Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
File:                     REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json)
Hash identifier:          HSP08J5nNvwwmNS6Sk8nJtvO2K2pKEeeh3oCI1MA/70=
Subject key identifier:   07:17:8E:03:EC:43:14:44:55:18:E7:A5:2E:76:57:36:79:74:D9:52
Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74
Certificate issuer:       /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
Certificate serial:       01962E992E4AB9A985BF89A859E29B349587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: 2CTNXj1lPs41olYBOAgi++bn2ZTRfrMnWtRKAN7WnvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2e:4a:b9:a9:85:bf:89:a8:59:e2:9b:34:95:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=07178e03ec4314445518e7a52e7657367974d952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8c:90:80:ea:7a:44:07:80:b1:7a:43:f2:54:
                    a7:be:2a:54:92:45:dc:35:4d:e8:92:c1:6c:3f:17:
                    ec:51:6d:4f:09:33:ef:f3:2e:7b:f0:48:90:ab:24:
                    6c:10:07:f8:d7:c7:17:48:29:cc:4d:16:b7:af:c8:
                    32:53:d7:71:c7:16:1a:06:93:83:44:3b:ae:dc:e1:
                    96:99:35:48:d1:06:29:87:0a:c4:09:33:4a:c0:cc:
                    ad:13:27:73:1d:17:c9:38:f2:89:05:5c:53:78:f4:
                    4d:95:63:42:f9:56:87:c9:2e:3c:82:a3:0e:10:25:
                    fd:fc:8a:4f:9a:70:19:bf:1b:a9:2f:9e:ce:08:81:
                    a7:be:ca:1a:81:02:ba:41:2f:f4:99:3e:a8:b4:b1:
                    c8:ae:16:d6:00:09:e2:a9:2d:84:67:9f:d2:ea:b0:
                    33:1e:3d:15:05:96:8d:aa:8e:86:e7:21:15:28:cc:
                    45:23:c2:1c:2e:06:4f:2a:85:cb:13:fe:c7:94:e5:
                    3b:d6:ff:57:42:e5:a4:2f:2e:dd:0d:ae:57:e3:c0:
                    f0:d1:31:cb:0a:91:18:a0:16:02:b0:bf:9d:95:9d:
                    c5:02:19:d6:16:44:40:1e:b7:76:d5:87:c7:32:a0:
                    a8:f4:23:9a:a9:a8:50:fd:79:46:d9:74:13:0c:ea:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:17:8E:03:EC:43:14:44:55:18:E7:A5:2E:76:57:36:79:74:D9:52
            X509v3 Authority Key Identifier:
                keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:06:1c:02:f2:a4:5e:85:f9:72:6c:96:2e:39:82:6f:ff:41:
         02:ff:b7:24:21:9d:4a:db:cb:d8:bc:aa:dd:0d:a6:bd:b0:b8:
         4f:50:c2:1d:e5:9f:09:21:a6:ee:19:a7:1b:3a:35:22:ef:65:
         4c:6d:9d:92:a0:4f:a1:2b:66:ec:b7:83:a6:75:02:51:b1:5d:
         dd:61:26:48:57:e4:ec:a5:99:74:b7:75:4f:87:28:ba:99:b6:
         cd:ff:0d:14:e9:c9:d6:35:7d:c2:13:fc:d6:d8:b0:62:96:fa:
         5d:85:a6:4b:e3:b5:44:36:55:9c:a0:9d:fe:21:f1:d4:fe:7d:
         25:28:98:2a:8f:89:0b:47:1c:03:6b:17:87:1f:72:9e:8f:d9:
         87:ef:31:16:a4:88:64:7c:2b:58:66:90:d2:80:7f:22:64:df:
         61:9d:0d:f8:f6:69:34:47:d7:58:1b:eb:57:92:ab:fe:47:5d:
         64:a0:98:6e:c1:d5:1f:02:0a:5e:93:fd:db:ae:31:91:cc:82:
         47:8f:7d:5b:7c:d0:2d:48:69:0c:f1:39:f1:2c:db:17:cd:69:
         e9:06:65:08:9e:4b:03:71:92:62:71:8d:45:0b:eb:ae:ed:51:
         00:d0:36:bf:a5:a8:25:9b:a5:f8:81:42:cf:98:91:c4:e6:ae:
         dc:ca:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----