6:c7:35:8b:8e:df:bc:71:ba:40:8f:
         2a:63:5c:1a:b2:55:b5:17:b0:90:0e:e3:19:cc:1a:58:34:da:
         74:bd:1a:62:a2:0c:42:eb:7f:b8:e4:5b:8a:7d:e5:02:f2:53:
         1b:06:c9:86:05:74:1c:85:e2:de:5f:cc:f4:3a:75:9c:68:5d:
         6b:c1:fb:c4:44:f6:b4:4f:ad:e9:f2:b1:27:f9:10:c2:e2:e2:
         f0:b7:74:64:00:0f:bd:9a:56:f8:a8:b3:96:9c:89:1e:1f:38:
         e6:40:5a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----