Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File:                     RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier:          q9gDPDreIBythS59PoYy68CoqOsKd24pjbzHWWp6Xko=
Subject key identifier:   A7:D0:9E:88:3C:92:09:C2:B3:8C:C9:37:9B:08:B9:1D:36:D6:05:67
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer:       /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial:       01962E989A446F377DC3C7E511574D5D00CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number:          0978
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: twmwQtKrBqnhYTmrQUeGzgnUJZX5JUAuhZ84E87PY44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9a:44:6f:37:7d:c3:c7:e5:11:57:4d:5d:00:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=a7d09e883c9209c2b38cc9379b08b91d36d60567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:21:d6:40:00:73:d7:a6:57:68:38:10:0c:
                    7f:9d:4f:0a:87:56:9f:91:4a:9f:dd:43:07:68:5f:
                    54:69:59:31:2a:68:d3:9b:12:24:58:19:f0:56:97:
                    30:b8:4d:3f:dc:4c:2f:73:d8:15:c5:fa:d6:02:e3:
                    84:1d:c9:2e:27:70:d4:7f:39:0f:bf:89:09:37:71:
                    c1:8d:b5:88:53:69:69:db:f6:d6:cd:57:ad:1d:d4:
                    40:73:44:21:02:62:c5:40:72:ee:de:f3:69:32:86:
                    44:4e:73:d9:40:31:15:6a:f9:b4:df:70:74:db:17:
                    46:34:86:65:7f:35:ee:9b:2a:54:54:12:23:91:e8:
                    0e:1c:68:e3:40:d5:0f:85:06:c2:ad:49:0a:03:0a:
                    b3:6e:98:7a:6d:0d:c9:4e:01:3e:7f:9e:31:df:28:
                    73:fe:b6:72:ad:a8:09:3c:46:0c:ea:4a:ae:39:6d:
                    b0:67:1b:25:1b:ee:1e:e2:b0:72:04:48:c4:e3:8f:
                    3c:b2:f7:8e:3a:12:35:80:54:94:cc:79:df:37:a4:
                    0b:29:c4:ca:04:b4:f7:c6:ce:45:31:05:1f:f2:19:
                    d9:08:2f:22:de:03:74:93:d6:15:ea:20:92:d1:e0:
                    e0:c0:aa:50:de:df:cd:81:33:40:21:c8:86:e5:67:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D0:9E:88:3C:92:09:C2:B3:8C:C9:37:9B:08:B9:1D:36:D6:05:67
            X509v3 Authority Key Identifier:
                keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:80:3d:ea:56:ae:bd:5a:db:e5:6d:92:0b:f0:d0:5d:b2:32:
         b3:0e:78:71:b2:1e:c5:bb:59:de:da:dc:80:1f:ce:b3:ca:fb:
         64:84:2d:00:80:1c:1a:1c:1e:1b:a9:79:0e:a2:d4:de:76:ce:
         97:36:69:ca:1e:2d:20:a3:33:b9:1e:7b:07:22:4e:8d:f6:e7:
         00:21:48:fb:82:d7:2b:83:01:4e:92:e7:d5:f4:cd:ee:5e:8c:
         1e:a0:e0:27:95:de:38:85:87:86:2e:4c:a5:59:74:e5:1a:1e:
         fb:01:65:5c:76:18:0d:49:3c:1c:24:cb:68:74:d6:b8:4f:c9:
         02:98:c3:69:4d:eb:fb:3d:e5:f1:ca:a3:5d:78:ea:26:f4:e1:
         8b:ff:86:b1:3a:4b:5b:a9:8c:d5:0d:8b:b7:a1:ba:99:1e:11:
         96:b1:8e:9a:91:5b:75:01:9c:b6:64:da:d5:04:ad:cc:b7:29:
         f3:2d:83:36:56:ab:cb:52:36:69:22:e9:7b:1a:73:c0:e6:43:
         ba:5b:69:20:92:10:d9:c4:54:35:bc:3f:33:24:38:16:dc:06:
         00:5b:a8:ad:c0:9a:29:71:b4:ae:8b:b8:5c:3f:f0:f3:7c:d0:
         26:83:56:4f:d3:74:82:87:f5:48:94:d7:dd:c1:a4:ca:30:08:
         39:ef:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----