Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
File:                     _tPwXKP9-ef5nGXMagpnJPWTGnA.mft (raw, json)
Hash identifier:          RrFok7E/p87YeWmgcRPg7FAwI5aqfOf8vHKMqZeWZVE=
Subject key identifier:   0E:16:5B:00:DB:52:37:C2:28:5C:9D:BF:DB:78:19:8C:F9:DC:81:AE
Authority key identifier: FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
Certificate issuer:       /CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Certificate serial:       01962E997242CA73A9DA61FF478DB156DBF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: _tPwXKP9-ef5nGXMagpnJPWTGnA.crl (hash: FS7eE6d32V6wLO1KcOBRXUVAkfYI18plYCNRXLY63tg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:72:42:ca:73:a9:da:61:ff:47:8d:b1:56:db:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=0e165b00db5237c2285c9dbfdb78198cf9dc81ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:4a:c7:0e:d5:37:d9:b9:a4:a6:f4:c3:c2:
                    18:59:2e:44:60:ab:79:1e:f5:e0:c2:75:d2:be:05:
                    26:b1:a8:26:6b:0e:b3:7c:7b:db:f6:e3:82:90:b5:
                    5c:87:b0:d2:9a:10:d8:f2:4f:ce:63:97:96:d9:48:
                    8d:43:9e:23:5a:98:58:a8:b9:d9:cf:ac:a2:13:e6:
                    9c:5a:90:2d:40:a2:36:dd:1f:b9:93:f4:45:62:a5:
                    2c:66:0e:70:09:d2:fe:c3:fe:3b:4c:7c:e9:24:fb:
                    3a:85:87:82:c9:4f:cb:96:ab:25:55:9b:50:4e:ff:
                    1e:37:15:d0:6a:78:e8:d1:52:58:a8:94:e8:a6:0e:
                    bc:1d:30:9d:78:4b:c7:8c:25:1f:db:73:85:b6:98:
                    fb:91:7b:40:9e:d1:0f:68:e2:4f:fe:1f:83:97:ee:
                    71:c8:9f:5f:38:0c:76:56:96:90:ee:1a:4c:dc:cc:
                    3c:73:f3:bb:01:52:71:cb:9f:fd:fe:23:91:84:8e:
                    31:f9:8e:98:08:b5:c2:de:d3:c2:a8:61:c8:ed:49:
                    43:df:d6:92:70:12:21:d4:38:f7:48:6f:a1:b9:ed:
                    82:0c:2b:2b:1b:a0:1f:88:e0:7b:30:31:3c:0b:cb:
                    dc:e7:1e:36:5d:e2:1c:40:c6:3b:0f:8f:14:f5:a5:
                    43:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:16:5B:00:DB:52:37:C2:28:5C:9D:BF:DB:78:19:8C:F9:DC:81:AE
            X509v3 Authority Key Identifier:
                keyid:FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:27:80:a2:c8:a7:35:f2:72:8e:5e:ee:f5:a3:d6:d2:6f:
         d5:8a:40:36:66:51:56:e9:71:03:58:b8:2f:e0:ee:75:a5:1e:
         2b:95:f2:ed:b5:13:cb:c4:29:f7:e2:92:07:bc:64:3c:b9:11:
         17:bd:63:e9:43:15:02:8b:ef:62:78:9e:b5:eb:f2:4e:f1:de:
         f2:bc:27:0d:90:8a:23:51:08:e3:c8:02:fb:4b:85:ef:bf:88:
         33:87:e0:e6:50:4a:36:10:18:d3:1c:cd:e3:d2:0f:e5:1a:81:
         6f:1a:fa:5c:37:c2:61:a3:e5:94:6b:f5:d6:c2:1d:32:06:fb:
         a2:91:a6:13:9d:34:8c:b5:e4:ee:e0:39:38:41:b2:4a:4b:9a:
         8d:de:94:91:d3:be:7d:97:95:75:a4:91:d7:20:16:88:12:5d:
         89:d4:39:53:de:0c:d4:ec:0a:72:69:1c:89:b1:79:44:bc:17:
         38:ac:aa:4c:62:52:38:65:8e:cf:6c:0d:35:da:e7:af:56:ac:
         d3:53:83:b3:77:61:c8:0b:5e:17:11:cb:e1:4f:54:96:29:3c:
         63:b8:0f:a4:49:c5:07:c7:77:eb:53:c5:6b:7a:d4:5e:02:c9:
         bf:49:92:fe:f3:79:eb:2c:a2:63:72:af:17:00:58:28:c5:bb:
         e0:31:4c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----