Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
File:                     f3BJpbLfBi_E4RlYQGU8P1kgySE.mft (raw, json)
Hash identifier:          BHTQThHcyqN5D2m2PhWvgdc9lkX2qrTnNGp0gEz0BAg=
Subject key identifier:   E4:B6:A0:0C:A5:EA:83:6C:55:99:47:3B:9D:2D:E2:02:CE:28:FC:1D
Authority key identifier: 7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
Certificate issuer:       /CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Certificate serial:       01962E98782ED4BEE4ECF2C8F68679D8D8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
Manifest number:          1478
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: f3BJpbLfBi_E4RlYQGU8P1kgySE.crl (hash: PLeZok8BPl5A3mpm7BdRKw/FFPgJ4A124pvOsBiHE4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:78:2e:d4:be:e4:ec:f2:c8:f6:86:79:d8:d8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7049a5b2df062fc4e1195840653c3f5920c921
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=e4b6a00ca5ea836c5599473b9d2de202ce28fc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:04:fd:46:91:bf:f9:b3:73:d7:1e:eb:79:
                    b7:9b:4b:75:4a:12:4b:c7:dc:0a:c2:25:6f:0e:57:
                    61:a5:79:6b:09:32:61:a4:e2:79:76:f8:ea:62:99:
                    1c:3c:28:05:d3:af:15:a0:f5:0e:dd:3a:88:ef:20:
                    fd:a6:ff:54:4d:94:c4:14:6d:63:bf:f2:7f:eb:91:
                    e4:d0:80:dd:74:6e:80:98:26:9e:96:fa:55:ce:a3:
                    a6:8e:37:37:73:d0:6e:62:72:1c:ae:87:35:2c:51:
                    75:9b:ad:74:db:00:2a:d8:f1:68:5f:88:df:06:0a:
                    13:0b:fa:bc:99:bc:ea:19:b8:d7:68:90:b8:8c:fa:
                    7f:51:c4:cd:b9:f9:2e:6f:b6:58:40:c9:23:77:99:
                    e8:1c:c6:7f:77:20:99:a1:31:15:b6:bf:f1:39:b2:
                    f4:d6:58:be:f5:a5:aa:a6:29:10:96:9e:4c:53:8c:
                    30:3a:dc:46:91:d6:41:92:4f:ee:07:56:1f:e3:ed:
                    16:30:77:bf:c1:bf:34:e0:30:67:cf:a2:f4:7c:c8:
                    d4:f9:ba:47:9a:3c:c5:37:c5:9b:41:fa:9c:1a:6f:
                    45:0f:01:2b:5f:02:f9:f2:7d:3f:2f:29:ec:ea:f1:
                    50:f0:a5:8d:01:b8:ea:be:bf:4c:50:f0:36:ca:f4:
                    5c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B6:A0:0C:A5:EA:83:6C:55:99:47:3B:9D:2D:E2:02:CE:28:FC:1D
            X509v3 Authority Key Identifier:
                keyid:7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:86:b0:b4:ec:09:48:37:11:6d:aa:8a:1b:f6:c2:8d:72:f3:
         67:42:dc:e4:80:d6:31:d5:18:00:75:ba:47:6b:37:50:c6:1c:
         50:c8:33:c0:30:1e:da:70:47:d0:4d:9b:7c:68:3a:38:c6:21:
         22:a5:25:09:d5:33:d3:4d:07:fe:32:54:12:2f:2c:b2:a0:c2:
         e0:9b:58:8c:7b:90:6b:cf:a9:0d:84:39:b9:76:2f:a7:2e:01:
         e2:b8:40:d2:78:e5:14:08:94:b9:1b:44:db:85:63:1a:d5:6f:
         0c:a7:59:b1:d4:fc:b8:42:75:63:f5:4d:5f:b4:24:b4:16:aa:
         32:32:46:ab:12:1b:38:dc:dd:1c:b7:33:56:c3:43:e7:f5:be:
         13:fb:61:c3:e3:67:34:4a:10:2d:a9:1d:ca:6e:92:73:11:7a:
         43:6b:a1:2b:6c:49:ca:78:ff:4f:c2:20:1d:28:eb:dd:6d:e3:
         23:d0:8e:82:5f:0c:b7:bd:f9:e8:12:36:fb:35:b6:18:de:87:
         e7:cd:ea:d4:b9:bb:f5:fa:00:d3:53:ec:a2:bc:73:28:82:f7:
         4d:7e:2e:8a:7d:b3:52:a3:9d:4f:e9:58:57:a6:49:5c:c8:a9:
         71:25:82:a5:20:52:92:d9:d0:bd:15:1b:95:6f:33:86:2f:f4:
         20:b5:3c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----