Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
File:                     1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft (raw, json)
Hash identifier:          ZckXURpj9WahUYJlgN7mWAsQfKdLhwqyHZ+W0NSha/4=
Subject key identifier:   E4:C7:77:5C:01:78:E9:6B:3F:E9:2D:0E:A8:91:A5:D7:75:19:9D:43
Authority key identifier: F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
Certificate issuer:       /CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Certificate serial:       01962E61CBE5DF879B524F208004F2184FDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
Manifest number:          02E3
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl (hash: 5dlmG17FoxkWeOtCqdkUMt2Hs4WHBIi+lLuactkveuo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cb:e5:df:87:9b:52:4f:20:80:04:f2:18:4f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=e4c7775c0178e96b3fe92d0ea891a5d775199d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2a:50:43:01:84:ab:1c:66:ab:64:61:4d:1f:
                    e8:f1:85:85:db:73:b0:a4:66:a1:a0:60:ef:5f:9e:
                    f0:d0:86:bd:6c:2e:3f:fa:2e:33:3c:a6:23:70:90:
                    57:f6:73:cb:0a:fe:de:9d:42:32:b4:7b:76:f2:2a:
                    00:20:44:d2:4e:67:ca:dd:9c:58:33:a6:6b:89:5a:
                    bc:ba:74:f4:0c:b0:d7:48:c3:9b:22:c2:64:6c:eb:
                    e4:6b:ab:ee:c7:78:2b:04:17:f7:11:a0:36:b8:9e:
                    93:fc:69:ea:72:65:80:4b:25:ec:b6:9c:cb:32:93:
                    33:85:c5:1f:14:af:4e:09:8b:a5:9b:99:4a:7d:93:
                    e0:b6:18:90:a2:54:86:da:41:17:78:9b:56:ce:59:
                    81:bf:d8:a5:08:48:5e:38:7c:05:34:f0:58:9f:11:
                    b7:ee:96:a8:46:74:ee:f6:b4:34:ee:19:0d:11:62:
                    7a:0f:12:18:9c:a6:ec:14:9b:60:0d:34:83:b8:ba:
                    40:b4:eb:cb:89:c6:bf:27:32:18:f3:ec:c2:a4:f8:
                    ce:4b:75:21:dd:23:f0:00:6f:34:14:4a:6d:8e:5b:
                    3d:bd:4d:dc:73:ce:41:3f:d6:32:3e:d3:55:1b:6a:
                    d3:b3:c8:e3:b5:b8:cb:f4:0a:33:89:36:5c:99:88:
                    c3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C7:77:5C:01:78:E9:6B:3F:E9:2D:0E:A8:91:A5:D7:75:19:9D:43
            X509v3 Authority Key Identifier:
                keyid:F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c0:de:4a:5b:05:96:f6:af:f3:a9:86:5d:b7:21:0b:65:b4:
         85:a6:6d:47:e2:c4:9a:07:3a:ba:53:21:43:7c:20:02:d1:78:
         66:c5:1a:9f:54:f8:62:6e:61:bc:08:a1:92:9f:b2:14:5f:f5:
         1a:60:98:64:ef:dc:0d:5a:d7:5a:04:bd:7e:91:48:e4:ca:4d:
         48:5e:6f:aa:30:a6:96:94:39:e1:ee:11:82:b4:68:f6:cc:33:
         84:2c:a1:fc:e1:25:af:d1:7d:c9:ab:8d:91:05:c8:3e:49:ba:
         bc:67:69:68:0e:b3:fb:a3:43:dd:e7:7b:06:aa:d0:c8:cf:7a:
         4b:ee:46:a3:e7:f2:82:a4:d9:53:fe:b8:46:35:14:19:b6:54:
         98:33:53:86:f6:07:8b:06:0e:c4:ad:cd:04:74:23:4b:5e:a0:
         4d:0f:36:30:17:08:4f:9e:f0:d3:fc:d8:85:ef:61:53:81:0c:
         9c:08:26:b2:b9:ce:a5:17:15:bf:7b:a2:ce:4e:a9:8b:16:c5:
         d2:29:38:08:88:ca:94:a5:f3:2e:84:60:33:40:81:1c:58:8c:
         8c:b0:64:1c:83:4d:93:fe:14:59:9e:fb:e6:44:0e:6b:ca:e1:
         97:17:e1:d7:05:e7:53:62:d0:bd:b4:da:0a:8c:89:22:05:cf:
         26:d2:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----