Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
File:                     LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft (raw, json)
Hash identifier:          dRk8cvK4bpTEYojUvcw+6JSXh83QRu2LhTou1Y1VM8c=
Subject key identifier:   4D:86:9F:FF:0D:D6:BA:E6:C7:F9:56:F0:1F:80:91:F5:6B:CA:40:4A
Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
Certificate issuer:       /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Certificate serial:       01962E99A5DB61C29E79F554503977886083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
Manifest number:          0963
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl (hash: z4dbtYEgAVRiFkMGzR3XDQW9kE6wf1EdbLx2ILJGDiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a5:db:61:c2:9e:79:f5:54:50:39:77:88:60:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=4d869fff0dd6bae6c7f956f01f8091f56bca404a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:ff:75:f4:71:76:44:23:43:8b:3f:bd:ee:
                    bb:4a:b7:b0:95:6f:1b:66:d3:9d:10:07:ab:eb:c5:
                    69:3f:88:ab:72:8e:9e:26:5e:67:cd:32:00:da:f3:
                    c9:cc:24:45:fe:dc:6f:76:a9:70:2a:d3:82:a0:87:
                    1b:f4:d4:96:35:05:48:81:84:48:d8:89:91:17:f0:
                    fc:7a:fa:64:18:2e:dd:15:05:e1:18:a1:6d:4e:46:
                    7c:f4:62:bf:34:10:08:23:43:b0:c3:56:39:fb:0d:
                    8b:95:3c:96:49:8c:b7:2c:38:e2:7d:71:b4:c3:f9:
                    34:90:c1:cd:42:01:e1:43:cd:90:02:ba:f5:dd:4c:
                    23:56:f6:17:86:1c:e0:35:bb:34:fe:4f:af:c7:bc:
                    c9:d7:8e:cd:8b:17:a8:5d:d3:67:04:6f:d8:22:a4:
                    73:69:69:b9:c2:93:9c:87:ed:cf:d0:39:9b:7d:8e:
                    fa:f1:7b:d4:15:8d:a0:81:01:3b:ba:97:5d:f1:94:
                    c6:64:6e:41:0b:2f:57:81:39:f4:b4:5b:1b:a8:cb:
                    4a:2f:c2:ab:d7:2c:69:51:65:9d:a4:21:7b:f2:d6:
                    44:33:cc:a2:2e:03:80:1b:5f:4c:f1:b4:79:4a:48:
                    7b:c7:53:55:89:39:26:40:5c:e0:e1:23:a3:ae:71:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:86:9F:FF:0D:D6:BA:E6:C7:F9:56:F0:1F:80:91:F5:6B:CA:40:4A
            X509v3 Authority Key Identifier:
                keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7e:49:43:b8:09:0f:2c:04:bf:45:26:c8:c3:af:4a:f9:55:
         4c:fd:78:33:b7:40:a2:0a:7d:da:68:50:6f:a6:e3:cc:df:82:
         46:68:7c:ad:9e:01:ce:43:7e:67:96:95:95:39:62:24:ce:d4:
         8e:a1:fb:85:dd:e3:cd:ba:4b:74:32:63:fd:47:8d:dd:8a:49:
         a5:ee:fc:dd:77:fa:fe:df:4b:ab:5c:fa:44:a7:2a:69:16:2e:
         04:16:d3:44:70:e9:65:7e:9d:39:7f:35:e2:f6:d1:31:55:d4:
         dd:ae:91:e6:bb:73:db:32:d9:d4:35:37:32:a8:47:f6:4c:3b:
         da:69:c4:ba:ed:8e:08:cc:45:fc:ad:ef:12:e6:53:6d:f8:6a:
         97:cd:cc:61:0c:35:0f:d8:80:5f:17:83:5a:93:7e:f4:5e:8c:
         da:fb:aa:53:42:45:1b:54:d9:ca:0d:0c:f0:c8:a2:7b:38:8c:
         9a:6a:90:22:a5:50:a0:3c:b8:7f:dd:c5:38:c2:9e:4d:b2:6f:
         58:e9:6b:2f:9b:bf:ca:05:86:7e:05:67:f4:c1:92:db:e7:44:
         77:38:c4:e2:05:49:22:82:52:cf:4c:ff:49:93:95:f1:ff:ef:
         b7:8e:66:ba:78:b0:41:9d:59:c1:f7:37:c0:d0:ce:5b:7d:95:
         14:c0:bc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----