Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
File:                     4HDNq3OhLa82gGsOFgLI2vuQk7s.mft (raw, json)
Hash identifier:          JlATnOm1s0qY4SUHwq6x2EDjiDLmoy88xxxP408u0uQ=
Subject key identifier:   1A:62:C3:B0:0E:A5:44:5E:AD:F2:BF:02:B3:3F:FA:45:AA:A3:09:57
Authority key identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
Certificate issuer:       /CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Certificate serial:       01962E9961FA55A9B776136A19855B88CDDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
Manifest number:          0A34
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: 4HDNq3OhLa82gGsOFgLI2vuQk7s.crl (hash: AdbZcIG6qvzVczeUBZ3W5s56z92IdDMkU4O2X0Npujo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:61:fa:55:a9:b7:76:13:6a:19:85:5b:88:cd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=1a62c3b00ea5445eadf2bf02b33ffa45aaa30957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:5a:c8:8b:7d:44:79:a9:e0:ce:e9:89:9b:
                    15:21:88:a6:99:79:69:8b:56:22:a7:f5:91:38:6e:
                    3c:0a:2d:4c:40:cb:c5:e7:b0:2a:15:da:d4:81:41:
                    ba:b3:8c:ef:bd:da:62:2c:50:a8:9f:32:df:de:f9:
                    5e:cb:50:a7:cb:be:21:4d:9a:3a:c8:18:ed:8d:ff:
                    76:c9:d3:c5:29:19:30:fb:7b:76:7a:f1:06:4e:75:
                    ff:d6:7e:61:3d:59:c3:7c:26:fd:bf:42:e4:f4:05:
                    ef:c6:8f:f6:18:58:ff:be:19:4f:f0:88:e0:47:20:
                    f8:a8:dd:97:f3:fc:7e:c3:f0:4c:c2:72:00:4c:56:
                    bf:d3:b9:61:a6:a3:0c:b9:82:f6:13:5a:07:4c:66:
                    e6:2c:52:22:b1:a8:a4:38:cb:d5:52:3c:3c:62:29:
                    b4:21:af:ed:93:ef:dd:db:11:d4:92:e5:cc:9d:a9:
                    b3:0d:61:76:76:23:08:bc:0f:11:ac:43:65:60:ca:
                    3c:0b:07:97:e4:c5:95:89:cd:e4:1f:a8:a4:59:a9:
                    c1:36:bf:57:37:be:45:db:40:83:36:fa:28:20:0c:
                    2b:e5:ec:cd:03:0a:92:ac:c5:a7:b9:23:fb:bf:9a:
                    52:51:3b:bd:4e:b5:ea:d7:31:b4:0b:39:ac:60:d4:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:62:C3:B0:0E:A5:44:5E:AD:F2:BF:02:B3:3F:FA:45:AA:A3:09:57
            X509v3 Authority Key Identifier:
                keyid:E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:52:e6:df:5b:55:9e:29:33:ab:8d:5b:9b:92:2c:61:a8:
         79:38:06:49:eb:4b:4c:b7:8a:a7:61:f1:3b:cf:5d:67:24:4e:
         37:5f:c7:50:26:a2:c4:ba:83:2a:81:e3:f3:13:df:e3:ed:58:
         e9:db:d6:77:f9:5c:52:b3:3b:6f:c6:4e:4c:6a:20:97:8a:cd:
         f8:12:0e:f0:6c:aa:65:ec:50:0c:9e:72:97:50:30:e4:86:11:
         e2:86:38:cb:10:d5:0d:3a:23:14:e3:c8:6c:ed:57:5d:ce:90:
         23:c2:dc:3b:4b:35:a2:47:6d:17:3c:38:fe:11:d4:3b:b9:7b:
         30:27:e7:31:e3:72:5b:05:c0:cb:2b:ad:8a:f6:fd:7c:6b:39:
         a9:2d:8a:f9:fc:1d:86:fa:f5:f0:13:e8:53:56:5b:b0:b1:63:
         fd:fd:1c:63:7d:88:97:7c:c6:b6:40:de:8a:8b:3b:c7:cb:d2:
         3b:11:fd:a4:90:31:c4:b3:eb:2e:a4:f5:08:58:66:6d:c4:55:
         55:ff:92:7f:ea:d9:1e:01:af:8d:9f:e6:57:fa:2a:7b:30:12:
         1e:ab:f8:d8:48:be:6d:66:31:98:9a:76:ff:eb:06:7f:15:57:
         1c:95:22:62:3f:99:2d:11:54:1d:04:fb:96:11:17:ba:74:01:
         50:f7:e2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----