Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File:                     4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier:          1azc9BXSZraxHXweZxvrufdDa8QdJRmJBLE+ZFPIoLs=
Subject key identifier:   92:54:D1:4F:0C:DB:AC:EF:5F:22:21:2E:A2:C3:96:34:54:D5:0D:00
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer:       /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial:       01962E98D6D2E8991611E75772CF12F44295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number:          09FB
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: OY4F8Qemu76VX29d1efksCrln41bl6BsyZdP8g7OEMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d6:d2:e8:99:16:11:e7:57:72:cf:12:f4:42:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e229b37eb630686b1328338471b52da95d204911
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=9254d14f0cdbacef5f22212ea2c3963454d50d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:56:fb:2b:9e:d2:c1:5c:a6:eb:68:66:16:
                    9f:45:9a:17:18:fe:88:04:41:5e:f9:9e:df:e8:6b:
                    47:ff:a6:cb:e7:6b:11:61:b0:53:04:54:a9:c5:05:
                    f1:2b:fe:ca:3a:bd:44:7b:4d:61:a2:87:bb:c1:e1:
                    84:e2:88:3f:db:da:f4:e5:76:b5:03:0d:e1:ae:4c:
                    f0:a8:5b:e6:d9:d3:f0:58:d1:c6:9e:e6:3c:f6:b0:
                    70:4b:f5:0b:09:2f:b8:44:17:21:f1:85:03:66:2f:
                    4d:af:de:10:54:ef:50:fc:d9:52:5e:9b:dc:52:3b:
                    a7:4e:4c:a6:ca:eb:e3:79:03:6a:d7:79:79:1d:03:
                    78:22:ec:a9:d8:f3:4a:a5:0f:75:6c:4d:5a:1e:2c:
                    c2:37:fb:04:30:10:19:41:33:19:30:64:f8:6e:a0:
                    7c:06:b0:35:a4:57:a9:d5:9c:66:80:ab:26:6f:f4:
                    98:bd:fe:5b:7c:f6:5c:95:6c:14:a1:be:26:8e:2b:
                    32:c3:0e:7b:bf:13:b0:5d:5d:5d:fa:ae:e0:3a:5c:
                    4e:04:b2:fe:97:35:34:92:84:9b:cf:18:01:24:65:
                    8d:ba:df:3a:0e:86:c4:64:b4:7c:c0:fa:30:d8:40:
                    17:2a:75:c6:2f:19:85:bf:25:c3:c4:74:fa:9c:31:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:54:D1:4F:0C:DB:AC:EF:5F:22:21:2E:A2:C3:96:34:54:D5:0D:00
            X509v3 Authority Key Identifier:
                keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:03:10:41:5f:8e:15:fe:30:12:6f:d2:2d:df:11:cb:e4:79:
         8d:35:ad:4a:a8:f1:7a:e4:d0:a5:7e:65:cb:53:82:b0:a5:0b:
         e2:9a:93:2a:ad:37:02:9e:64:dc:fe:22:b1:e9:f5:3c:36:51:
         e6:33:64:11:03:4c:cc:ea:38:cb:56:f7:2c:b1:ec:4e:5f:2b:
         8f:2b:c2:26:36:11:b5:7c:01:04:27:9c:2a:bb:c3:47:1e:e5:
         16:d8:89:86:44:18:86:5e:55:55:d6:ad:f2:0e:09:a3:43:25:
         c0:0b:7f:eb:62:5c:d3:ae:54:9a:bf:aa:fb:85:bf:c3:bf:6d:
         1d:b1:75:fc:7f:1f:c2:36:ec:16:a5:11:24:b2:08:50:f4:60:
         6c:d3:12:f4:61:56:b2:10:64:64:96:15:20:7d:44:01:27:64:
         31:61:c5:56:a0:9e:d8:88:cc:ac:d5:14:b7:39:f7:d9:3d:da:
         c3:83:0f:7b:a1:47:8b:57:d0:d2:76:6d:20:14:35:6b:af:c8:
         ce:50:7a:26:64:97:5c:2c:7e:3f:ea:d7:27:b3:4f:ec:50:a6:
         c5:bc:10:7a:fe:1b:79:00:53:3d:65:f9:37:f4:fa:9b:e9:05:
         d6:03:03:37:a8:92:b3:f3:07:b4:1c:30:44:99:4f:98:1e:8c:
         3b:dc:45:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----