Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.mft
File:                     lbzyUZp7TPNY-2x4A5pb56GxMFs.mft (raw, json)
Hash identifier:          yo4uspp3CmafHz1swRlWX5Dj6nDlKzP5v/TAKe9H3Mg=
Subject key identifier:   C6:63:88:E2:2A:D2:0B:12:75:23:D1:DC:7A:FE:04:85:E8:DC:EB:68
Authority key identifier: 95:BC:F2:51:9A:7B:4C:F3:58:FB:6C:78:03:9A:5B:E7:A1:B1:30:5B
Certificate issuer:       /CN=95bcf2519a7b4cf358fb6c78039a5be7a1b1305b
Certificate serial:       01962E996ADF89CAE809664052914AFC20B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbzyUZp7TPNY-2x4A5pb56GxMFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.mft
Manifest number:          03C1
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: lbzyUZp7TPNY-2x4A5pb56GxMFs.crl (hash: ZzY9LQrRcRkNgoptmd6a9c5YQ6sOWDhMTn5xVlyP4YU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6a:df:89:ca:e8:09:66:40:52:91:4a:fc:20:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95bcf2519a7b4cf358fb6c78039a5be7a1b1305b
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=c66388e22ad20b127523d1dc7afe0485e8dceb68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:c4:72:9b:49:0a:b5:2f:7b:87:75:61:dc:
                    88:ab:a0:fe:05:12:ca:48:9c:de:fc:f5:f3:9d:ea:
                    b4:fa:e4:bf:00:15:e6:e0:a8:0f:e4:5b:2f:9a:18:
                    31:93:a5:85:8e:b5:48:04:88:41:a8:20:78:54:da:
                    14:82:cd:d4:e0:59:ba:a7:aa:b7:d3:58:cb:0c:d0:
                    e6:77:0e:31:93:6b:44:ef:36:7d:47:4d:c6:74:37:
                    3e:8b:b5:b9:fe:95:ae:53:30:29:dd:52:ce:12:ea:
                    0b:06:3c:f1:ca:33:fc:ad:ff:15:43:29:7a:aa:a2:
                    8c:9b:5c:07:d4:0d:59:b9:dc:dc:fb:fb:4c:18:a8:
                    8d:59:e9:d7:89:76:80:43:34:5c:74:29:bd:94:39:
                    0b:af:e1:f7:a1:21:b2:85:20:d4:f8:b4:bc:bb:c3:
                    b6:e8:f2:0f:c3:71:db:d4:ac:ca:d3:3f:5d:d5:04:
                    79:5e:42:fe:29:8c:75:86:58:e9:d5:0b:aa:5c:f5:
                    a6:f5:f3:5c:c7:6b:5c:98:3e:c7:47:60:1d:e9:bd:
                    e8:6a:a3:59:98:37:99:dd:03:5f:7f:77:17:53:4d:
                    7e:3c:a0:05:65:5f:c5:71:ca:38:75:07:0e:28:0b:
                    72:a9:41:9d:39:74:27:09:c3:b6:93:2f:93:0a:3b:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:63:88:E2:2A:D2:0B:12:75:23:D1:DC:7A:FE:04:85:E8:DC:EB:68
            X509v3 Authority Key Identifier:
                keyid:95:BC:F2:51:9A:7B:4C:F3:58:FB:6C:78:03:9A:5B:E7:A1:B1:30:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbzyUZp7TPNY-2x4A5pb56GxMFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:e5:83:a1:5b:9b:bf:85:f5:f8:19:cd:79:ab:a5:b4:e0:
         df:dd:cf:f4:86:0c:7f:ec:16:fb:56:be:71:82:6e:1b:10:05:
         83:0e:79:bb:f5:a8:25:ad:25:e4:3c:d1:0b:9d:b3:a4:30:ce:
         17:b9:ab:79:e1:4d:2b:21:0a:b3:b9:e6:d3:46:9e:51:bc:32:
         f5:88:e6:1d:8f:1e:2e:f7:84:59:8a:05:a6:05:9f:f2:47:0d:
         c6:63:58:ea:cf:39:20:f9:43:6c:05:b6:f0:50:e3:b0:25:9d:
         ec:ff:64:43:03:06:4a:7b:4d:f9:c2:21:53:e9:96:a1:9d:ea:
         bd:9f:70:a9:85:da:39:3d:c3:97:85:60:1c:e3:c6:f5:94:2c:
         79:30:00:b4:67:44:33:61:9d:eb:6e:12:33:ad:e8:dc:76:36:
         23:f7:31:19:8a:18:08:c7:84:a0:17:c9:df:44:79:2b:64:92:
         35:d3:1f:5f:37:10:56:0c:7e:3a:5a:ad:d2:09:e6:c4:9e:b5:
         d2:ab:17:9e:ae:99:c0:58:b0:c7:e0:71:41:04:57:8c:02:66:
         56:7b:6f:ba:d0:32:8d:00:1c:28:8d:38:01:ad:05:ba:91:1d:
         c8:0e:94:e7:c6:be:70:9c:f7:44:a3:69:6a:aa:aa:68:40:84:
         75:6a:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----