Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File:                     2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier:          D/22PsFD8EkbdXQHA4iA7S/NMKUNTv18SaMrqEMDiRg=
Subject key identifier:   78:30:DD:B2:60:EA:BA:AA:8A:D2:6F:64:77:87:2D:D4:98:03:83:54
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer:       /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial:       01962E99439679529D9FA405EB85F9B902BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: qqYRu4JRcis3kNoGY0R0LhXEEsJrJiB90fsxuKDGRi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:43:96:79:52:9d:9f:a4:05:eb:85:f9:b9:02:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=7830ddb260eabaaa8ad26f6477872dd498038354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:4b:16:61:bf:91:bb:32:bc:21:54:6d:38:
                    0b:bc:3b:2a:e5:b7:96:9c:c9:eb:79:49:f3:56:bf:
                    ff:80:01:86:b4:f5:1c:56:b4:3e:df:2a:3b:db:fa:
                    16:cb:18:09:6c:18:81:a6:ff:66:24:12:58:e2:c8:
                    97:f5:9b:ce:99:70:de:b2:09:ab:d9:3a:3d:96:60:
                    17:9b:93:c3:ae:a9:e5:44:c3:01:b9:56:c0:6b:fb:
                    a9:ca:f3:53:d3:cc:69:cf:7f:28:b8:c0:43:2a:7d:
                    d8:e1:c6:0d:90:7e:f9:4b:75:88:ca:66:4e:8a:ca:
                    84:db:c0:da:3b:3d:a0:82:c1:81:21:e3:1f:31:f4:
                    ce:79:62:d1:00:90:dd:95:f7:2e:c0:0e:b4:9d:3b:
                    f3:81:ba:73:d4:63:1a:c3:f6:9d:e1:5a:ec:eb:19:
                    b7:1c:f4:1c:de:bb:b9:2d:c6:62:29:8b:87:0c:bc:
                    58:48:03:7a:5c:08:1f:47:96:b9:a3:ab:ac:2e:cd:
                    4c:69:7e:5a:43:6e:c6:98:a1:9d:93:34:32:01:23:
                    d0:68:08:48:80:68:57:27:a4:1e:3c:bd:92:4b:21:
                    1a:13:7b:fc:3a:2f:da:e9:f1:2f:4c:e7:cb:68:77:
                    37:3b:78:73:c9:bc:90:7a:9c:82:05:c3:64:bd:48:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:30:DD:B2:60:EA:BA:AA:8A:D2:6F:64:77:87:2D:D4:98:03:83:54
            X509v3 Authority Key Identifier:
                keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b0:b2:77:b3:c4:5a:28:d2:f2:29:16:26:80:12:5e:ba:35:
         5d:a1:e7:5e:31:a1:08:19:e2:d4:fb:ff:a2:3e:7e:5f:11:2a:
         ca:9b:68:c0:83:19:ae:ba:ea:aa:f2:4d:c9:8c:9c:46:a9:5c:
         e2:2d:89:88:68:59:64:52:36:8b:2d:06:86:c2:64:25:a8:4e:
         38:96:45:d2:67:c3:00:05:96:60:55:dc:e3:29:40:da:89:35:
         e3:73:ea:ef:ef:78:52:8f:46:8d:3c:3f:9c:04:09:fa:c4:a4:
         7c:1e:7b:90:a3:a1:44:1b:42:1d:e8:c1:0e:8a:46:a7:c0:d1:
         d0:c4:ed:1d:a6:d7:91:2b:d7:30:bc:9c:b6:23:f5:d1:78:0c:
         04:38:ab:c7:22:93:36:fa:2a:79:c7:20:8f:4c:f4:45:e7:f6:
         dc:c2:ba:c3:41:cf:92:a2:84:00:f6:ff:b2:0d:35:71:f9:69:
         72:d2:4a:6a:22:6b:45:8c:1f:09:d2:a4:88:45:a7:cc:d9:5c:
         45:4a:f0:cb:c8:5f:b9:6c:7f:99:33:06:b0:61:1e:4a:94:03:
         28:e6:ab:2d:ce:13:20:08:45:2e:4e:1b:97:1e:ef:7c:15:eb:
         dc:dc:3c:f7:a0:af:24:32:a3:85:d6:4c:48:9a:bd:15:73:b8:
         9c:70:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----