Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
File:                     45WAim89Q2FJAcmQyc5jLhXt-gc.mft (raw, json)
Hash identifier:          hiDnun3i04XgFUau5GBxMhAo2ZtTBwd8eOdJwGXD4T8=
Subject key identifier:   33:E1:03:FA:72:C9:B8:0D:F0:D5:1D:D0:76:12:C9:0A:69:6A:DF:C9
Authority key identifier: E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07
Certificate issuer:       /CN=e395808a6f3d43614901c990c9ce632e15edfa07
Certificate serial:       01962ECFD6E3721DF2986F9F6843202AF032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
Manifest number:          0342
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: 45WAim89Q2FJAcmQyc5jLhXt-gc.crl (hash: MXAKD/CaAn27AorCYE22l8r+rUppyNpWzwsGszmQ3Nc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d6:e3:72:1d:f2:98:6f:9f:68:43:20:2a:f0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e395808a6f3d43614901c990c9ce632e15edfa07
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=33e103fa72c9b80df0d51dd07612c90a696adfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:29:44:77:65:18:c6:3c:56:6c:66:2d:1e:
                    d4:23:96:89:63:f8:0f:ec:45:b9:56:8b:71:a3:5d:
                    8c:bc:d9:e4:7f:a7:4a:1a:e3:1a:b0:99:ff:cf:6e:
                    62:d6:ce:11:ac:85:37:ab:04:5f:f3:a2:3f:c3:ae:
                    a6:99:dc:92:eb:cf:db:bc:f5:d8:1d:32:02:8b:51:
                    7a:90:99:b6:ec:c6:c5:9b:62:ca:d2:6b:4d:7a:20:
                    e5:49:c3:3d:b9:27:ce:26:b4:12:41:73:d3:6a:21:
                    5c:94:5d:94:8f:ce:5e:17:9e:d0:ee:53:74:54:51:
                    23:fc:e4:ed:91:f0:e1:4b:fd:06:cf:ea:7f:af:c2:
                    31:82:37:6a:22:42:36:ed:bf:fd:91:a5:7c:ce:7f:
                    7b:85:ab:f2:2d:c3:d6:64:a8:27:54:ae:77:bb:96:
                    e6:42:79:1a:71:af:19:7f:71:2f:89:a5:b1:52:8a:
                    a6:06:b7:1a:d4:b3:38:60:40:9e:19:62:80:1e:b0:
                    3d:81:df:77:91:46:0f:90:74:01:19:6e:4f:18:f8:
                    8d:a7:d0:80:62:ae:62:01:b2:2e:ef:6a:6d:d7:04:
                    86:f5:23:a2:4d:3a:a9:6c:8b:90:85:f2:bd:32:c4:
                    72:85:5e:05:8a:9b:e4:6d:ef:46:e4:db:9c:61:b8:
                    7c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E1:03:FA:72:C9:B8:0D:F0:D5:1D:D0:76:12:C9:0A:69:6A:DF:C9
            X509v3 Authority Key Identifier:
                keyid:E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:e7:ec:ed:68:42:d3:f1:ce:1c:7d:d8:3d:c0:fe:db:55:
         73:33:40:74:9a:41:f9:83:b2:f5:0a:a8:77:55:93:c5:fc:11:
         a2:68:5d:14:a3:ea:cb:f9:a8:1b:2a:d1:31:a9:4e:ee:5a:65:
         ab:83:74:53:71:56:54:b2:cd:f4:f2:23:78:9f:a3:bf:f3:82:
         58:8a:44:77:9b:dc:8e:b6:8b:15:a7:90:d9:6c:23:f8:9f:c9:
         6d:3c:8c:09:91:1e:ac:3b:39:ed:e4:9e:60:9c:a7:68:ac:e7:
         b8:72:97:7f:bf:2f:45:b5:05:f3:3f:5f:29:96:ce:1d:ca:5a:
         a9:9f:74:bf:cb:0b:4c:49:08:6e:50:53:06:ac:c0:88:d4:14:
         b0:74:19:2b:36:6c:29:c2:06:e6:84:a4:2c:48:70:54:67:13:
         c2:9e:07:7a:55:3b:82:0f:a2:e8:95:00:e7:97:b6:66:d6:9b:
         3c:13:94:2e:cb:a4:a0:02:2d:a8:a1:a0:b2:12:9b:42:c2:60:
         39:1b:be:c0:27:5c:fc:ed:28:6c:7b:1a:6a:4e:42:9b:15:6c:
         4c:f6:b9:7e:96:dc:31:31:0c:ad:7e:80:b8:a9:e6:85:96:6c:
         2e:8a:1a:51:7b:3c:55:e1:99:f2:78:b2:96:0b:07:22:1f:7f:
         b3:3d:94:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----