Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
File:                     4fLKlRgjMUpfTRCmangiOY-4iWs.mft (raw, json)
Hash identifier:          QC5EqPpDNCfLrd/keZhKUCvR9g1H2v9be+WTshu7cjA=
Subject key identifier:   77:38:4F:1F:84:30:66:59:88:C3:32:AB:C0:EE:5C:95:98:2C:A2:4A
Authority key identifier: E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
Certificate issuer:       /CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Certificate serial:       01962E997645A47CF15B6D7E3167B97E6268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: 4fLKlRgjMUpfTRCmangiOY-4iWs.crl (hash: rMyWI4YamI28e7SjaPj0hQSnhNrI0wVesn5c8DM0w34=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:76:45:a4:7c:f1:5b:6d:7e:31:67:b9:7e:62:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=77384f1f8430665988c332abc0ee5c95982ca24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:76:4a:5f:c1:9b:7f:82:37:e3:9a:d1:a7:c5:
                    78:5b:16:a8:ca:ee:ac:dd:a8:e1:aa:e0:75:a8:31:
                    0e:94:78:5d:fe:5f:27:18:c0:be:0e:e6:e4:be:10:
                    48:9c:b6:8d:a7:45:bc:2c:7f:0a:f6:77:ec:a2:9a:
                    da:58:b4:d3:70:f5:59:b4:c2:b9:47:b0:ac:1b:99:
                    32:b7:6a:63:15:b6:88:57:8a:15:ff:35:dc:c3:63:
                    6e:25:a5:20:67:d4:f8:cd:94:a1:e1:8e:bc:94:27:
                    13:5e:7d:64:0d:f1:fa:dc:6a:a0:e3:17:ce:7f:93:
                    c9:5e:e5:48:a9:74:00:4c:35:d1:01:43:85:35:2f:
                    11:19:16:3f:8c:63:52:26:5f:2f:36:84:23:fe:4e:
                    7a:c6:7f:ac:28:b7:8d:a9:31:90:2b:e7:85:26:1d:
                    a0:24:4b:3e:dd:66:d1:a9:96:2d:35:bc:55:a0:cf:
                    c3:1b:77:0d:51:8c:1f:ac:b4:d8:13:cb:13:6e:0b:
                    80:a8:53:62:2e:53:39:1f:68:78:9c:07:a7:16:79:
                    02:77:fd:e6:c4:73:1e:60:8d:f6:dd:6f:97:03:bd:
                    9e:10:cf:31:92:9d:bb:35:04:b7:03:92:91:0d:e7:
                    a2:dc:e8:46:8a:9a:12:29:a3:6e:53:3c:15:c1:c8:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:38:4F:1F:84:30:66:59:88:C3:32:AB:C0:EE:5C:95:98:2C:A2:4A
            X509v3 Authority Key Identifier:
                keyid:E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:79:76:20:3a:df:0a:c8:75:20:0c:12:db:b1:64:32:81:f1:
         50:aa:01:ea:a2:c8:b2:50:40:24:e1:42:04:ff:3e:e9:f6:6f:
         ab:f1:7b:a7:60:1d:12:19:c3:1b:d3:7f:74:94:c3:78:cf:76:
         d4:ec:e8:67:0f:37:c3:00:75:2a:84:9d:11:0c:d2:86:fb:e8:
         c1:9d:f5:c4:34:85:15:a4:88:5e:e0:3b:54:9d:33:97:a7:a9:
         06:e0:7b:66:1d:83:cf:bb:b6:25:1c:38:22:d9:81:0f:b3:5d:
         70:2e:61:1a:ab:6d:44:5a:a0:09:68:6a:13:d4:1c:b5:ea:cd:
         e9:95:44:cc:c9:a8:83:8f:62:3b:26:b2:d8:02:de:b8:a3:3f:
         dd:8a:0f:89:a9:a9:76:9b:80:7e:0b:e0:7d:c7:b0:ea:95:4f:
         b3:ed:95:0b:b6:2e:78:90:dd:9c:2f:c2:84:f3:5c:c7:10:3a:
         3c:a5:01:77:0a:35:91:a8:88:52:7c:06:ce:02:0b:4d:a4:94:
         f6:4a:7e:58:ae:70:d9:c7:22:1a:43:25:0d:b1:78:48:9a:6f:
         ac:51:df:66:55:43:46:31:af:96:5f:bb:7c:10:4c:8b:c2:9b:
         70:f0:fe:22:05:78:71:b7:d0:94:b7:e9:fb:03:fd:a0:21:95:
         b8:48:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----