Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
File:                     pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft (raw, json)
Hash identifier:          VeACTsGd9n/V8ukw67asYOuq/cI5mXBAkI92UUDShuE=
Subject key identifier:   89:59:07:AE:9F:35:FA:D8:E3:64:46:34:2F:D7:CC:80:AE:83:A7:B0
Authority key identifier: A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
Certificate issuer:       /CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Certificate serial:       01962E998D9F5AEFC7B21C4EB06A2FE4F438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
Manifest number:          0E07
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl (hash: e70qiGehCZ+cDo9SjOvpvAMoEDw40L10ToWCd3ohx5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8d:9f:5a:ef:c7:b2:1c:4e:b0:6a:2f:e4:f4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=895907ae9f35fad8e36446342fd7cc80ae83a7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:f6:27:0c:0a:6f:43:d3:9b:f2:e0:7e:01:
                    bb:3c:b3:ee:f8:8e:09:7b:49:31:ba:42:c3:82:89:
                    17:61:a3:e5:da:3d:c8:75:ac:31:82:8b:49:bb:7a:
                    0a:e5:36:77:ff:c0:67:60:45:73:68:ad:83:c8:dd:
                    ba:d7:27:2d:80:fb:17:0e:a5:05:fa:b2:8e:47:0f:
                    e9:55:b2:99:c3:59:ef:9c:e9:71:5c:85:92:4c:54:
                    f1:01:16:9f:ed:61:da:c5:03:38:3c:14:ce:5d:3c:
                    f8:ad:ce:74:e7:e1:2a:9d:b5:f9:83:a3:b1:ff:cd:
                    94:36:5a:b9:8a:db:7d:a7:14:0b:1e:6c:25:2b:23:
                    36:fc:a4:50:67:8e:07:70:3b:f2:0c:9c:15:3d:9b:
                    f6:6a:05:63:aa:8a:ba:ff:e2:3d:8e:ad:1b:97:76:
                    7f:82:6d:99:f6:f8:06:1a:32:50:6d:b5:84:a4:0a:
                    a5:f8:91:09:9b:25:6a:98:ec:00:ca:6a:42:d8:0b:
                    2a:5b:b3:11:29:1c:3d:24:f0:92:90:dd:c2:5e:84:
                    e0:ff:b5:9b:1c:fc:3d:77:71:0d:c0:71:a4:20:d0:
                    5f:4a:09:f6:10:c5:58:1b:d6:1f:70:8f:b0:9a:f1:
                    98:92:23:11:7f:28:16:17:c7:15:7c:a2:df:1e:0f:
                    7e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:59:07:AE:9F:35:FA:D8:E3:64:46:34:2F:D7:CC:80:AE:83:A7:B0
            X509v3 Authority Key Identifier:
                keyid:A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f5:ad:b6:c1:5f:a8:1a:e8:b8:fa:10:7f:5b:6f:bb:9f:d1:
         a0:58:21:c6:44:5a:e9:6a:31:a4:6f:9d:4f:3b:a3:47:7e:8f:
         b0:94:89:e0:a7:a3:fd:d5:f7:09:5f:87:c0:35:d3:72:b2:f3:
         69:53:52:17:85:81:8c:38:06:f9:ff:78:0a:e1:48:84:ea:9c:
         9e:2b:74:29:f3:76:03:84:db:68:91:e1:0d:2d:85:49:ee:8f:
         e4:f2:cb:2b:01:0a:b1:e2:e8:10:4a:a0:5b:e2:9c:34:6a:25:
         4d:01:84:e5:5c:3e:d7:6f:cd:4f:76:1d:a5:96:d8:a1:b2:3c:
         0d:2f:a2:ec:70:07:be:af:b2:84:9f:da:38:19:ca:27:5e:ff:
         3e:53:b1:f9:15:d8:05:6d:c8:93:6b:1f:3c:99:83:40:26:ad:
         3f:48:08:12:03:0c:4a:44:7f:95:57:63:6f:5f:77:9f:d9:43:
         93:d2:c0:af:00:f2:ab:c5:e5:08:d6:63:a5:bf:2d:48:ad:13:
         ce:d4:87:f3:f8:74:63:56:7f:e5:7d:72:d2:81:87:85:01:5b:
         d3:77:c0:0a:9d:79:58:2d:bb:b1:f4:10:97:f3:c3:db:84:a5:
         7b:ad:1f:c1:86:ec:10:26:30:10:39:b2:8d:3c:9e:ad:d6:3b:
         9a:e5:9e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----