Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
File:                     4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft (raw, json)
Hash identifier:          Nirp0DgD4QLj44LGpx/i62Uz66cOuSAv7CG0e9/1Pjg=
Subject key identifier:   60:BF:2C:B2:AE:82:74:8A:B2:37:99:BD:89:68:27:9E:2A:E3:EF:FC
Authority key identifier: E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C
Certificate issuer:       /CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
Certificate serial:       01962E992A6DAC348716A96AD8D53F83850D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
Manifest number:          128F
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: 4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl (hash: euOh48vkP0gllJOgNjXN5zH9o6BSXjg8ryjI5pAnVAI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2a:6d:ac:34:87:16:a9:6a:d8:d5:3f:83:85:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=60bf2cb2ae82748ab23799bd8968279e2ae3effc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:17:58:97:fd:cb:bd:89:b9:37:8c:c8:30:
                    21:ad:c8:03:30:f7:5d:41:15:0d:41:c2:f6:56:55:
                    fc:9b:7e:fc:fa:04:10:01:eb:24:b5:8b:33:74:b4:
                    f6:32:8f:c1:8b:ff:34:e3:80:a3:31:de:49:5c:f3:
                    35:4a:15:f5:28:14:96:b2:6b:4d:65:f9:fb:b3:97:
                    e6:28:76:51:9f:5b:16:c3:99:5e:36:49:ca:9b:77:
                    61:b7:b4:b9:5b:c5:6b:95:93:f2:ad:92:13:a5:0e:
                    f6:13:3e:cb:5e:58:24:3d:ab:0a:9b:31:c4:ed:f7:
                    30:f6:b4:c2:e0:f9:30:f1:09:e5:4b:70:d0:21:a6:
                    79:12:b9:af:f6:da:f3:77:39:a0:47:d4:1e:51:79:
                    1e:14:65:51:e1:00:de:0c:94:16:d9:22:c0:40:54:
                    b1:93:e7:ed:b7:bb:10:40:8a:03:9c:90:cb:ef:ea:
                    dd:af:a3:6b:be:9b:6f:8a:4e:bc:27:3d:9d:07:9e:
                    bd:a9:b2:3a:c7:5a:f6:14:9a:66:ac:33:62:76:b0:
                    32:c3:10:a7:7b:ae:51:88:98:82:05:5b:7d:95:45:
                    03:e9:9b:16:72:09:94:db:f4:fa:99:9b:9b:7a:c5:
                    6f:6d:2c:71:73:5c:15:74:b1:7d:ca:59:44:c8:36:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BF:2C:B2:AE:82:74:8A:B2:37:99:BD:89:68:27:9E:2A:E3:EF:FC
            X509v3 Authority Key Identifier:
                keyid:E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7a:40:48:a6:3f:f6:a7:65:4d:d3:39:ed:4c:e0:53:b3:b0:
         a8:f7:cf:ee:2b:30:3c:dc:67:12:3a:b5:d4:2b:64:5e:6b:76:
         ea:a6:b3:1d:57:74:bf:7c:01:3f:2e:16:44:73:c4:3e:8d:a2:
         4b:5f:25:e4:08:79:ad:1f:2e:37:9a:32:21:18:ef:77:33:0d:
         13:58:73:05:14:03:bf:ff:d0:fd:0a:f8:6e:ca:08:0c:1f:cf:
         02:1a:ae:1d:cb:12:bc:82:aa:c7:b2:4a:1c:8b:02:47:e5:3a:
         b9:09:cd:48:59:ee:aa:50:2b:e9:aa:e8:39:01:ea:6a:66:a6:
         7f:3a:6d:ee:92:a1:2d:1a:04:b3:3c:fa:3d:1c:1c:e1:13:b2:
         a9:02:1a:5d:e8:41:28:ad:47:08:b9:3d:23:6f:8e:80:01:20:
         c0:ea:03:d9:7e:4a:61:bf:2d:d5:f6:f4:f0:08:9e:94:d2:c9:
         ea:98:63:36:ab:43:c7:d9:5b:63:6e:cd:64:e5:a0:07:2a:bf:
         b0:73:49:00:ad:e2:a9:40:31:f3:bb:2f:d8:f5:f5:07:0b:c2:
         6e:18:70:f4:b2:50:c3:fa:89:b9:ee:eb:2d:c4:4d:e4:c3:11:
         3f:8c:e3:bd:8f:8b:14:ea:9c:0e:17:2c:bc:ea:44:cc:0c:95:
         a8:4b:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----