Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File:                     1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier:          rR+QtsjP8Y3KuT916z4tMyJ3xdJWX4rPyCcpsiMamT8=
Subject key identifier:   4E:D1:58:69:0D:24:37:97:08:73:AF:2C:DF:2B:CC:5D:1F:D1:13:9F
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer:       /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial:       01962E61CD5162A76684416CAEC149A208D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number:          0449
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: uGoETK4Mm1PdxaYifzH8mL3TXavqWGL+D/PgRRSEUf4=)
                          2: AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa (hash: UxOR6qET+hxOD3wGEyopUX9auNkRzvxhrEq1sLIBOVA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cd:51:62:a7:66:84:41:6c:ae:c1:49:a2:08:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=4ed158690d2437970873af2cdf2bcc5d1fd1139f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:5c:eb:79:ec:ea:da:06:35:3d:bf:73:6c:
                    bd:ca:fe:87:2f:90:09:85:29:f1:2b:58:28:40:5a:
                    72:53:0e:b6:1b:b9:89:05:0c:8d:86:55:1c:a7:ea:
                    08:a6:88:92:50:c7:01:a9:a0:6e:22:b1:93:51:1c:
                    ee:11:1e:cb:18:a6:82:a9:c4:34:45:62:1a:59:f8:
                    e9:89:c3:35:90:07:13:29:1f:32:30:36:68:53:d1:
                    04:09:a4:08:24:d3:07:9e:70:6d:39:8f:52:6f:01:
                    e1:58:a3:00:59:9c:ac:d4:24:ae:86:b8:f8:dd:0f:
                    2b:4c:c0:65:a1:17:f2:5e:05:8b:02:dc:da:38:a1:
                    c4:af:ee:e9:8e:b0:ec:21:d6:a3:24:3e:a2:8d:65:
                    13:f4:5f:d3:37:cc:aa:51:61:a8:c6:09:b2:b3:bf:
                    df:83:8e:3b:d3:bc:25:52:23:09:76:ae:6a:64:50:
                    53:2b:c4:82:b1:49:4a:81:62:82:bc:b3:50:16:87:
                    a4:9e:55:c2:13:ed:24:2f:90:c8:2a:b9:aa:9c:1b:
                    82:89:79:57:11:ce:31:5d:b4:67:50:92:d0:48:b8:
                    6e:d4:78:ac:97:90:e8:59:ee:12:e8:9c:0c:73:63:
                    7d:9e:5c:32:b1:1f:e9:57:7e:5e:c4:4d:ab:67:61:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D1:58:69:0D:24:37:97:08:73:AF:2C:DF:2B:CC:5D:1F:D1:13:9F
            X509v3 Authority Key Identifier:
                keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:80:39:97:5a:2d:bc:7d:9d:24:6b:46:df:76:44:6a:8e:7c:
         d2:68:03:0a:35:c8:35:d3:c2:78:45:40:a4:48:33:ec:4f:05:
         fc:f6:cb:ca:99:b6:c9:c8:4b:77:f1:26:d9:8f:53:ae:ca:a6:
         c5:89:9b:77:12:ea:35:85:d9:ae:65:08:05:19:eb:0e:cb:15:
         4e:58:55:51:50:f2:37:e9:00:2e:b9:b6:9c:b3:65:bf:dc:5f:
         c0:69:d0:7b:68:d2:46:c2:49:e4:b5:ee:7c:cf:16:c4:59:e2:
         c6:e0:2f:f9:21:ee:24:8f:b7:b4:b0:ba:80:29:af:11:ff:90:
         77:c6:aa:14:fb:e3:84:a9:b1:02:89:da:e7:50:ed:d5:e0:d4:
         ee:1f:39:44:59:86:65:df:b3:92:28:81:01:54:39:ed:ad:97:
         23:24:fd:d4:45:6d:ab:63:f7:63:08:17:0b:7d:c1:7e:86:d5:
         54:81:6a:ae:44:4c:91:a0:89:af:67:2b:06:02:3d:14:f7:d5:
         c0:0f:66:1f:12:16:fb:a6:a3:df:71:90:96:95:5a:3b:90:86:
         58:2a:07:e5:44:04:3c:b3:01:ae:73:27:1f:dc:62:73:c1:50:
         33:05:4b:82:25:bd:b2:cd:f8:c4:23:7a:51:81:af:7d:fd:45:
         1b:6d:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----