Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File:                     4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier:          LSU+wYUPSaCbRRSb68MM1hH/iKlynOqhgSZCLzHny6A=
Subject key identifier:   23:8C:2B:9D:BB:73:ED:83:24:59:66:AB:EB:2B:67:8C:B8:63:DE:3E
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer:       /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial:       01962E99B1F961AAFBFF4AE4504E26460FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number:          0751
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: HZ6xYZRRfi6ghu5Exmp0DO3vupT/W9JEYy/2yz4mEhw=)
                          2: _ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa (hash: CVsEd1l4ktAB6C0fXHQFN4p7fWEDkI6je8kKrze6YQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b1:f9:61:aa:fb:ff:4a:e4:50:4e:26:46:0f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=238c2b9dbb73ed83245966abeb2b678cb863de3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:dc:c4:53:25:7d:5c:50:0b:e3:5a:d2:66:
                    b9:e5:09:25:82:39:b7:95:bc:44:ba:fa:2f:96:f9:
                    bb:d2:17:4d:40:15:56:be:87:1c:35:35:94:44:f6:
                    b8:31:f6:12:e3:e8:d1:32:8b:c1:11:f6:fe:03:d3:
                    a5:b7:58:4b:f3:86:8c:5c:7c:4d:b2:6f:80:dc:c2:
                    0c:a4:06:82:c5:90:e8:1a:75:3c:1c:07:fe:f5:65:
                    e4:5d:9d:a4:a5:21:f9:ce:57:f3:53:a0:59:32:c7:
                    99:62:b4:9c:e2:ee:4d:3b:b3:64:c8:b5:c8:4c:ad:
                    3b:8b:32:34:29:2a:3d:fa:47:85:fe:0f:10:1d:3f:
                    eb:8b:f4:e2:06:ea:e8:2d:6d:42:72:fe:8d:67:3b:
                    ce:23:03:66:d8:1d:4c:0b:9e:8a:55:07:2e:c2:79:
                    33:09:22:9e:cf:e0:e6:28:9c:d9:8c:e7:ae:8e:03:
                    c9:d2:3e:b9:52:e9:89:4c:60:c2:16:f2:75:93:53:
                    a3:0d:44:50:ef:63:a2:f9:1a:5f:06:23:88:3f:2b:
                    87:e4:2e:91:31:0c:21:42:cb:b0:5d:58:29:cf:78:
                    d4:03:41:57:58:40:49:d4:6a:db:f7:d3:47:e2:12:
                    71:45:61:4a:4c:43:d0:6a:48:57:e2:79:66:60:f0:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8C:2B:9D:BB:73:ED:83:24:59:66:AB:EB:2B:67:8C:B8:63:DE:3E
            X509v3 Authority Key Identifier:
                keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3f:bc:56:03:c6:57:70:cf:0c:a4:90:b5:e8:8b:91:c2:97:
         b6:fc:d1:31:bf:3c:12:3e:94:40:4d:d6:ca:c1:36:33:5f:73:
         26:2f:cb:e1:6a:ec:29:d3:1b:d0:f2:84:ca:fc:d9:96:a9:26:
         ac:6d:86:26:47:e0:8c:65:32:9e:ed:80:7e:7c:56:19:e8:03:
         a6:8a:2e:d6:f5:da:62:99:5a:2e:61:90:bf:f3:12:dc:e2:63:
         95:19:a4:c5:92:22:e4:22:fb:9a:4a:0c:07:d8:8d:43:de:d3:
         06:1a:5a:3e:df:d2:90:68:9c:fa:89:65:a7:a1:ab:6a:d5:21:
         93:c6:dd:c1:e6:f8:c8:0b:0e:2e:30:53:96:f5:34:de:63:3b:
         e7:78:ff:9a:97:99:cd:c5:31:73:2f:1e:c2:d1:30:7d:f8:0e:
         c9:5f:78:f8:a2:c2:98:94:44:b4:bf:2e:4e:a9:54:c0:18:76:
         65:72:ed:1e:06:d1:e6:00:96:ef:64:f6:46:a1:7d:a1:75:8f:
         86:0b:e0:34:c0:31:4d:de:70:48:77:09:c3:60:d5:67:15:97:
         23:25:a0:d1:d4:52:10:28:74:73:39:10:23:d3:23:4f:b8:5d:
         c4:cd:95:69:6b:5e:d0:75:64:fe:d9:ca:9b:e5:b4:0d:17:1c:
         1f:fb:e3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----