Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File:                     4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier:          8cbxG6QoTGKXGTfN93azQ55r0SvSHHy+9EC7AQsv2PI=
Subject key identifier:   EE:A5:17:02:85:14:6C:A6:61:36:E8:31:F7:45:F8:30:99:31:33:DE
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer:       /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial:       01962DF3AF392D11ABFFF1A7330DACEE9E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number:          11F7
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: 0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa (hash: Fq32OdyGPsi3kvuTM0d8dbHXJU1ZVYcji5eWBETIXTQ=)
                          2: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: dwDJMwr/4tizfj49B2zCJyqA8qVuHFCSOuATN5i6/As=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:af:39:2d:11:ab:ff:f1:a7:33:0d:ac:ee:9e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=eea5170285146ca66136e831f745f830993133de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:f8:ae:0c:ed:7b:a2:c1:4b:66:fc:15:c9:
                    39:93:71:a5:fa:94:3e:38:63:4b:48:05:87:b6:c5:
                    19:ad:17:f0:f5:53:a6:ce:44:f4:13:a5:11:99:c5:
                    e1:a5:e1:81:94:e8:43:5c:b1:46:12:52:b8:be:96:
                    27:d9:c6:7a:d3:a1:f8:00:fb:4f:62:b6:3b:4b:2b:
                    4f:05:21:6d:e0:e2:9a:90:d6:30:75:9e:82:43:c4:
                    ec:15:96:7b:a1:9e:e6:fb:bd:0a:14:3a:52:98:9e:
                    b0:a2:b7:5e:41:aa:84:0f:fd:2b:49:5f:85:8c:3a:
                    4c:fa:25:89:4d:79:21:11:d4:90:cd:51:bb:9d:33:
                    77:f3:40:e8:40:50:8e:25:2d:5b:16:60:33:ba:37:
                    4b:86:d2:f8:4d:45:37:fc:79:e2:a6:69:bf:a9:4c:
                    97:80:c9:ee:71:5c:2b:98:a2:e3:d3:84:48:1e:dd:
                    e6:3f:79:9a:d1:6d:24:c2:76:c6:3a:47:ba:ef:cc:
                    75:61:53:ba:0f:7c:31:7a:1f:d6:6a:2a:5e:06:c2:
                    8b:8e:ce:74:11:c0:20:36:1f:ab:e2:a7:bd:29:84:
                    2b:74:47:f9:e3:27:89:8d:cb:e9:a2:64:24:58:7f:
                    7d:97:95:4e:e2:cd:ee:12:10:49:4a:39:02:3f:be:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A5:17:02:85:14:6C:A6:61:36:E8:31:F7:45:F8:30:99:31:33:DE
            X509v3 Authority Key Identifier:
                keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:79:41:5c:32:3d:4e:b4:fd:cf:ea:fd:6a:20:0f:39:48:24:
         66:2d:38:d7:72:b4:d6:02:1e:4d:77:bd:a8:49:28:cc:5a:b5:
         0e:83:14:3d:8a:fc:26:95:b4:73:28:67:86:f1:3a:e0:ee:e3:
         d4:ef:e0:0a:39:b7:f5:6a:e3:ca:8e:e3:5a:69:ec:05:6f:c7:
         07:cc:fc:2f:6c:0b:29:fe:51:9c:21:04:1c:3c:64:41:b6:21:
         ef:97:36:10:17:75:5f:74:0f:a1:34:51:ee:7c:91:28:4c:51:
         59:4a:6a:95:59:e2:d6:75:d4:e5:8f:71:ea:06:0e:60:1c:3b:
         f4:2b:74:fb:68:7e:39:06:a5:04:a6:3d:92:fc:5a:dc:3c:44:
         6c:ec:de:05:5f:72:81:70:f5:81:b3:87:ce:c3:c6:7e:48:27:
         65:e7:57:5e:fe:0d:f1:7e:12:9a:e1:ac:3d:6e:79:95:1f:98:
         93:3b:7f:0a:40:fc:80:30:ee:ba:7e:a0:74:80:43:30:74:51:
         d6:e2:4c:fb:db:77:14:1d:d9:02:88:b4:58:a8:a9:91:80:9f:
         3d:9f:b8:dd:37:39:db:a6:f1:ec:51:15:fd:e3:98:95:ff:4d:
         7b:73:59:d8:9d:35:10:3c:5d:ec:69:85:f9:b7:88:95:ef:e4:
         9c:21:b0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----