Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
File:                     5LDTQqkyMznAd8XGreEJO1pADyQ.mft (raw, json)
Hash identifier:          K3Bitdv7h/mVt3KAJtMdFYwgy8UPSpD/+3fEaOfkTPg=
Subject key identifier:   9C:10:EF:AF:1A:87:4D:6F:93:17:EB:D6:1B:7F:CE:40:D0:B7:82:71
Authority key identifier: E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24
Certificate issuer:       /CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
Certificate serial:       01962E2B2660F676190866F96B45A18B13AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft
Manifest number:          014E
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: 5LDTQqkyMznAd8XGreEJO1pADyQ.crl (hash: VTbyDn4f6uV+s5Lo96CuW44A78Ii4AdxuweApTDLu50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:26:60:f6:76:19:08:66:f9:6b:45:a1:8b:13:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b0d342a9323339c077c5c6ade1093b5a400f24
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=9c10efaf1a874d6f9317ebd61b7fce40d0b78271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:fb:6e:29:78:8d:be:a8:35:bd:57:03:bb:
                    a8:48:e6:dc:e0:ee:dd:0c:73:23:28:f8:31:b0:11:
                    29:18:f4:79:c6:8b:00:2b:49:59:bb:54:a5:fa:85:
                    02:b6:37:eb:a2:fc:f2:f0:bb:90:63:80:37:fb:fe:
                    00:17:3c:c0:ee:07:e8:29:fb:ef:f5:8d:29:af:dd:
                    3c:51:91:6f:f3:fe:9d:e5:40:34:04:1c:79:aa:c8:
                    c9:19:c3:53:c6:29:bb:9e:a3:ee:23:fc:36:49:0c:
                    cb:70:57:f0:2c:e4:5f:54:a2:9c:a9:d3:ec:0b:81:
                    99:79:b0:e7:38:75:4e:c5:c3:1c:31:67:83:22:21:
                    98:d5:06:7e:d2:0c:98:97:75:8d:a5:11:b4:74:57:
                    23:1a:01:55:d6:1f:eb:04:bd:72:16:26:80:6e:1b:
                    c9:cb:34:0e:19:9e:5a:aa:54:f3:18:fc:fb:86:23:
                    5a:f1:5f:c6:12:bc:63:1a:7f:e1:6b:54:d1:83:cc:
                    ae:ab:64:dc:bc:8f:92:d3:be:fb:b2:31:0f:da:1d:
                    84:57:6c:95:48:e7:33:84:f4:ad:5c:8a:56:7b:44:
                    78:db:b7:0c:9d:5d:92:cc:3e:a1:16:0e:6c:ea:06:
                    e8:09:49:17:7c:b4:3a:56:73:02:77:3a:9c:54:9d:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:10:EF:AF:1A:87:4D:6F:93:17:EB:D6:1B:7F:CE:40:D0:B7:82:71
            X509v3 Authority Key Identifier:
                keyid:E4:B0:D3:42:A9:32:33:39:C0:77:C5:C6:AD:E1:09:3B:5A:40:0F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTQqkyMznAd8XGreEJO1pADyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dcb110-62d6-44df-bde6-9a90a7ca508d/1/5LDTQqkyMznAd8XGreEJO1pADyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e2:63:e2:34:4e:a9:1d:cc:99:98:ce:ac:24:9d:21:24:d7:
         36:f8:f9:49:15:2b:0c:9e:a2:6c:3b:b9:d5:ca:a6:2f:79:6c:
         3b:ca:8f:ad:fe:16:a5:50:38:e0:ff:e8:60:f8:71:f4:88:65:
         9d:90:6d:b0:c3:63:a5:3a:fb:76:ff:f1:05:1b:4b:c0:75:ad:
         2a:c2:d5:a7:ae:22:2d:dd:0a:8e:c2:d2:0c:54:6e:ea:3e:4d:
         30:30:68:fa:74:7b:3f:d6:5d:9e:71:80:94:5b:1c:4c:6f:00:
         14:d1:54:4c:4e:5c:7c:8f:55:40:ac:16:4c:55:37:35:68:53:
         50:93:ce:a9:4c:16:ea:72:d8:34:98:4c:a5:c0:f5:01:a3:a3:
         9b:7f:fd:a4:39:f1:3e:a2:0c:c7:f0:61:63:33:81:d8:d9:f5:
         da:7e:34:95:ab:80:da:0e:b7:af:65:fb:68:b5:89:70:fa:37:
         4e:f7:85:e4:ad:7b:d8:f3:f8:81:53:17:d9:38:1c:8e:84:8f:
         02:c9:a9:1c:a4:c0:0c:33:f1:13:2d:bc:5f:0f:69:38:4d:42:
         d7:6e:a5:88:0a:c7:43:be:ed:be:05:db:d9:b9:6e:10:7b:1d:
         08:d8:11:0c:54:f7:5c:17:46:1b:d5:53:2b:e9:43:5a:94:de:
         7a:8e:32:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----