Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
File:                     4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json)
Hash identifier:          YBvVtvSNe8bJgL46+I4PMuHuhBz2SMBoAXTeF9IT1pk=
Subject key identifier:   1E:B2:E7:01:D9:FE:82:85:AF:67:0C:38:D8:FE:1B:E2:E5:78:1A:3E
Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
Certificate issuer:       /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Certificate serial:       01962E61E303D8294CCCADCD8F96287E8CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
Manifest number:          0DED
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: +7fpLQjlS8RXqTErsHtszH67XLkL7P4npZEyF+EaN/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e3:03:d8:29:4c:cc:ad:cd:8f:96:28:7e:8c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=1eb2e701d9fe8285af670c38d8fe1be2e5781a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:32:fd:f7:84:5b:9f:0c:06:ab:6c:75:81:
                    b0:0d:5d:bb:5b:d6:12:07:d3:66:5a:85:eb:c1:a3:
                    d2:14:17:ed:ae:94:36:bd:e0:0c:41:be:64:3b:9d:
                    eb:48:ea:ab:9f:cf:fe:46:96:7c:c1:19:bc:ce:73:
                    82:e1:56:3f:15:1f:20:dc:9c:89:43:0f:60:7c:ef:
                    07:a2:c7:d0:c9:44:f5:3f:2d:1a:a6:a1:fa:d2:c8:
                    d9:84:02:84:fd:e7:b2:ad:de:d2:99:43:8d:6c:13:
                    02:c1:48:08:84:77:2a:8f:e5:17:57:1b:63:0f:64:
                    78:6e:07:19:40:9f:38:5c:3e:0e:01:f2:5f:74:cb:
                    b3:78:e5:f0:51:53:bb:25:50:e1:6c:ae:1b:ed:ff:
                    94:36:01:71:67:06:30:43:9e:8d:ca:09:5e:81:4a:
                    82:56:61:51:8d:18:00:47:a4:b2:28:22:98:b4:e1:
                    32:e8:43:7f:ac:22:39:f3:7f:b9:4c:ef:6f:25:5d:
                    b1:37:2c:1e:43:97:fc:10:0a:ac:5f:36:7d:38:16:
                    80:7a:ee:3a:ba:fa:95:57:8e:e4:c4:ff:20:73:59:
                    a2:ff:dc:25:47:71:a2:9f:b5:ed:05:c0:f7:76:97:
                    82:59:70:e4:03:00:b7:53:d5:36:58:e3:2d:17:7b:
                    b8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B2:E7:01:D9:FE:82:85:AF:67:0C:38:D8:FE:1B:E2:E5:78:1A:3E
            X509v3 Authority Key Identifier:
                keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:50:a7:82:2a:50:2c:c8:a0:58:8f:04:95:68:e4:c5:cf:28:
         cf:37:80:27:1a:ed:14:f7:8b:4f:8c:a7:eb:2a:dd:07:1e:9c:
         3c:c8:fd:48:d9:fb:4a:3a:5a:5b:85:a0:ba:dd:2a:b5:24:43:
         e2:95:2a:48:69:e3:e1:dd:28:13:0a:e9:1a:56:c1:49:5f:39:
         38:d5:25:d7:45:b7:59:9c:53:83:bb:95:60:ec:b5:df:79:96:
         43:a3:1e:3a:9b:39:68:30:d8:ba:73:0e:e9:d5:60:d6:d5:7b:
         c8:67:dc:8b:e9:4c:29:b2:54:f7:74:98:7d:83:3d:4b:e0:fc:
         66:cf:76:f5:8e:d7:13:e7:0d:82:c8:36:9a:77:2f:ff:3b:6a:
         49:66:01:b0:ef:08:15:2b:c4:bb:0b:ce:b1:95:7e:23:45:d4:
         9f:aa:c7:57:f1:f9:72:90:fe:39:fe:49:3d:25:54:76:0b:0a:
         f7:3a:3f:45:c0:76:0d:3e:04:cb:0f:45:d4:bf:3b:28:80:ab:
         18:08:20:3a:d6:cd:b9:38:8e:79:9e:c7:d2:23:ca:d2:4d:93:
         67:eb:e1:2e:ad:b7:fc:00:91:9c:a6:17:30:84:4d:6a:d7:2a:
         f9:d6:2c:25:2b:7b:84:b0:e1:8d:12:aa:7a:ef:12:3f:87:1d:
         0f:55:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----