Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File:                     4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier:          hv1YUqldhR8L3GQohn5sJh3TSDlJU9IHQIYfvYhDzxk=
Subject key identifier:   92:C9:F8:1C:15:03:D4:57:36:DB:0C:B4:3B:A0:30:49:AA:65:5F:34
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer:       /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial:       01962E98862D03E1B58B16D379EF28E7F4B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: m7xLOR+4m7DA1JiD8Lt+ivX1X0HAKj3WkZETwPE0YtQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:86:2d:03:e1:b5:8b:16:d3:79:ef:28:e7:f4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=92c9f81c1503d45736db0cb43ba03049aa655f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a3:a4:52:6e:9f:7a:b3:37:e5:92:45:ab:81:
                    1b:b0:83:90:94:0d:68:6f:06:16:e0:be:f9:e7:7b:
                    2d:a5:72:5d:3a:e7:fe:97:c4:89:eb:d4:32:f2:2b:
                    f4:2b:81:ee:87:60:0b:aa:e8:57:77:66:70:cb:e3:
                    c6:31:65:13:50:5a:5a:c8:67:df:b9:e4:82:c7:d1:
                    9a:59:c0:e4:25:c4:b4:32:40:dd:c0:17:4b:e4:72:
                    c1:53:9b:f2:f2:93:50:c1:7e:3a:36:e7:94:78:73:
                    07:b4:10:1b:9d:58:b0:72:16:80:48:76:fc:5c:46:
                    d0:87:5d:1f:f5:f0:e6:bf:7a:a1:e6:c7:9f:8e:d6:
                    3d:81:bf:dc:ba:33:76:e7:af:fc:49:c6:2d:18:92:
                    15:cc:fd:e5:66:b6:62:bb:da:4c:0d:ef:0a:d3:28:
                    5c:23:6e:b2:01:f4:a7:b5:ed:4e:73:10:15:34:2c:
                    36:00:3a:88:c1:eb:43:df:bf:fb:7f:97:d7:02:70:
                    f2:11:30:7e:d1:aa:73:51:c1:28:b4:41:14:fa:b2:
                    48:99:20:a4:b3:a1:09:db:a8:68:19:27:07:34:7e:
                    01:f0:20:ab:79:2f:fd:f6:08:4e:9c:30:3d:72:c8:
                    e6:ff:e7:5f:00:38:46:83:7c:da:13:16:b3:b0:dc:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C9:F8:1C:15:03:D4:57:36:DB:0C:B4:3B:A0:30:49:AA:65:5F:34
            X509v3 Authority Key Identifier:
                keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5f:fa:3c:67:d7:99:2b:d1:36:7c:0d:de:ad:ea:f2:d5:55:
         8b:49:f1:96:40:96:65:49:b4:13:ea:3c:7c:12:82:fb:a0:72:
         c9:0c:54:ab:ac:f9:43:0d:8a:5a:94:b6:5e:3f:24:77:17:3a:
         6d:c9:7f:5b:0c:f1:8b:35:b2:dd:55:bd:a2:34:8e:40:d3:0d:
         21:98:13:31:1b:99:0e:0b:60:a1:22:a4:bb:9b:ab:8b:e1:30:
         29:11:35:d8:d3:98:cf:8d:88:dc:6f:e5:fa:d7:12:62:81:93:
         51:17:8f:ea:81:7f:cf:4f:46:56:57:64:82:a9:0d:e7:76:a0:
         00:8e:a9:4f:a9:3b:86:13:6b:03:01:06:ab:c7:e7:1e:8e:3f:
         8c:e8:d3:01:85:10:1c:f5:01:5e:93:9d:53:da:35:33:44:17:
         de:08:c8:72:3e:75:37:a5:f1:ba:15:b9:65:4a:8b:b8:26:f3:
         d7:12:37:73:b4:d8:22:fb:d8:6a:b0:27:04:81:8a:b6:5c:71:
         76:e5:82:1a:d7:21:5d:29:4a:e3:9d:de:bb:d5:31:0b:9d:47:
         51:b5:33:e7:90:93:49:59:a8:17:4d:0e:93:6f:76:ba:69:e8:
         ee:26:6f:f4:8c:4c:90:39:67:59:38:d2:37:8a:96:21:81:0f:
         2c:ad:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----