Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File:                     4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier:          eopt1XIdJFp2otqSpXIKhJJ8N9Fl07QXNSHm48U+rlU=
Subject key identifier:   81:8E:E3:92:08:2D:D7:92:AD:99:9D:F9:54:91:6E:30:70:89:4A:64
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer:       /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial:       01962ECF98DBD65EF6C373C3B000914C49C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number:          0306
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: bBmZT/IrF8JtJW7hVfUc64Gja1lijfdpI8bajj6zsxA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:98:db:d6:5e:f6:c3:73:c3:b0:00:91:4c:49:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=818ee392082dd792ad999df954916e3070894a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fa:5e:10:14:01:c9:22:3a:aa:58:cf:38:69:
                    61:2c:8c:eb:49:d5:1a:fc:12:69:ba:a6:ac:4d:44:
                    bb:18:5d:5f:f5:f4:55:7f:8f:a3:0c:47:d2:59:c4:
                    d7:fe:87:1c:e0:0d:c3:c0:0e:51:9b:e3:e4:cb:6a:
                    a0:ad:2f:92:2b:67:f1:9a:44:8b:45:c9:f2:5d:c6:
                    52:df:d5:95:c3:5a:0c:22:69:4d:fe:01:6d:35:c3:
                    83:f7:3d:7b:d7:fd:f3:27:cd:0f:fe:aa:41:36:d0:
                    5e:36:44:da:77:fb:bb:11:8f:1d:a7:da:76:1d:a4:
                    7a:5f:bb:66:51:07:23:76:e0:45:c2:34:55:69:e8:
                    a2:7f:b9:d4:56:9c:a7:58:67:71:8c:ed:d0:eb:c1:
                    bf:9b:77:84:01:6b:be:9f:b7:79:4b:71:1c:83:a4:
                    ae:96:1f:88:b8:22:be:6d:86:b3:17:d1:91:6d:7b:
                    54:a5:53:65:98:1a:85:a7:92:ee:af:8c:80:64:65:
                    09:a8:5e:c0:be:1f:6e:8a:51:65:b8:04:08:be:0f:
                    df:af:61:5c:1d:c8:ba:d6:80:d5:69:68:e0:fd:d6:
                    b5:41:29:89:12:28:28:09:3b:67:23:38:37:7e:9c:
                    7e:d3:ad:68:2d:f5:82:a6:a0:a9:c5:74:7f:d3:23:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8E:E3:92:08:2D:D7:92:AD:99:9D:F9:54:91:6E:30:70:89:4A:64
            X509v3 Authority Key Identifier:
                keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b4:57:d5:de:3d:e0:5a:10:18:a9:28:2a:43:30:0a:3f:b8:
         87:77:57:0e:2e:36:37:62:92:ab:92:f7:8b:ff:93:f4:1a:80:
         b9:9e:4e:a7:19:34:8b:99:69:03:11:79:90:12:b6:d4:22:ff:
         0a:97:ad:a6:4b:45:97:11:20:4e:98:ce:1d:71:f8:b7:25:3b:
         72:0a:1b:20:04:b9:fb:99:ac:19:32:5e:53:6e:5b:78:90:6e:
         5d:b2:5e:9f:be:e5:d3:7c:af:d8:fd:82:8e:65:45:e7:bb:25:
         eb:9a:53:f1:2d:08:2f:6e:bc:a8:bc:92:36:dd:b1:3b:8e:e7:
         b2:cc:d9:e0:cb:59:5c:bf:cf:a7:2b:81:1d:f2:ae:97:6a:c2:
         7e:15:7f:08:ad:da:b1:9a:92:8e:30:3b:44:34:71:c4:b9:c6:
         29:5c:1e:9d:16:c8:3b:4c:f7:7a:b1:15:0f:20:8d:18:99:c1:
         82:80:76:89:80:9f:79:b0:b6:2a:21:96:57:8a:27:f5:50:33:
         91:8d:e0:a8:81:8a:35:f7:9d:28:1a:b1:39:d8:db:ab:9e:f6:
         fe:d7:c8:2a:4f:c5:2e:85:34:d6:ed:d1:a6:44:e8:4a:8e:11:
         5f:91:e4:28:46:3d:0b:fd:24:98:7f:73:8f:76:ec:fe:44:21:
         4e:88:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----