Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File:                     4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier:          6e7wfi23p2KAIjCrFLufhQOPG/3v4xnZS3A9uyN0vBs=
Subject key identifier:   63:2B:7A:3D:8D:CA:83:22:E9:92:5A:C5:40:66:BB:5F:32:5D:A1:5B
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer:       /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial:       01962F071C3A708A29D02EADE2AC09D36180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number:          07B6
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: OHY9JEnrl6J4Twk7pgJa92fn8+AAbEo+z5yufp/Idz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1c:3a:70:8a:29:d0:2e:ad:e2:ac:09:d3:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=632b7a3d8dca8322e9925ac54066bb5f325da15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:b2:be:25:42:a6:82:99:a5:3f:b7:23:4e:
                    3b:68:de:8d:c1:2f:e0:ca:86:bc:44:85:b6:8e:26:
                    75:44:af:7f:f2:4e:4e:d3:f9:3d:bc:41:06:46:8a:
                    e7:fd:28:8e:87:9d:e4:dc:f9:ff:43:e5:a9:c9:de:
                    fa:9d:c1:66:c4:e2:44:82:8f:54:30:2c:0e:19:42:
                    b5:d7:22:94:c3:cd:da:a2:34:6b:a4:0f:d8:7d:8e:
                    ec:60:5a:23:3c:89:f3:e7:e6:8c:c7:20:dd:87:1e:
                    e1:76:1f:09:44:ad:49:94:98:8d:8f:90:19:e0:2a:
                    31:a7:69:7a:fd:c1:7e:46:50:b3:8d:c8:15:8d:e8:
                    a4:84:53:02:85:68:67:25:7e:a2:06:ca:1a:cf:8d:
                    3a:43:b6:0c:81:81:5f:cd:bc:0b:b4:20:fc:40:79:
                    b1:2c:82:9d:b0:bf:a4:33:c6:39:86:15:ef:da:5f:
                    35:2e:ff:76:42:d3:5e:bf:a7:f8:4e:29:77:0a:58:
                    6a:be:ab:0d:5c:d1:29:11:b8:e4:d5:9a:ae:73:4d:
                    37:4b:d3:34:ae:28:1e:37:58:5f:71:0b:d2:1b:65:
                    cc:aa:ac:4a:51:d3:bc:ae:e8:51:df:1b:bd:f2:da:
                    f4:c5:8a:44:07:35:a9:ee:39:41:67:9e:b3:51:c1:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2B:7A:3D:8D:CA:83:22:E9:92:5A:C5:40:66:BB:5F:32:5D:A1:5B
            X509v3 Authority Key Identifier:
                keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6a:f2:05:22:95:a2:b0:cf:e1:4a:b2:60:e6:3e:a5:38:b3:
         57:a9:8f:32:75:42:b3:70:ec:03:ac:97:eb:bb:0b:5f:59:fa:
         5f:66:72:05:15:7b:4b:ee:75:4d:ae:42:75:05:ea:f6:a1:e4:
         a9:25:e2:46:97:cb:d2:c6:6c:dc:2f:d4:9c:a1:6d:43:45:8c:
         66:30:26:49:69:c6:9d:0f:ee:41:4f:88:99:99:9b:11:52:8a:
         cf:cc:6e:79:6f:61:ec:87:7c:b4:2b:75:30:3c:d9:04:14:44:
         aa:55:d1:d2:de:60:8f:8d:29:ae:0d:80:6b:cf:68:06:e6:15:
         ce:25:3c:79:72:22:21:28:c5:d8:b0:76:5e:a3:3f:f9:d1:b5:
         eb:5b:a8:5e:25:e1:c1:49:60:f9:0a:16:eb:43:50:19:92:bf:
         f3:60:78:62:d1:d8:af:54:5a:fc:fa:cc:eb:d8:e2:d4:b5:cc:
         02:7c:cf:c7:7c:8e:11:d8:34:46:1c:59:7f:f9:39:4c:f6:b2:
         35:b3:59:26:09:89:f8:e4:77:e1:81:6f:ef:1b:1a:fb:0c:25:
         6d:41:89:00:d7:ba:3f:74:16:ae:a0:b9:a1:96:83:ed:18:fb:
         c0:39:96:07:5f:50:76:9f:61:29:bf:83:01:e9:02:b4:1c:b6:
         4a:82:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----