Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File:                     4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier:          E5cmW2lJHxvm6JKPxK5I0Y3Z9C98yyEngMaYMHODmWU=
Subject key identifier:   F1:71:49:D1:58:FF:62:15:B6:22:ED:F0:C4:05:B1:CE:B5:11:1E:82
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer:       /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial:       01962F746FD7D503B5FEDEDB5ADF781635C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number:          0B69
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: WLh1goNAxe1gFlZllAh9kuLjEqEcrVhrHpZ+LKbsPOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6f:d7:d5:03:b5:fe:de:db:5a:df:78:16:35:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=f17149d158ff6215b622edf0c405b1ceb5111e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:ce:cb:1f:8d:b2:4b:52:52:d1:4f:ea:d2:
                    bc:2c:81:e1:61:8f:99:3d:18:40:62:a0:d8:8b:ba:
                    21:0c:ff:dc:8b:61:43:9a:ab:b6:f1:2d:b8:98:95:
                    cd:93:23:a2:45:10:c8:67:94:c6:74:ea:47:d6:b8:
                    b8:34:c1:fc:97:7b:1f:11:32:93:10:a4:84:4a:de:
                    a6:2d:bd:87:d9:dd:be:19:35:9a:d8:b1:b7:53:a8:
                    3c:1b:13:f5:a3:44:74:88:f2:a8:bb:24:99:45:46:
                    ef:62:3a:f4:22:09:2a:01:ba:21:3b:57:f1:aa:a4:
                    48:dc:05:46:de:1c:b6:5d:84:a9:d2:cd:30:eb:7c:
                    f1:6c:1d:e7:f9:db:05:54:73:d8:7a:dd:79:40:bc:
                    d0:5c:31:e2:3e:db:bc:ab:34:ab:87:ce:1f:e7:04:
                    ad:3a:5b:b2:bf:c3:16:61:a4:58:78:ab:7f:02:83:
                    df:a7:b2:dc:9b:d6:28:d5:82:21:f3:2a:2d:51:05:
                    6d:e1:8c:7e:03:1b:c2:58:fb:87:f3:f1:02:d9:9e:
                    88:c2:40:e0:d3:94:27:41:61:8d:e8:14:2d:0c:7d:
                    f5:60:7d:e5:8f:1d:08:4f:1e:20:7f:8e:ad:3f:35:
                    e4:fb:9b:bb:8a:1a:e6:e5:25:ee:34:45:a7:95:cd:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:71:49:D1:58:FF:62:15:B6:22:ED:F0:C4:05:B1:CE:B5:11:1E:82
            X509v3 Authority Key Identifier:
                keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fb:6b:c2:97:3c:f2:68:8f:fb:11:68:fe:44:14:d7:9c:f4:
         9a:8c:1e:f9:df:7d:b0:ba:ac:dd:b9:47:a1:b4:ee:ba:7f:e6:
         49:47:c8:04:bc:ef:46:ff:6b:97:97:ea:fe:ef:8e:6d:97:85:
         bc:48:d3:5f:ff:19:35:29:44:d2:76:11:1c:d1:8a:7b:f0:60:
         98:b6:18:e0:a3:59:0d:73:18:43:52:40:26:be:e8:1c:71:67:
         a0:29:13:87:f2:2b:08:8f:cc:0a:e0:03:63:dd:1a:bb:2d:73:
         19:3c:25:b0:b1:94:b9:68:d9:d5:31:22:27:b9:ad:6e:46:62:
         d5:bc:fc:f9:4c:47:7a:be:4d:ed:dd:dc:4c:43:c1:c9:bf:b1:
         48:92:b9:10:71:48:94:1a:38:3a:16:f5:ca:f1:29:e8:db:c2:
         c0:95:37:3f:25:d5:a6:f8:9c:d3:9e:12:03:e0:b1:27:65:5c:
         51:9b:91:ea:38:a6:0b:22:7e:0c:43:64:d5:3d:cb:7e:f5:eb:
         f5:7e:b5:c3:e6:58:5d:98:97:1a:61:33:09:49:59:61:8e:07:
         41:1b:76:1a:c3:03:39:2e:09:eb:d2:10:8b:38:49:45:e1:f9:
         d1:2b:5d:14:7a:a0:5c:a9:9c:05:70:50:94:dc:a7:e7:aa:0f:
         96:3d:65:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----