Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File:                     xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier:          h7HIpE2ep4Il6CUjEE4dzA4ef30LkHqruSc19sL/sHI=
Subject key identifier:   64:42:F3:AC:25:E6:32:8C:93:5E:9F:E1:EA:DC:30:61:38:A9:DE:FE
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer:       /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial:       01962F7432D87E7A282E9B515D7FC8C8AF9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number:          01C5
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: OqUH44mt6B+vhMBH98Ha5WGTtAHU/x0jcmjE97LKW6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:32:d8:7e:7a:28:2e:9b:51:5d:7f:c8:c8:af:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=6442f3ac25e6328c935e9fe1eadc306138a9defe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:c5:8c:b8:5f:66:ff:e4:6c:3c:0b:89:1e:
                    27:74:f5:5c:28:9b:d3:cb:dd:9a:88:4a:ea:34:e0:
                    25:bb:0b:04:f4:ea:bd:1b:09:9b:48:29:a6:83:01:
                    74:6b:1d:26:18:3a:98:73:a5:22:f3:cd:54:47:47:
                    88:71:3c:cd:e4:7b:40:95:b4:7a:a0:65:cd:10:21:
                    87:32:ea:b7:5f:d4:8b:da:bf:71:92:b1:de:7a:65:
                    e4:d2:5b:a1:05:97:8f:89:b4:49:ce:c6:80:49:f5:
                    9a:8c:de:c0:e5:1a:f8:2a:70:aa:76:71:ce:8e:b6:
                    af:68:7a:39:91:48:b0:02:d4:1d:b5:dd:0b:25:c8:
                    8e:bb:c6:77:ed:a6:ec:31:1b:3d:77:c6:fd:82:e5:
                    3d:0c:e8:37:f9:16:eb:87:99:90:6a:20:eb:f9:8e:
                    ae:72:c2:b1:3d:16:45:34:8a:b6:9c:2c:fa:57:df:
                    cf:ec:de:08:8a:f0:36:b0:3b:72:9e:97:43:03:b4:
                    47:8d:49:e6:c1:52:cf:e8:0f:f6:5f:3c:28:c7:50:
                    ab:cf:39:9d:e1:66:a0:e9:d9:16:b5:28:f3:e7:3d:
                    75:cf:30:93:a9:59:91:43:99:e9:76:a8:48:dc:ed:
                    13:63:10:0e:97:b8:e6:3d:aa:f0:e7:b1:c5:33:6c:
                    4a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:42:F3:AC:25:E6:32:8C:93:5E:9F:E1:EA:DC:30:61:38:A9:DE:FE
            X509v3 Authority Key Identifier:
                keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:85:03:19:51:cb:90:06:a7:83:01:21:2a:55:12:22:b0:6d:
         58:0a:a4:f7:a7:a9:0e:1b:2f:82:42:6e:6f:ef:8d:ce:52:49:
         67:ba:50:a1:c6:f2:ab:29:49:91:30:fe:7d:66:dd:82:ba:0c:
         9d:86:6f:11:04:30:4b:b6:0d:b7:fc:dd:a6:35:df:9a:52:fc:
         25:4c:da:75:45:73:6e:80:14:8e:13:e8:6b:c9:57:c8:1d:0e:
         09:66:3f:20:cc:2c:96:5b:40:7b:d5:01:cc:3e:d1:71:91:62:
         c2:74:c1:bb:00:7d:cc:df:3a:0c:58:82:d7:f8:ea:89:de:8b:
         51:dc:d0:ab:ca:8b:b4:e0:b6:88:ba:34:e1:f9:d2:9a:15:fc:
         27:e7:fa:5b:b7:63:95:b7:40:18:eb:a0:f5:e1:7c:e0:65:63:
         8c:dd:3e:ff:29:40:d5:88:08:18:80:62:5a:c2:2f:33:0e:03:
         a1:13:99:a8:92:0e:4c:82:1b:1a:06:11:74:d0:0c:86:94:71:
         48:3e:20:4d:c6:77:85:60:5d:5d:3b:19:ba:ec:6e:22:52:af:
         bc:20:d6:e4:bc:c4:ad:56:dc:93:37:87:d8:61:7f:71:71:92:
         56:ea:ac:b1:bd:bb:38:06:47:34:d0:7b:f5:bb:32:5d:f2:86:
         e2:de:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----