Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
File:                     kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json)
Hash identifier:          JdOMuA3kZ/kLDGzSnk+kLIbHhc04S5Bx5eCu7ADEt1A=
Subject key identifier:   F7:0C:71:F1:5B:04:77:E2:B6:C4:92:65:5E:00:CC:EA:07:67:1D:E1
Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
Certificate issuer:       /CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Certificate serial:       01962F747BC136DC08B6AEB81EBB97BAAD60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: 6pg4ElpKUsatiFiNwhsOGwCHEccPwGO5ZIu5kdx5Kd4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7b:c1:36:dc:08:b6:ae:b8:1e:bb:97:ba:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=f70c71f15b0477e2b6c492655e00ccea07671de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:4a:73:8d:d0:d7:59:92:b6:c7:86:27:47:
                    d8:4a:be:92:b1:67:aa:1b:de:a0:dd:ce:64:9e:29:
                    b8:83:b6:83:b4:0c:72:e5:8c:93:bb:5c:e3:0d:f5:
                    cd:71:51:7c:26:61:44:16:b4:ff:2b:79:cd:d5:00:
                    d1:3b:be:a8:74:a1:43:2e:b6:17:9b:71:5d:2f:1e:
                    56:b5:36:6a:e0:03:82:2c:e4:46:4c:7f:63:fe:98:
                    f4:8c:6f:ea:83:13:11:d8:06:76:38:ef:bf:92:57:
                    89:02:66:bf:40:b3:f7:21:62:77:d5:4b:96:f4:97:
                    89:a2:fb:65:36:b7:a3:e0:91:2a:a9:ed:7e:48:69:
                    9f:24:c0:f2:b2:7f:ef:67:3c:85:c8:72:2a:f0:d5:
                    31:32:fe:c5:e5:fa:fd:c6:6a:3c:8c:61:48:dc:bc:
                    66:fd:8b:72:14:1d:1a:c6:6b:be:4a:58:72:c1:81:
                    cf:ee:15:bd:6e:25:a2:9f:d5:25:d4:4f:1d:3a:c8:
                    68:bb:5a:e2:9e:40:8f:51:54:2e:80:44:6a:40:4e:
                    5f:89:d7:e7:41:33:1b:90:69:b0:49:25:9f:46:5a:
                    24:ad:64:e2:e0:5c:dc:77:0a:7d:4d:b3:ae:cf:b1:
                    ee:f2:d9:8e:08:20:61:92:59:2b:c8:0d:5a:ae:7e:
                    70:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0C:71:F1:5B:04:77:E2:B6:C4:92:65:5E:00:CC:EA:07:67:1D:E1
            X509v3 Authority Key Identifier:
                keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ad:9e:aa:70:9c:51:0e:11:4a:c3:65:a2:65:1f:3a:c1:2a:
         db:14:54:60:e1:21:f6:34:38:c8:ab:c2:ea:88:28:3e:75:51:
         58:67:81:2a:ff:a0:d1:2f:bc:d1:72:bd:71:d7:70:38:6f:97:
         10:5a:16:2f:65:df:5b:1c:15:77:c3:f4:6f:19:75:df:08:5b:
         f1:d0:48:39:a2:ba:51:44:57:be:d3:ab:1f:9a:46:7e:ef:a5:
         5e:c7:9d:46:9c:da:6e:f6:bd:bd:19:b6:87:7d:fd:d2:8b:68:
         2d:b9:6f:77:1e:be:fd:44:5f:c0:e0:72:98:aa:7c:25:25:7c:
         43:47:6f:31:df:c0:4e:7e:e9:55:22:93:72:1d:44:d4:4f:a7:
         27:c0:62:d5:21:91:6d:83:34:60:27:f5:90:22:c6:cd:4b:68:
         74:cc:02:98:c0:c3:38:0f:ce:37:98:bf:c9:14:7d:ac:51:b2:
         81:f9:79:1b:c5:b5:34:ea:83:fe:50:c3:09:59:24:68:58:6a:
         58:fa:9e:01:f6:33:3c:7e:44:be:f1:26:b5:25:82:e7:1c:19:
         bc:6b:20:b9:57:4b:b0:79:63:d8:74:2b:71:1c:d4:6d:d5:61:
         1c:ce:71:9c:9f:9e:8e:0b:ee:f1:13:7b:3d:bf:bb:b4:e2:b3:
         34:21:a5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----