Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File:                     H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier:          Qe0b5dyDWfb+gfj4u8+lkGeUImDpQVA01wfDkqxliiE=
Subject key identifier:   41:1E:7C:66:11:66:74:71:E1:CA:A2:AD:0F:FD:76:27:C7:1D:EC:51
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer:       /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial:       01962F06A761383CE2DCB24E6DF266239BF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number:          13B9
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: hSxNRyDmya2JqbwOThQndTx31dzEcZe5nr2esviSI7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a7:61:38:3c:e2:dc:b2:4e:6d:f2:66:23:9b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=411e7c6611667471e1caa2ad0ffd7627c71dec51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:09:23:19:e5:40:e9:bc:2c:c0:c4:00:3e:
                    21:ed:64:3f:0d:b2:29:a6:36:e5:33:98:4b:70:79:
                    a6:1b:07:cc:3b:ab:8a:fd:dd:bd:04:f5:aa:82:3d:
                    47:bb:64:28:44:5c:b3:35:9e:d4:36:65:f8:96:de:
                    06:58:38:c7:7e:ea:ae:c0:76:2b:c0:5a:58:60:d0:
                    45:cc:9e:9b:bf:70:80:30:ed:2a:0d:fe:cc:83:df:
                    ed:39:05:a2:08:58:17:22:d6:87:e8:4d:a6:91:d2:
                    fd:c4:01:3d:1f:e1:eb:87:a3:55:b7:72:7b:9a:53:
                    f2:83:15:04:63:a5:2f:48:72:e2:16:0a:fe:cc:61:
                    61:3e:93:c5:06:83:c1:f3:ac:07:78:19:05:44:ef:
                    6e:2d:9f:07:67:4f:1b:d5:eb:ee:2d:e4:be:68:2b:
                    70:39:75:b3:9a:1e:2e:29:61:6b:a0:85:8f:8b:f4:
                    78:e2:a1:9b:d4:3e:11:bf:19:a1:18:a9:43:f2:c8:
                    c8:09:53:1c:1d:0d:c4:ec:d1:ab:b8:0b:02:84:04:
                    07:eb:39:a6:72:99:7b:42:a2:bc:d4:f2:08:57:90:
                    b2:7f:b9:56:9f:09:81:6d:4e:b4:63:45:f4:81:74:
                    c3:08:7c:09:1e:18:48:5a:98:fe:26:71:21:2e:61:
                    54:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1E:7C:66:11:66:74:71:E1:CA:A2:AD:0F:FD:76:27:C7:1D:EC:51
            X509v3 Authority Key Identifier:
                keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3a:72:b6:3b:db:b9:4c:88:e0:2e:7b:b5:e9:4f:c4:5d:a6:
         0a:01:93:bf:a2:15:d4:69:32:c5:f3:11:0c:3c:13:75:90:f1:
         b9:04:b3:ea:9e:53:47:12:fe:85:b6:6a:4d:8b:9e:9a:64:47:
         54:7d:8c:4e:e5:46:b1:25:f3:b3:1b:67:80:f7:53:b1:87:0b:
         76:f6:2a:ca:6b:08:30:a4:5d:49:ef:f8:bd:49:be:75:07:df:
         c9:f8:94:ac:67:64:e5:a6:f6:80:d2:30:95:39:ed:bd:e3:9d:
         41:24:f4:30:85:1d:ac:22:6f:d7:da:42:ed:0b:ef:d1:70:fc:
         55:b8:be:50:50:b4:37:1c:f1:62:e4:aa:b1:a9:97:42:0a:c7:
         15:1a:67:af:36:77:97:6e:8f:e9:31:ca:4d:37:70:cf:87:7e:
         8b:61:5b:db:9c:8f:14:38:60:b8:d7:a7:28:4d:93:16:d9:4a:
         cf:32:26:c4:3e:7c:ee:f1:07:25:f6:6f:f3:ac:0b:bb:5e:aa:
         28:e8:e7:3d:eb:e6:d5:20:a5:dc:f0:4a:52:a6:85:16:7e:ea:
         cb:51:15:95:c1:af:fb:69:e1:a1:2a:46:ec:23:a0:29:19:c0:
         a1:79:17:b7:11:c4:bd:e4:7a:a5:4b:c6:b1:8b:2a:66:71:a6:
         de:7f:c6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----