Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
File:                     4VW0MN7doRMQ9shzieMgj8ZSnps.mft (raw, json)
Hash identifier:          tgCHyqGqxuYnt3c1j87EqEP7nE2ZnGWZu5mQggWX+XU=
Subject key identifier:   FB:67:3D:6A:D6:DD:E6:F5:11:D0:21:F6:04:2F:73:AA:AC:99:8D:20
Authority key identifier: E1:55:B4:30:DE:DD:A1:13:10:F6:C8:73:89:E3:20:8F:C6:52:9E:9B
Certificate issuer:       /CN=e155b430dedda11310f6c87389e3208fc6529e9b
Certificate serial:       01962F06D40B6E7A4132E4163501BCE687A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VW0MN7doRMQ9shzieMgj8ZSnps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
Manifest number:          0E13
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: 4VW0MN7doRMQ9shzieMgj8ZSnps.crl (hash: 5InlVrCtl6lMThM1cejD23I3c76gE5LctN4sKZIbonc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d4:0b:6e:7a:41:32:e4:16:35:01:bc:e6:87:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e155b430dedda11310f6c87389e3208fc6529e9b
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=fb673d6ad6dde6f511d021f6042f73aaac998d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:cf:68:5a:02:bd:1f:67:41:58:45:f1:62:
                    33:6e:5d:46:cd:fd:06:a0:54:dc:d3:8b:d7:e2:57:
                    2f:2e:31:ac:0a:6e:d0:e1:7d:df:ed:8c:25:24:19:
                    ab:e4:75:bb:9b:8f:52:bd:7f:bc:af:4f:9c:fa:83:
                    a7:40:d6:b9:f7:b1:37:39:4c:8b:b6:68:6e:46:94:
                    cb:9b:91:ed:a4:b6:b4:20:69:2d:76:74:3f:21:72:
                    17:8a:64:41:08:1f:66:37:55:44:16:83:9d:2c:97:
                    ab:c0:91:ae:7a:68:32:d7:ce:6b:f7:23:18:de:f9:
                    2b:b3:9d:2c:73:bb:11:fe:6d:35:04:25:9e:76:0e:
                    bc:73:bb:a9:db:aa:7c:65:79:76:a4:fb:07:f7:c3:
                    18:be:f8:1b:c6:64:55:2b:c1:7a:5f:e6:6f:01:21:
                    1f:95:43:8e:3f:59:6d:e2:56:6c:e4:4c:62:75:77:
                    0c:a6:eb:ba:4a:2c:e6:4c:15:dd:2d:bd:03:f3:47:
                    57:05:7b:bf:07:4c:ce:82:40:57:de:97:87:45:7d:
                    14:e5:ad:d1:6e:97:9d:24:cb:9b:2f:77:66:82:35:
                    44:ab:b9:a1:36:86:82:78:18:67:f1:49:95:ff:17:
                    1a:78:2b:45:3a:b3:8e:0f:d5:a9:78:87:20:b1:76:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:67:3D:6A:D6:DD:E6:F5:11:D0:21:F6:04:2F:73:AA:AC:99:8D:20
            X509v3 Authority Key Identifier:
                keyid:E1:55:B4:30:DE:DD:A1:13:10:F6:C8:73:89:E3:20:8F:C6:52:9E:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VW0MN7doRMQ9shzieMgj8ZSnps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9e:fb:e8:02:e6:ea:b3:d3:7b:3a:3a:87:11:eb:fd:c4:f0:
         b6:32:b1:f3:25:12:8f:23:af:64:91:65:cd:5c:20:e1:bb:e6:
         4d:65:c0:33:22:50:35:97:8d:8f:7c:f8:68:e4:45:22:16:86:
         cc:f1:d0:d5:bb:cf:ad:28:16:7e:da:72:db:e9:34:9a:7f:4e:
         1d:d2:86:b0:7f:cd:6e:b0:9e:2f:b6:ed:af:10:20:20:6c:da:
         aa:ff:c8:e7:b7:d2:75:2d:27:2b:e3:02:c5:e3:de:25:a4:a3:
         ba:37:4e:84:b5:d2:c8:42:1f:ca:07:08:67:fa:53:a4:e9:68:
         a1:21:af:38:90:4d:6a:3d:5b:04:60:bb:95:c9:fe:39:12:6b:
         d7:db:79:53:53:f2:38:b1:bf:1a:a7:a9:8b:25:f7:ce:50:31:
         6b:86:ee:0a:6a:6f:6b:14:57:ff:0f:87:b6:87:94:e5:03:c9:
         1a:37:6c:58:b1:42:a5:bb:e0:a6:5d:ed:80:ef:42:6d:f8:b0:
         f0:8d:69:b1:84:69:d3:00:f7:a1:ff:4a:43:03:ce:18:8a:8a:
         a1:c4:97:14:d6:ea:50:d7:02:8f:21:5f:3f:1d:9d:51:67:ca:
         19:c7:4f:06:8f:cf:22:da:01:c4:13:80:b3:fd:94:07:57:79:
         56:0e:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----