Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File:                     AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier:          W5zxWy+Pp3S8BMGSIXa4pL0rqwEse9u0u3WZJcU0BDE=
Subject key identifier:   4F:FB:CC:EA:9F:64:E3:53:6D:E3:70:B4:BA:30:6E:43:BE:38:53:18
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer:       /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial:       01962F3D51440C656D91E95D755BCF05E2B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: TFH6T78vBcx3fQdmVrjzYL5DeITfy1CVyTRI0zweLNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:51:44:0c:65:6d:91:e9:5d:75:5b:cf:05:e2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=4ffbccea9f64e3536de370b4ba306e43be385318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:80:37:d0:76:d7:b4:c2:86:17:c4:ac:37:
                    54:c8:d3:6a:27:5e:16:32:fd:f3:b4:6c:b4:1a:86:
                    8d:f3:08:6a:9d:45:80:48:99:3b:79:7f:f3:66:d6:
                    20:84:d2:c3:73:bb:36:bf:3d:af:40:20:52:c2:50:
                    ef:33:ff:03:5c:d2:80:29:75:ae:e5:3c:1f:f4:af:
                    e4:2a:48:3b:d0:bd:8f:12:83:09:16:2a:b6:36:cd:
                    76:05:08:f3:0f:4f:d0:f8:70:64:15:83:5b:08:23:
                    7c:b4:e8:c5:9e:93:db:d2:61:48:33:4c:09:ec:60:
                    4e:b1:ee:0d:31:35:a2:75:af:c2:a1:4c:01:3c:30:
                    1a:81:be:93:7e:e5:65:88:3d:6c:45:32:d6:b2:1d:
                    d3:c8:d7:00:80:c9:bb:76:36:93:be:5a:64:6f:c4:
                    36:39:fa:06:9c:ef:6c:be:ed:5a:50:72:52:d7:f9:
                    f4:0b:78:75:df:bd:34:ed:42:c2:2c:93:21:f8:ba:
                    06:72:f4:9c:cf:6f:f2:ff:7e:fe:f0:10:28:b1:3e:
                    f0:c9:f5:2d:e2:35:bb:29:5a:27:22:8f:0b:f8:77:
                    1d:fa:77:96:0e:86:f2:f3:d5:43:76:20:7f:90:fd:
                    5b:15:db:d6:5a:f4:2c:a4:6d:44:af:69:90:1a:e7:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FB:CC:EA:9F:64:E3:53:6D:E3:70:B4:BA:30:6E:43:BE:38:53:18
            X509v3 Authority Key Identifier:
                keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ce:52:a6:70:c7:ad:d8:f5:09:62:99:fa:db:44:4e:45:d9:
         0b:03:21:ee:12:f6:bc:87:70:23:32:70:9e:5d:b2:25:bf:32:
         f9:7d:2d:ab:3a:0c:d8:a3:a1:29:ca:e2:1b:ab:dc:cd:34:f1:
         a0:8a:37:8d:7e:d3:2b:af:56:6d:0f:f0:1c:4b:b6:99:e7:16:
         53:34:2c:66:45:72:5d:6f:c8:40:6e:24:2b:9a:53:03:5c:a2:
         b4:69:78:12:95:58:87:11:63:30:bb:f5:9d:ea:29:c1:b7:a2:
         da:35:ed:d9:96:a7:ce:08:d3:ae:bf:d6:c5:d5:0d:10:10:7b:
         c2:35:6f:06:71:47:b5:16:c8:55:cc:9d:41:82:6e:78:11:a6:
         64:dd:0c:86:8d:56:36:42:1d:6c:7d:39:40:a3:05:b8:bc:5f:
         44:b6:fc:82:00:89:e9:b2:eb:21:fb:5c:33:55:0b:93:38:73:
         9c:a0:de:6d:4d:84:72:75:46:0a:9e:33:cc:4a:2d:69:4e:97:
         1b:87:30:61:b8:98:1c:c2:d1:36:fd:4c:2b:63:76:9a:35:d6:
         1e:ea:42:93:91:3c:33:e8:80:3a:cf:db:40:64:35:6d:9e:a5:
         5c:4a:68:5e:98:6c:a9:1c:73:bf:31:28:ac:50:51:43:b0:e4:
         f7:f9:81:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----