Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File:                     E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier:          Refwq9SHxehAfpAz+Gfe4K0HEY0IbItdqS+0iwqS9GE=
Subject key identifier:   B4:60:04:7E:34:85:89:99:3E:74:32:44:8E:5A:7A:C1:46:DE:BF:83
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer:       /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial:       01962FAB692393CF8CFF73392DD4984760EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number:          046C
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: ZWvQA40pvoo5W6oID0GCKDtyrdfTEWlDav3u+tq1TTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:69:23:93:cf:8c:ff:73:39:2d:d4:98:47:60:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=b460047e348589993e7432448e5a7ac146debf83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:98:44:35:36:f2:87:69:03:03:cd:15:85:98:
                    cd:44:81:f1:78:f2:b2:eb:67:bb:30:c5:5b:1f:2d:
                    6b:93:e5:6c:b7:11:b7:87:c2:86:f4:b5:e4:45:7f:
                    7d:9d:7c:d3:93:4a:5d:88:83:70:ee:b0:a6:44:3f:
                    70:83:4c:90:37:05:12:26:66:be:1c:51:fa:70:50:
                    3f:03:a9:5f:8b:a2:7e:0b:17:fc:b9:6c:bf:64:c7:
                    e1:da:62:d1:9a:ce:41:3e:a1:3e:db:fc:b1:7c:f8:
                    f2:2b:a8:02:89:9a:eb:e4:d1:a2:ff:48:3d:38:fd:
                    de:ea:11:16:51:c4:03:e4:cd:3c:93:85:84:a9:c5:
                    85:b4:b1:26:0a:95:57:08:2d:74:c1:76:04:e4:10:
                    c6:40:b3:ad:fd:45:79:cc:5a:72:4a:c8:18:2f:0c:
                    68:43:17:2d:12:10:57:11:27:55:4c:cc:f9:49:57:
                    27:b3:a0:2e:52:a9:19:14:59:4b:26:69:23:6a:f0:
                    71:d9:61:c9:f0:44:89:af:ff:0e:f3:7d:65:4f:1a:
                    82:ee:07:8d:90:86:00:56:a9:cb:1c:82:6e:ee:9c:
                    b3:d9:18:47:0a:50:04:51:63:f4:c7:d6:b9:a1:57:
                    a7:fd:93:27:ce:6f:2c:91:a5:a1:0e:58:eb:6e:96:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:60:04:7E:34:85:89:99:3E:74:32:44:8E:5A:7A:C1:46:DE:BF:83
            X509v3 Authority Key Identifier:
                keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:44:a0:a3:79:25:fb:06:3c:0d:41:40:3b:bf:a8:eb:7d:
         ed:eb:be:e4:7c:dc:9f:bd:64:e3:d6:da:fd:40:56:3e:4c:64:
         0c:05:6b:47:29:3f:1e:84:4f:44:87:bc:0c:1b:a0:f8:e9:1d:
         5e:c1:a4:4a:88:02:5c:f3:db:6d:50:ec:92:58:ac:78:10:97:
         6f:4d:fd:96:e2:1c:5b:bc:f3:06:67:61:ae:d7:db:26:43:4c:
         5b:d0:3e:d9:4a:81:5d:56:dc:4f:04:0d:8e:ed:70:a2:41:d4:
         a8:d1:c1:b6:d1:b7:4a:7b:30:9d:8f:f0:d6:31:05:7e:b0:6c:
         ef:09:d5:a3:cc:d7:18:3a:eb:78:66:1f:92:a8:0f:4b:43:57:
         b1:46:99:d6:dc:50:32:19:d5:f8:01:ee:36:3d:e5:6c:02:ff:
         01:ac:53:f6:2c:cf:65:ea:e6:80:d1:a9:53:95:51:72:9f:5d:
         f9:f1:b6:0c:e2:49:06:48:72:ad:50:c9:84:a6:c6:9b:d1:34:
         b5:9f:2f:62:4d:34:5f:e7:01:a9:64:ec:9a:ce:09:80:39:f1:
         61:e0:4d:59:62:f8:a1:2a:ea:19:53:3b:78:d6:39:1b:c8:e2:
         d7:44:3c:cf:6d:4c:a7:8c:57:f8:29:25:c6:6b:7b:1d:23:f7:
         52:4c:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----