Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File:                     rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier:          5Sb5AAlxTBVifHA5WG3BK+QE00iMW5UopMk4FHVGQN4=
Subject key identifier:   A1:06:3C:93:02:88:F5:29:17:4D:99:11:3C:02:2F:1A:A5:D0:2C:77
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer:       /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial:       01962F3D7F9793F667888625058EA4C09E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number:          032A
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: ywRv98a6S5cMnHcX0PxqHvXDUD/NxhMWzcGTjpm8fE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7f:97:93:f6:67:88:86:25:05:8e:a4:c0:9e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=a1063c930288f529174d99113c022f1aa5d02c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:82:a4:5d:b0:e2:36:e4:57:99:b5:0f:5d:c5:
                    dc:d5:1d:f4:ff:b0:33:d8:97:78:bb:1e:9d:f5:a6:
                    fb:d9:c8:a0:47:c5:bb:69:fa:13:8e:98:eb:3a:43:
                    ca:0f:3f:4f:72:8e:de:6a:0e:6c:e3:00:dd:7d:ba:
                    a3:0b:23:09:c9:a4:4d:e4:bd:f5:eb:bd:d5:a7:fb:
                    20:93:d4:eb:6d:69:40:e2:76:48:bf:4d:4d:ee:3d:
                    96:84:dc:5f:37:c2:eb:e1:07:36:d7:20:c5:17:b9:
                    52:51:e6:0d:40:22:19:18:77:42:64:a4:80:04:5d:
                    38:62:40:41:96:d6:a4:42:81:6f:0d:a1:d4:42:4f:
                    f5:6a:86:57:37:9e:bf:ef:b8:dc:a1:68:1a:d4:05:
                    6f:d4:65:49:1b:46:46:5b:9d:23:b9:65:89:bc:89:
                    be:37:41:15:e1:05:8c:61:42:67:7b:64:a3:8a:fb:
                    de:77:96:ab:8b:8e:18:f8:ea:cc:47:77:43:52:9a:
                    f6:61:38:3e:73:8a:5e:28:4b:38:30:22:89:87:3a:
                    32:15:54:ab:a3:2a:77:aa:4c:91:c3:4b:ca:85:11:
                    71:fe:22:38:c2:72:2a:e0:97:ad:0d:af:01:1d:4b:
                    0f:ee:0c:e2:77:a4:3a:cb:16:3e:c0:56:30:7e:1d:
                    fd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:06:3C:93:02:88:F5:29:17:4D:99:11:3C:02:2F:1A:A5:D0:2C:77
            X509v3 Authority Key Identifier:
                keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:15:16:53:a6:eb:90:7a:90:c2:e0:25:4d:4e:97:3f:90:7e:
         89:f7:18:41:34:16:5b:04:89:3f:43:37:08:9d:2b:5a:8c:a7:
         f3:57:23:07:0a:a7:09:b6:b7:d2:f7:6d:18:14:d5:61:48:e9:
         52:42:fa:6f:3c:9e:12:a8:48:39:be:cc:8b:97:07:bc:ac:c1:
         23:dd:be:f8:4b:3b:98:be:cc:8d:4b:80:cb:a2:39:5b:a8:81:
         cf:a8:17:0c:0f:00:20:89:2c:ec:54:a7:04:f8:f6:88:9d:56:
         2b:8e:08:38:11:61:08:1f:cb:d3:75:d8:68:8d:bd:e6:95:4a:
         3d:69:43:a0:e7:34:2e:9c:6e:32:2c:e7:52:2a:c3:a2:b2:b0:
         2f:54:6d:5f:6c:b7:3b:64:7f:2a:bf:ec:51:3a:70:1f:a9:b0:
         a1:60:e4:f1:c9:5b:8e:bc:82:5d:58:16:76:d9:cb:36:75:eb:
         92:ff:3d:46:72:5d:57:7c:42:70:fb:7d:55:83:71:05:36:ad:
         50:c8:5f:f0:b0:63:e9:16:f5:b2:ee:7c:59:ae:aa:82:3f:3f:
         1f:99:bd:75:88:62:81:10:ec:70:4f:ab:3a:96:99:a9:af:39:
         22:16:c1:90:d0:9d:e4:e9:10:9f:b9:67:fb:08:f8:b3:e3:55:
         65:76:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----