Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File:                     li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier:          BUI211qY4qvnJxA/zQmmBqww2XbCPElBX6SNZITw9Hc=
Subject key identifier:   C0:E6:D7:44:BC:7A:B6:FF:00:4A:41:B7:D3:4F:47:06:74:77:A4:26
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer:       /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial:       0199CCEC54DA3C44389490F6675B43545FDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number:          09A5
Signing time:             Fri 10 Oct 2025 07:01:04 +0000
Manifest this update:     Fri 10 Oct 2025 07:01:04 +0000
Manifest next update:     Sat 11 Oct 2025 07:01:04 +0000
Files and hashes:         1: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: OAcr2SKmrKZKf3I9JyjcrycItwfKonJG2jjLlhNdOr8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:cc:ec:54:da:3c:44:38:94:90:f6:67:5b:43:54:5f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
        Validity
            Not Before: Oct 10 07:01:04 2025 GMT
            Not After : Oct 11 07:01:04 2025 GMT
        Subject: CN=c0e6d744bc7ab6ff004a41b7d34f47067477a426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:87:f0:94:8c:f2:cf:c0:b6:a3:44:45:3c:f6:
                    9a:82:cd:23:17:f7:f3:5c:a9:e8:72:af:8d:ed:08:
                    b4:6d:86:47:e8:af:3f:d9:35:e7:e2:62:87:33:a3:
                    98:86:53:69:26:1e:3a:51:ed:de:17:f1:eb:12:6f:
                    f9:58:dd:68:f9:11:c3:94:a2:41:e2:0b:78:ac:dc:
                    54:6b:21:26:08:ef:1a:9d:8b:48:26:14:77:a6:0e:
                    c8:2b:ee:1e:d1:ca:cd:ff:1c:10:81:38:5b:ab:51:
                    a2:d4:d7:dd:58:1c:44:88:80:2e:ab:0d:85:f9:23:
                    52:40:0e:86:09:9b:d5:8a:cf:24:ee:11:93:7b:87:
                    de:a5:d0:a2:15:b8:0b:fb:77:42:99:fc:d9:52:54:
                    25:bd:8e:de:4f:47:1d:84:a8:27:9b:f4:89:9f:4a:
                    85:1c:6a:7d:1d:5a:00:cf:0b:94:82:05:67:c9:4f:
                    d7:cd:0d:4e:a5:ed:f1:f4:c4:92:9d:c0:ce:6e:1a:
                    5d:c4:9b:d2:db:c5:d5:ed:41:4c:78:a9:e1:ff:a4:
                    fb:ef:70:d3:74:dd:af:a4:42:e8:ee:d5:42:22:4b:
                    11:34:a6:87:a8:52:9d:14:8d:c1:94:c2:a0:28:dc:
                    42:9d:35:0a:26:2b:50:14:f5:92:84:70:50:6c:6b:
                    09:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E6:D7:44:BC:7A:B6:FF:00:4A:41:B7:D3:4F:47:06:74:77:A4:26
            X509v3 Authority Key Identifier:
                keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:70:16:9f:ec:d9:c9:40:8e:ca:2b:7c:f6:e0:8a:86:31:
         1a:a2:3d:4c:70:ab:6b:64:79:9a:9a:f2:32:af:9a:d6:ae:8a:
         f7:05:f9:9e:22:18:f0:f5:ac:2a:1f:5b:0e:d5:36:fc:76:ba:
         a2:75:a3:a7:89:6a:23:ce:76:61:e6:44:55:25:cd:ef:a5:4b:
         c4:79:27:9a:22:03:20:3d:29:f4:13:84:f1:51:7e:24:41:78:
         0e:63:cb:44:e5:1b:73:72:36:72:dc:28:ad:8f:5b:a2:ec:05:
         3d:78:4b:40:e9:52:2c:e2:cd:b4:9f:ff:42:db:ce:4b:18:a9:
         9f:b9:00:16:29:5f:f2:72:97:3f:05:0e:3a:29:a9:8b:24:f5:
         3b:49:e2:3b:86:74:84:a6:b5:84:4d:bc:a4:f8:8c:51:bb:02:
         13:99:bd:3c:d8:cd:48:b0:44:96:3b:f3:fb:b6:ef:88:c6:bb:
         e1:37:bd:c5:91:ba:c6:0b:5c:83:53:9b:fe:79:4a:48:8b:91:
         d6:94:c4:17:61:04:b1:58:a7:b4:c0:d1:92:a9:93:ec:b0:1e:
         1e:31:51:89:5f:f1:8f:7d:b4:85:13:0a:0e:2d:3b:80:36:09:
         f5:91:7c:b4:ab:b2:00:c5:05:6e:0c:35:e2:ed:a0:0d:5c:b8:
         49:2c:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----