Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c8e419-0346-433f-9309-de81f9ad779c/1/RNvjYmp2sEoSCIlwSViGPUJjLw8.mft
File:                     RNvjYmp2sEoSCIlwSViGPUJjLw8.mft (raw, json)
Hash identifier:          wp93YuldoZvs2rhLMVvL9RC+wx1rMU8Z8a1TGcLCskI=
Subject key identifier:   A5:15:E3:D9:07:AD:CE:F1:5D:35:0C:D5:73:69:66:1C:41:D5:32:AF
Authority key identifier: 44:DB:E3:62:6A:76:B0:4A:12:08:89:70:49:58:86:3D:42:63:2F:0F
Certificate issuer:       /CN=44dbe3626a76b04a120889704958863d42632f0f
Certificate serial:       01962ECFB2BEA879AF280C8D570518018150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNvjYmp2sEoSCIlwSViGPUJjLw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/c8e419-0346-433f-9309-de81f9ad779c/1/RNvjYmp2sEoSCIlwSViGPUJjLw8.mft
Manifest number:          02F9
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: RNvjYmp2sEoSCIlwSViGPUJjLw8.crl (hash: Ju9oARpXkisZUMZjxkwrtD5BttnQ526gGtxlNAq20zc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b2:be:a8:79:af:28:0c:8d:57:05:18:01:81:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44dbe3626a76b04a120889704958863d42632f0f
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=a515e3d907adcef15d350cd57369661c41d532af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:11:10:3c:54:b1:00:6e:2c:68:12:c0:9d:
                    19:6a:82:80:7c:a7:4b:f0:be:64:ed:1a:cd:10:00:
                    d0:d3:bd:81:10:d7:57:f9:ba:ff:37:ea:0a:38:d5:
                    3f:51:c6:65:e9:18:09:91:15:0d:b9:da:71:8a:b4:
                    ed:d5:91:2f:f2:bd:cd:c5:99:08:a7:53:4d:20:35:
                    ca:15:58:b7:c4:65:89:9f:8b:51:5f:81:4b:15:46:
                    40:14:ee:70:9e:bf:c9:ca:ac:01:8f:fb:c1:09:c0:
                    d6:4a:3a:f7:b3:56:8c:69:1d:3f:7d:3e:a5:3f:9e:
                    34:72:d3:3f:2a:62:aa:bc:ba:e6:b8:d1:85:f4:7e:
                    b0:e5:e0:9e:33:05:9a:87:9b:d4:77:f5:22:ce:8b:
                    39:2a:ed:bb:07:5e:9f:7e:4e:a9:79:63:16:23:06:
                    29:9f:63:b2:e4:49:f9:51:e4:91:90:c5:07:0e:7c:
                    03:a2:69:1a:1b:14:38:17:a7:ba:e9:17:79:d8:15:
                    df:f7:50:2d:91:f4:5f:96:29:ea:9c:cb:c9:59:16:
                    5d:13:ba:20:b7:0e:3d:bf:db:05:fe:56:92:79:7e:
                    ca:7f:da:73:fa:41:0f:ef:dc:df:22:07:be:dd:fb:
                    f5:73:a8:d9:55:6f:8d:ae:59:64:8d:ca:94:9e:ab:
                    a5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:15:E3:D9:07:AD:CE:F1:5D:35:0C:D5:73:69:66:1C:41:D5:32:AF
            X509v3 Authority Key Identifier:
                keyid:44:DB:E3:62:6A:76:B0:4A:12:08:89:70:49:58:86:3D:42:63:2F:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNvjYmp2sEoSCIlwSViGPUJjLw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c8e419-0346-433f-9309-de81f9ad779c/1/RNvjYmp2sEoSCIlwSViGPUJjLw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c8e419-0346-433f-9309-de81f9ad779c/1/RNvjYmp2sEoSCIlwSViGPUJjLw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:17:4f:6f:a7:39:f8:d0:0a:4f:52:8d:29:8b:07:47:2a:9d:
         5b:e4:7e:23:e8:7b:95:c2:ab:67:30:f6:09:b4:93:c9:23:f3:
         79:d8:15:15:62:58:3c:02:29:1d:85:a8:4a:c2:64:42:46:ae:
         19:a1:4e:db:7a:66:7f:63:a8:0a:7f:14:0b:cb:99:68:03:a4:
         bd:03:15:b8:c3:9d:e9:b4:6f:4e:28:dd:b4:7f:db:52:73:c9:
         eb:3c:63:95:9a:56:05:2a:3c:8f:05:6d:46:f9:88:90:ad:65:
         67:73:2a:46:ad:e7:64:4c:09:84:6e:5b:a6:61:d5:96:61:00:
         86:4b:59:81:ed:39:59:26:cf:c1:a5:00:75:31:ac:80:5c:8e:
         73:0c:ab:9e:72:e1:b8:9e:60:20:08:e4:52:7b:e1:4b:27:2e:
         22:4d:12:a9:5d:75:2b:67:28:95:7f:c2:6b:5d:c7:3e:65:93:
         23:0a:94:d7:2a:ee:bb:b0:e1:8c:70:5d:58:76:29:e5:e7:cf:
         42:87:3a:be:69:68:9f:9f:4a:1a:05:99:e1:4f:87:3d:36:80:
         7b:67:8b:e4:3e:18:f5:e2:81:bb:8f:7b:e8:59:af:cd:82:ee:
         0a:25:62:1d:da:4f:00:29:f8:1e:af:39:60:76:82:1b:f9:9e:
         2b:cb:ed:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----