Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File:                     4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier:          pMXKYiUwAVO1ves2mx3lndoml7WGkCb8wrO+RILGg2M=
Subject key identifier:   CD:89:EE:48:9C:D1:C2:A3:43:84:11:09:28:8D:56:C9:91:A5:9F:B7
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer:       /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial:       01962F3DCE58B945168B601923FEB6B4CB4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number:          13E5
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: RU3hSgab3bAzXp6mCd8JBcJBCYv4HB5ze6vO5OgHIAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ce:58:b9:45:16:8b:60:19:23:fe:b6:b4:cb:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=cd89ee489cd1c2a343841109288d56c991a59fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3e:98:89:a3:e7:52:b7:3b:b5:69:e7:af:2f:
                    55:20:72:9f:6a:14:20:d5:52:ac:39:6d:be:d5:6d:
                    a6:f0:86:f9:d4:39:e2:67:19:3c:e4:a5:66:e2:0b:
                    0c:4b:72:58:56:4e:af:91:73:a9:c1:dc:79:af:a0:
                    d5:e5:71:c9:d8:32:cf:dc:60:10:c9:26:4e:89:3e:
                    86:a0:f6:73:1d:a8:62:47:81:16:0c:01:c4:13:11:
                    9d:2e:46:10:c6:12:ac:ad:e6:c6:ea:22:4d:d2:53:
                    9f:21:fe:e5:28:88:bf:5d:de:eb:02:96:1b:9e:23:
                    40:93:3e:3c:b2:9c:7d:4a:3a:aa:e6:e5:d2:1e:e2:
                    fd:f7:8c:b4:c3:b7:a1:17:eb:7f:ee:4a:cb:b3:76:
                    51:74:ab:57:2f:e9:07:9c:92:56:cc:16:68:db:ea:
                    36:5b:db:11:34:ca:26:ca:95:60:d6:a8:45:de:1a:
                    d6:6a:8d:3f:5e:19:6e:a9:36:df:2e:64:92:0d:6a:
                    27:c0:ef:eb:99:b5:53:2d:1b:16:ae:56:f5:99:fd:
                    e4:a8:88:b2:ee:d8:5a:63:c0:77:1f:39:55:29:70:
                    24:e8:77:72:c9:92:18:21:1f:7b:7f:10:d1:16:22:
                    8f:d4:63:1a:11:d0:02:fe:7d:b9:02:c4:0d:7f:dc:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:89:EE:48:9C:D1:C2:A3:43:84:11:09:28:8D:56:C9:91:A5:9F:B7
            X509v3 Authority Key Identifier:
                keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b0:8d:a6:9b:08:0a:7b:e9:f7:a3:d8:a5:e8:c8:ff:09:ad:
         96:d2:ed:71:85:45:f6:b8:73:24:95:38:db:41:0f:5b:74:54:
         24:d2:af:1d:b7:47:a8:f6:a4:0f:f1:00:76:34:b6:bc:53:d4:
         ab:54:2d:4b:dd:c8:92:11:e1:6e:3c:d6:f3:ec:ff:c9:73:44:
         88:42:e4:88:3b:e4:41:80:ed:29:7a:11:fe:ec:f6:e4:3e:db:
         87:3e:1b:75:39:92:d9:2b:6a:08:ff:27:a6:10:20:3d:3e:c8:
         6a:fb:72:df:bd:d6:04:3f:68:8c:28:97:ae:67:96:80:98:df:
         98:ad:91:e2:50:2b:03:ad:ac:5f:81:6d:aa:9a:b3:28:dd:e6:
         08:8e:59:89:ce:9a:90:62:bd:3d:15:cd:51:a1:95:4d:6b:75:
         05:96:7a:02:b0:96:34:77:51:da:b9:eb:e5:83:13:23:66:3f:
         8d:66:61:d0:f0:55:77:c4:8e:7d:34:37:c0:98:83:e1:37:cc:
         e6:a8:eb:86:7f:a4:5f:ce:5d:4a:05:4e:b0:93:31:01:3e:f0:
         53:ae:28:eb:66:4f:be:08:0f:82:cc:4f:60:8c:2b:ed:b2:59:
         28:1c:dd:1c:68:80:c5:56:9b:7d:91:8c:a1:21:cf:48:12:ee:
         a1:cb:ee:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----