Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File:                     Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier:          11UD3Nm2KWKkZXWCoIiE7xs/8d3WGHefZ/gYFMAjP04=
Subject key identifier:   D2:B8:C0:C2:6D:8A:AE:35:B9:E4:53:66:3E:A9:48:2D:4C:DD:D2:41
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer:       /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial:       01962FAB5101CD11E43C5455583877A54B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number:          08D9
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: DcTD74lB7ro8YwJfcB3EN5LIXrtq/KeTvcFmEzix8T0=)
                          2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:51:01:cd:11:e4:3c:54:55:58:38:77:a5:4b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=d2b8c0c26d8aae35b9e453663ea9482d4cddd241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:96:a8:b1:2e:ec:f2:f2:81:d2:09:8c:3c:92:
                    f4:a7:3d:20:7a:d3:f0:12:e3:ba:69:e7:e5:bc:42:
                    80:94:95:f1:03:47:97:8d:e0:97:57:4c:a8:a1:e4:
                    94:5c:55:b8:2f:f6:31:1f:c9:0a:02:51:90:72:06:
                    df:42:0a:3a:30:66:d7:93:86:63:18:9f:92:28:78:
                    1f:91:ee:10:63:6a:74:d7:45:93:e1:c0:04:1b:83:
                    fc:93:ec:1b:28:cf:90:8d:6d:b4:2a:6d:e4:b3:26:
                    b6:8c:6b:3f:6b:86:8b:f0:d5:c9:d2:4f:3e:eb:f4:
                    d9:24:4e:42:39:8f:d3:ea:c3:26:a3:dc:80:cc:97:
                    6f:3c:34:9b:81:c6:10:b9:54:c7:2f:72:b0:43:f7:
                    60:61:9b:92:c3:2a:f2:ef:68:07:0a:ad:3c:b8:20:
                    c6:61:f8:74:ea:3b:7a:4b:43:24:ba:a2:d5:5d:80:
                    30:b1:b9:8d:b0:6e:c0:5e:47:6f:e1:e0:45:ae:e1:
                    8f:e0:41:be:c4:ae:73:d4:ce:3b:81:90:eb:91:d9:
                    14:85:90:b3:c9:78:02:58:e6:f1:b0:15:d3:8a:45:
                    6d:3e:64:c0:6d:82:fc:55:3d:ec:12:63:e1:12:52:
                    6f:97:a5:23:f2:80:84:06:b9:7d:3f:4d:12:32:c5:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B8:C0:C2:6D:8A:AE:35:B9:E4:53:66:3E:A9:48:2D:4C:DD:D2:41
            X509v3 Authority Key Identifier:
                keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:c0:5f:02:f1:ad:6a:df:58:dd:c0:62:1e:f1:b3:00:c6:73:
         4a:0e:4c:bb:3e:e9:58:a6:47:2a:d1:a8:84:a2:69:6f:49:ce:
         ab:f9:04:79:be:c8:c4:56:b2:7b:ed:77:fd:4d:c0:d0:eb:94:
         81:82:13:52:72:2a:38:bb:04:95:a6:c2:f9:4d:6b:54:dc:1e:
         e0:9e:f5:ea:fa:75:7d:45:d5:c6:d2:54:57:bd:ef:0f:89:36:
         7c:29:5a:0e:16:52:8a:06:af:00:d7:e4:9d:3e:c5:92:65:40:
         6a:65:fb:88:e4:41:4b:4b:a6:73:d1:16:c5:8c:9a:cc:e7:8e:
         41:e0:e6:f8:c0:f0:fb:dd:20:b5:8b:38:60:1f:7d:ef:0e:1d:
         eb:79:99:a2:16:8b:c0:8f:ec:f8:92:7d:02:db:d4:fa:38:04:
         fe:05:a1:01:f3:54:f8:5f:f6:b9:9d:0a:cd:33:cf:b5:b7:fe:
         b2:56:b7:6a:40:6a:2c:40:79:43:32:6d:39:a9:71:b8:57:39:
         f6:48:76:05:64:4a:a4:fb:96:b1:82:76:82:98:ba:25:54:91:
         35:a0:fb:99:1e:b0:03:a9:d4:96:ea:88:6b:41:a4:e1:b8:0b:
         18:d6:a8:8e:b7:04:e0:e5:61:7a:51:84:ec:23:27:f3:65:82:
         4c:58:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----