Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
File:                     MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft (raw, json)
Hash identifier:          9mie9MGxo+9zeIZVniBfbhQb+6BZTWDDdwRqJEys7+0=
Subject key identifier:   6B:0E:A5:AD:86:A4:45:D0:78:D5:9F:A7:B5:1C:FD:F4:10:5A:91:80
Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C
Certificate issuer:       /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
Certificate serial:       01962F3D8C22C745E95977ADC4ADF3D71824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft
Manifest number:          0550
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl (hash: BgLtVIsOaGT3eY1nPvfh6TWoJ8ar9aPsUh8tgFbMzv0=)
                          2: gVZpy_aU2P0Pr-2EJHA1HwKJhRU.roa (hash: P5u1LpZGGtQaGv/FeFmSXhXnEGgm7B33JQ+aoyUNOOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8c:22:c7:45:e9:59:77:ad:c4:ad:f3:d7:18:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=6b0ea5ad86a445d078d59fa7b51cfdf4105a9180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b7:e4:c0:76:20:a3:66:a0:48:55:4c:79:2f:
                    27:03:94:6a:ae:27:7c:4a:ec:d9:20:46:f9:f9:3e:
                    e4:0d:15:08:aa:dc:ee:8c:d5:ae:9f:6a:cd:61:f1:
                    5d:02:dc:35:d6:5a:f2:54:d8:35:92:ee:5b:d9:b1:
                    d0:61:b8:6e:23:27:43:e3:2d:80:11:15:56:b9:b9:
                    87:42:f5:17:4c:c4:c3:3b:13:08:1b:4c:55:b6:ca:
                    fb:44:8b:95:8d:fd:3a:22:be:25:43:f7:65:25:91:
                    dd:52:c9:4d:7c:3e:5b:05:ad:42:83:00:8c:9a:5b:
                    71:66:cd:24:e6:6c:62:7a:5a:cc:9b:ec:31:24:64:
                    1e:11:fd:0c:54:b0:37:f1:f7:d9:a2:75:1f:06:8a:
                    05:cc:75:cc:3e:8f:39:83:83:e7:1b:15:8c:de:52:
                    6a:28:8d:0a:37:57:f0:80:3c:ba:59:c6:76:0d:6c:
                    e3:23:ee:5d:61:d0:b3:da:95:47:df:fb:c8:1a:41:
                    25:ad:9d:5d:c8:72:b0:f1:34:15:04:fb:8d:48:60:
                    3d:89:4b:7a:71:a8:2d:3f:df:0e:16:d4:2e:f7:4d:
                    10:2c:eb:60:ec:e0:d8:63:b3:c3:8f:30:78:3b:38:
                    5a:42:85:b0:31:bc:c3:ff:81:75:73:73:54:98:ef:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0E:A5:AD:86:A4:45:D0:78:D5:9F:A7:B5:1C:FD:F4:10:5A:91:80
            X509v3 Authority Key Identifier:
                keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:57:fc:42:3e:ed:f0:1d:a4:77:f1:09:52:2e:f8:eb:38:6a:
         85:c5:7b:7e:23:fb:b2:b3:1c:3a:e9:7b:67:bf:b4:7f:59:fd:
         39:25:5e:36:e7:6b:7b:ab:cc:0f:c2:f4:98:ad:38:78:68:8e:
         d8:cc:fd:ae:c0:c6:2b:b2:18:40:40:4f:d7:bf:02:97:bb:dd:
         49:43:50:18:6f:37:8d:ca:27:b5:fa:78:ae:17:2c:14:f3:c1:
         59:0c:01:aa:e0:e8:45:5d:ac:ae:ac:d6:f3:ac:95:97:e7:44:
         1f:bb:dc:06:9f:91:b5:67:52:0a:6f:30:40:48:3e:fd:c3:81:
         c3:cf:c8:cf:13:2a:27:9b:42:d7:2a:07:61:ae:91:99:34:c7:
         e8:c8:6d:b5:bd:e6:d3:4c:bf:37:cd:b8:ae:b9:52:16:39:df:
         9e:d6:67:2e:12:1a:23:fa:28:34:2d:05:b9:0a:51:42:6b:31:
         39:7e:26:eb:3f:a5:ee:7d:05:f0:bf:0a:64:b9:e0:f2:29:5c:
         8d:5d:ee:2a:6f:44:eb:3a:e0:ca:f5:48:43:0f:00:88:b4:e2:
         aa:81:30:51:4d:89:78:dc:4c:a2:8e:fc:40:44:36:64:6f:56:
         c5:43:6b:be:c2:78:d4:41:5e:c3:d0:0d:21:96:87:5e:4f:97:
         cf:82:ad:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----