Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File:                     f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier:          qSnCvjFPpnP94FIsaqFqGk8HjDP002SHWrI1rLwF4W0=
Subject key identifier:   E6:06:A7:7B:C9:E0:F4:98:9A:2D:E9:62:3F:41:79:5A:AA:E9:6A:18
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer:       /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial:       01962F74705A6154C758A48231FBDA429633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number:          0439
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: mMKgEZkLwCzH8R54aTaUsCTXYYrm01k5hNQonknbURI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:70:5a:61:54:c7:58:a4:82:31:fb:da:42:96:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=e606a77bc9e0f4989a2de9623f41795aaae96a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:31:4f:bf:6a:45:86:2b:36:8b:16:8f:c4:
                    40:94:00:36:c6:ed:cb:ab:e5:6d:61:a4:71:23:4f:
                    52:62:99:fa:d2:9e:ce:c3:2f:d7:45:59:95:c1:f2:
                    7e:03:16:3d:4c:56:9d:e7:a5:cf:a4:2b:2f:09:44:
                    75:40:28:f2:e0:11:8e:7e:57:82:85:be:d4:38:5c:
                    d1:40:a7:6a:0a:92:ba:2f:da:c6:b5:60:ef:eb:d2:
                    df:60:4f:5e:9e:d2:bf:54:38:40:86:bb:f9:7e:c9:
                    e8:72:56:79:e3:4e:e8:14:8e:7b:5d:f2:c8:2e:b8:
                    c0:ff:8a:36:f2:c4:c0:d3:57:9c:dc:91:29:9e:74:
                    26:d0:ac:5e:c9:1a:c3:97:3b:ea:72:64:f6:9f:57:
                    bf:49:48:f7:54:99:a3:78:ed:75:40:35:7e:53:3f:
                    eb:0b:9e:c9:5b:25:4c:7a:d6:a3:3a:97:b5:9d:3e:
                    6b:05:47:76:96:49:c8:cc:57:91:47:5b:62:50:de:
                    71:60:78:43:68:81:88:ac:6c:1f:4e:90:ec:b7:02:
                    15:a9:f3:7b:ec:4a:37:02:00:c6:d5:ca:08:aa:87:
                    c0:a6:b4:41:f6:c9:ed:ed:eb:de:9c:50:61:de:a8:
                    41:33:61:ed:dc:9c:c0:61:85:4b:4b:97:1f:74:d8:
                    39:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:06:A7:7B:C9:E0:F4:98:9A:2D:E9:62:3F:41:79:5A:AA:E9:6A:18
            X509v3 Authority Key Identifier:
                keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:af:b7:34:2d:ef:93:ca:6b:6f:47:5e:68:69:88:60:25:
         04:fb:de:dd:f5:90:c7:33:68:be:43:93:87:45:06:c1:da:20:
         8b:0c:77:13:15:4f:eb:d7:be:d1:59:db:39:71:7e:a8:64:f3:
         49:da:5e:3e:c6:4f:25:3e:9a:62:dc:6f:2c:e4:d7:a0:17:c6:
         d8:3a:fb:37:73:06:05:b9:a8:52:1d:99:11:8b:b5:b9:9d:23:
         a8:c5:a6:a8:01:3e:f3:a4:41:8d:7a:f7:7d:3c:57:24:c0:29:
         7b:86:67:a1:5f:93:d9:3b:ea:4d:21:e1:be:42:85:b6:2c:aa:
         52:fd:1c:43:40:4c:a7:e5:3a:84:52:34:e2:96:da:da:7c:5d:
         56:56:a7:84:b6:85:21:18:1d:a1:0c:d1:d1:09:c6:e9:e0:6f:
         51:b9:de:b6:ae:37:70:81:1e:50:86:b8:bc:0b:d2:e0:31:4b:
         de:60:83:78:81:48:46:e5:bd:29:db:7a:40:13:26:8b:5a:13:
         0d:82:a9:42:2a:28:03:e2:bb:15:39:14:30:b9:26:90:cb:37:
         4f:e9:fe:ec:7f:ef:9f:f2:6a:a2:ab:18:cf:d8:39:7c:d3:9a:
         a6:a5:7b:41:56:0c:c8:12:e3:55:a3:ed:9c:2e:6d:ec:14:aa:
         d6:6e:20:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----