Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
File:                     2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json)
Hash identifier:          y7F8oZu15ww2wI5uVmhvThQru9A7lG8NQJIk723u/f4=
Subject key identifier:   38:1D:19:3D:81:B9:C7:1E:16:BA:B3:A8:24:C0:71:46:7E:67:24:53
Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Certificate issuer:       /CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Certificate serial:       01962ECF628116F571D210C7A2AFA4256ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: ZE4mqzpn7N91q+C1rWyLBT3rMgtaXWPQILoTyYN9OJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:62:81:16:f5:71:d2:10:c7:a2:af:a4:25:6a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=381d193d81b9c71e16bab3a824c071467e672453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:01:da:8b:17:1c:73:52:fa:1c:8e:56:53:
                    97:3a:2f:48:aa:2f:45:96:10:27:7c:fe:e0:5f:cc:
                    af:56:62:65:fe:ab:ae:ea:9d:bd:12:9b:51:e0:a6:
                    15:71:78:93:92:98:7d:46:58:22:86:e6:18:7f:33:
                    27:b0:fa:46:d3:7a:17:9f:34:14:91:83:1b:82:52:
                    10:1c:4a:20:7d:2a:15:61:21:36:39:5e:f0:eb:4c:
                    1e:69:a6:57:91:0a:c1:0b:66:23:27:ce:f6:e4:fe:
                    78:01:fe:d8:a9:03:58:70:27:21:7e:fa:51:26:d5:
                    11:5a:6c:8e:8c:30:d2:46:5f:77:13:86:6f:c1:5e:
                    e9:4a:d0:48:2e:91:6c:cd:2d:66:89:fc:c4:b3:6f:
                    57:0d:f6:c0:62:63:90:59:d6:d0:9c:6a:5b:09:9d:
                    4a:34:aa:72:57:66:cf:01:2a:df:3b:82:81:ea:e2:
                    ed:19:e8:a4:bb:ef:8c:c3:40:79:c7:6f:33:7d:83:
                    b3:e9:4e:a4:d9:4a:a7:eb:cb:b4:44:44:4d:46:ed:
                    39:4b:ce:17:42:f1:f7:c8:28:f6:7a:ed:de:2e:a9:
                    d0:f7:26:ad:9b:ce:e4:68:b4:cf:d9:76:dd:9a:7e:
                    e7:b0:43:3f:ad:f9:45:22:5d:3b:fa:9c:4a:4e:a4:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1D:19:3D:81:B9:C7:1E:16:BA:B3:A8:24:C0:71:46:7E:67:24:53
            X509v3 Authority Key Identifier:
                keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a1:96:ee:97:ae:c7:7f:ec:a8:bc:50:8b:5a:61:eb:08:1f:
         bb:49:2e:f7:55:9a:9d:88:fa:da:d4:f0:81:0b:12:1d:0d:5a:
         e9:40:c9:b6:6a:65:20:72:1f:11:38:56:0a:58:ea:65:56:eb:
         24:67:d4:90:fa:ae:27:a7:07:88:64:63:b5:d7:be:18:9f:3c:
         c0:f3:fb:e2:f4:e6:eb:2a:cd:83:4a:e0:fc:61:c6:ba:8f:fa:
         c6:e3:cb:29:f1:94:0a:1e:44:2f:3f:90:a0:6e:f9:26:a8:81:
         3a:fe:74:6b:d8:ef:fc:f6:94:2b:4e:f3:47:79:71:6e:c8:f2:
         3d:ed:8a:91:8e:06:3d:be:43:d0:a7:69:8b:a2:48:fb:8e:04:
         1a:a5:9c:92:24:2b:1b:8c:59:10:6c:15:68:d6:b9:c5:6c:93:
         b3:e5:94:83:28:90:8c:76:4c:89:1d:05:17:06:01:6b:0a:d9:
         d6:04:f6:70:60:08:1d:63:4b:9f:5b:50:cc:3f:70:a6:cb:65:
         2e:d4:0a:25:15:e6:ce:2f:cc:5d:15:0d:85:f0:dd:11:3c:cf:
         58:c6:42:fa:39:07:3b:18:81:de:1f:65:ed:57:a7:7b:4c:f3:
         b1:56:5d:33:84:a4:04:84:d1:9b:f3:3a:df:a7:d3:fe:5b:48:
         94:b3:ba:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----