Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
File:                     RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json)
Hash identifier:          CqhA/NkYvoo4SnhVGTMMyXXSzdhBVOBLcwh/QPMoLkA=
Subject key identifier:   1D:4A:14:DF:95:F2:78:71:B0:8A:C7:AC:DC:88:F3:2D:42:90:21:1B
Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Certificate issuer:       /CN=4541f55c16590424fb34c65e0e2eac22882470db
Certificate serial:       01962E9997C5DB41E37D6205F790B1D4A346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
Manifest number:          052A
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: N0bWo1BYGmpey9BQ/SXW1kthqcEv1yPr4jUGcg4taPY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:97:c5:db:41:e3:7d:62:05:f7:90:b1:d4:a3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=1d4a14df95f27871b08ac7acdc88f32d4290211b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b9:f6:eb:90:19:e7:09:cd:4d:6d:28:b5:24:
                    e9:5b:99:23:5d:8a:72:8c:bf:a6:b4:0d:40:45:ad:
                    a8:c7:6f:97:0c:3b:45:fb:90:90:bb:b4:05:33:17:
                    09:72:86:0c:62:d2:2d:73:94:0f:3e:3b:94:b0:4e:
                    44:c2:e6:2d:01:17:44:f8:4f:47:17:e1:e5:ed:5a:
                    18:27:70:dc:c4:91:7c:2f:15:f0:42:95:75:a1:53:
                    d9:e3:0f:0b:c3:52:93:d2:9c:96:06:87:70:ca:12:
                    7f:7b:ec:18:27:32:6f:ea:a1:fb:5d:c5:5c:24:1a:
                    d8:17:48:68:45:49:5f:b3:ce:39:b9:91:44:d9:52:
                    de:65:ec:a6:9f:13:c8:84:7f:e9:ae:41:ad:90:19:
                    30:da:74:7e:ab:af:fa:8a:51:cc:bd:39:29:1b:1f:
                    0a:1c:f2:86:2c:88:98:4b:cb:ec:85:4a:5d:bf:0d:
                    90:61:a1:d4:e7:74:ba:96:10:2b:23:85:ea:91:f8:
                    6f:a3:32:4c:9b:64:82:7f:a8:06:53:39:83:13:80:
                    2e:6d:5f:de:5c:4a:ae:ba:e0:df:a2:37:c8:1f:dd:
                    76:85:4a:98:85:57:60:b8:8b:a3:91:01:d3:46:e3:
                    8e:f0:09:d7:c0:61:41:5b:cc:ea:9d:6d:26:5c:ea:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4A:14:DF:95:F2:78:71:B0:8A:C7:AC:DC:88:F3:2D:42:90:21:1B
            X509v3 Authority Key Identifier:
                keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:82:5a:78:cb:fd:72:79:43:a7:97:21:ad:03:9a:5a:04:9b:
         e1:c2:8e:48:b5:f4:f0:0a:87:8c:7f:f3:b5:3e:b7:b2:77:98:
         7d:76:27:34:e2:5b:45:f9:ee:75:f9:71:58:82:5a:99:a3:4e:
         50:6b:92:78:c7:06:f0:a8:88:4f:cd:25:4c:31:4d:d7:34:f3:
         32:cf:6d:fc:76:77:68:eb:81:6d:28:9f:55:e3:ab:2e:14:94:
         d8:d5:da:2e:35:e7:20:44:08:91:99:d3:41:8d:38:44:1a:a4:
         8c:b2:73:d8:a2:25:f8:d3:5c:ae:09:04:a7:2d:7f:e3:17:37:
         05:b9:42:f1:88:24:cc:9b:3c:6e:99:4e:44:a1:3b:d3:60:79:
         b2:26:8e:5c:56:fa:02:cf:29:9e:08:bf:4a:9d:f7:1c:29:76:
         94:bb:b3:b2:f2:27:01:55:9a:21:23:a5:34:df:27:82:93:da:
         d6:91:14:85:82:36:c0:98:99:2c:af:7b:ef:cf:26:6b:e7:bb:
         09:a4:3c:2b:11:8b:42:80:4e:c6:63:44:27:50:06:f5:f3:05:
         79:c1:55:ec:b1:4f:de:b6:41:e4:61:ca:7d:4f:da:66:d0:6f:
         7e:a1:1b:68:5b:75:be:e0:a3:02:62:09:44:a2:40:4f:9b:c0:
         5e:29:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----