Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File:                     XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier:          LWv/ggGeYImlGh1eDJVFCXAY8KIY8c4M9D/d3LZLZBA=
Subject key identifier:   41:83:93:F2:5B:0D:72:AB:7E:46:50:42:76:10:60:ED:6F:64:7D:AE
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer:       /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial:       01962F06E3E7D8718D51CB7F8DDB431CE2CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number:          0FAF
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: huYVHFBaalxbtKoFNx9f2hVK7pilvLgaAELuCEDrkJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e3:e7:d8:71:8d:51:cb:7f:8d:db:43:1c:e2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=418393f25b0d72ab7e465042761060ed6f647dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:6a:81:02:19:91:b7:b9:20:37:a1:0b:2a:
                    b6:8f:7e:a3:fe:e7:93:fc:e3:31:e1:5d:ac:07:04:
                    26:54:27:67:1f:a7:0f:7a:fb:c4:2d:71:55:bd:e3:
                    f9:4d:59:71:08:fe:a7:2f:01:cc:b4:ec:d7:f2:21:
                    2b:11:98:5b:79:12:51:e4:b4:b1:c2:b5:31:1c:c4:
                    95:5e:e0:74:08:e2:08:c4:a9:97:e8:90:cf:a3:5a:
                    28:79:c2:ae:2a:f6:b7:f7:31:86:1d:bc:e6:e5:4a:
                    2e:80:2d:53:41:5d:cb:98:e5:29:0a:55:88:8a:90:
                    6a:9b:e8:28:4b:25:40:80:1e:f9:da:c7:56:6b:b6:
                    65:e4:41:0d:d8:79:5f:4b:c5:a9:03:ed:33:30:d1:
                    78:ac:61:7e:8f:1c:9f:4b:3a:05:32:2f:34:51:86:
                    c5:dd:42:ec:bd:00:d9:f8:d9:6a:25:86:5b:77:18:
                    5e:d2:e5:98:67:5d:b5:dc:62:e8:61:62:42:3f:ba:
                    5e:1d:84:9a:1d:ba:73:68:c9:7f:b2:60:4a:79:1c:
                    55:10:4e:7a:0b:15:fd:4c:1d:67:48:01:7e:5d:20:
                    46:df:3a:13:bc:09:31:40:3e:28:ea:b5:03:90:cd:
                    b9:30:9d:9b:c3:81:cd:71:7f:37:b3:6b:71:5a:fc:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:83:93:F2:5B:0D:72:AB:7E:46:50:42:76:10:60:ED:6F:64:7D:AE
            X509v3 Authority Key Identifier:
                keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:62:85:7b:71:3a:90:99:b1:ce:28:4f:e0:48:75:a2:24:8d:
         eb:b9:6b:c9:a0:64:9a:ab:19:03:8f:38:d6:bb:60:ee:3a:51:
         29:7b:18:9b:1f:4b:74:f0:a9:e1:0c:f8:9f:76:6c:db:40:83:
         4d:c2:e5:8f:ce:e3:9e:b2:d0:1d:f6:d4:4f:0f:9a:bb:7d:f8:
         a8:75:a2:49:12:b9:45:5a:f0:af:34:fc:c3:9a:27:ea:93:df:
         cc:37:9f:60:f8:00:29:f7:4f:19:88:a2:83:7b:e1:af:14:95:
         41:56:0a:91:b3:7a:e9:00:11:65:0f:5c:73:75:e8:5c:7c:b5:
         f9:7d:85:72:91:78:d8:d4:bd:d5:62:fc:0a:b5:91:d4:4e:fb:
         3b:ec:a9:a5:fb:4b:5d:81:ab:96:64:e4:22:9a:6f:62:4d:10:
         0c:96:cf:91:b5:0b:ba:2e:de:2a:18:a6:e8:c6:74:c1:e9:3e:
         4c:68:4c:e0:30:4b:c0:9a:90:cc:ef:f7:c4:e0:56:a5:39:64:
         72:96:67:01:94:a3:d6:e3:03:29:4f:35:81:c5:92:2f:66:13:
         86:b5:f5:eb:bb:c7:81:98:66:70:a9:ab:ec:19:c2:69:bb:ab:
         99:96:f7:9a:80:b8:12:b3:fe:d6:2f:da:96:16:fd:55:91:c8:
         0e:5a:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----