Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
File:                     pHFXAbAK3kiVo5p2oNgQDsleq-M.mft (raw, json)
Hash identifier:          5d9S4gqt+iesZntvOk+06wx7LZWV1t259PZ/iujhJX4=
Subject key identifier:   E3:CE:B0:2C:34:53:FA:F1:C0:81:F8:17:9A:22:BF:F4:3B:50:BD:D0
Authority key identifier: A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3
Certificate issuer:       /CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
Certificate serial:       01962E2B4DC10B1694A81C66439846550129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
Manifest number:          013B
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: pHFXAbAK3kiVo5p2oNgQDsleq-M.crl (hash: 6j4R4X5YJEDbLVZ1D8D77r2y2GEKKT1M8w/cKIZZDVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4d:c1:0b:16:94:a8:1c:66:43:98:46:55:01:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=e3ceb02c3453faf1c081f8179a22bff43b50bdd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:f6:0a:4d:f8:2d:37:21:67:be:60:07:bd:
                    fa:d2:c0:3f:0e:a7:83:58:8d:de:14:77:5f:cf:c2:
                    e7:fb:61:e6:e4:cd:eb:2d:20:8a:a8:f4:17:52:e6:
                    1d:43:f4:60:8b:59:a1:f9:7a:96:ff:df:a8:79:a9:
                    ec:42:7e:70:db:d7:7e:c9:9f:47:60:b0:ec:91:50:
                    85:ad:07:fe:23:45:91:3f:03:5f:96:7a:3a:4f:21:
                    08:17:d8:99:a8:04:e6:96:64:f0:07:f0:b0:9e:85:
                    15:b1:72:07:92:bf:3d:f9:d8:f6:de:9d:bf:bb:b4:
                    78:5e:8d:d9:2d:d1:d0:71:4f:6c:68:8d:79:48:9f:
                    42:17:e8:81:58:88:64:d2:ce:e5:4a:f6:3c:3d:4c:
                    3f:00:90:41:9b:de:e4:a2:29:51:6b:30:2f:9a:97:
                    08:e4:b3:5b:21:44:78:cd:e4:e0:b8:30:9a:e4:c0:
                    a9:40:5c:a5:e1:26:fc:ed:c4:be:51:6c:2b:6d:40:
                    89:e8:00:5a:de:27:86:8a:9e:a4:07:1d:ee:c6:22:
                    75:f1:66:8e:55:21:12:0e:cd:8a:18:b0:c2:21:e2:
                    83:80:55:76:78:cb:bf:1d:e4:4d:e7:b9:47:02:f7:
                    85:2d:9a:ae:f5:00:e6:6b:d3:43:6a:07:54:e8:a1:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CE:B0:2C:34:53:FA:F1:C0:81:F8:17:9A:22:BF:F4:3B:50:BD:D0
            X509v3 Authority Key Identifier:
                keyid:A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:0c:2f:67:0e:27:f7:f5:3b:09:a3:e8:29:67:db:b5:30:69:
         70:2d:5b:e5:47:36:88:3f:36:14:b5:bb:3d:fb:51:ac:0a:ef:
         a2:d8:af:b1:6f:f9:d4:53:4e:ad:c8:48:fc:09:eb:74:e8:c4:
         9f:9a:2d:00:00:17:0b:91:09:58:ed:20:ad:4a:8e:63:27:a6:
         db:e9:8c:da:3c:20:9d:2c:5f:b8:c1:52:ae:bb:47:93:86:f9:
         54:2d:f2:25:6b:50:59:cb:74:d7:1f:fd:0f:27:db:b9:ee:ab:
         f3:ab:09:a5:05:51:16:05:2e:3d:c8:ec:82:f9:9f:cd:4b:ca:
         07:7b:35:82:34:d7:78:34:78:36:f5:21:2a:c7:51:ec:1b:f4:
         10:91:26:77:5f:e2:79:e9:83:4a:0b:40:94:bc:4b:e0:28:32:
         9d:a3:ca:6e:7c:d0:57:2d:60:2e:e8:30:e9:b9:c7:7e:8c:bf:
         f3:a2:65:bd:da:a1:94:49:bb:53:66:e2:0b:be:b8:2a:4c:76:
         ad:9f:52:25:2e:77:3e:86:3d:63:a7:ee:ef:51:55:af:28:60:
         a9:6a:a9:45:35:fb:5a:23:bb:e5:ad:da:03:88:32:15:7e:05:
         60:11:fe:3c:8f:c2:2c:d6:1b:1a:bf:36:09:de:44:37:a9:90:
         7e:cf:ec:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----