Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
File:                     1e-BdSPHDnJw0q7lorbXJWojQiM.mft (raw, json)
Hash identifier:          xK7b53R5hDu4qMqMrOhnZ3rB7POwyGV9U9zWnun3iaM=
Subject key identifier:   51:67:4D:37:52:33:9F:01:46:50:DD:BD:AE:4F:08:A4:18:F0:13:05
Authority key identifier: D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
Certificate issuer:       /CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Certificate serial:       01962E61E77C1ACFB758A5A5AB6787E9B7AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
Manifest number:          015B
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: 1e-BdSPHDnJw0q7lorbXJWojQiM.crl (hash: 2z02q9tjJRtwhEtGnjvChaCvQMspvaBqabz+PGa5OYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e7:7c:1a:cf:b7:58:a5:a5:ab:67:87:e9:b7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=51674d3752339f014650ddbdae4f08a418f01305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:16:ea:18:28:3e:8b:95:49:6c:01:4f:3a:72:
                    1a:8c:9e:99:ea:d9:a2:52:38:1f:78:a3:be:41:b4:
                    ec:d8:f2:35:5e:be:72:4e:6a:b6:ae:06:25:69:a8:
                    fe:bf:86:3a:34:35:8c:86:31:d6:f0:65:5b:4a:96:
                    de:78:11:aa:ab:77:b1:87:9e:a7:b1:0f:64:30:2f:
                    c3:3c:87:e1:27:04:64:2e:cd:71:2d:16:2a:06:ab:
                    7c:33:9c:86:12:06:19:84:4e:61:4a:30:da:98:e0:
                    aa:6a:0e:50:21:a5:ab:5b:be:bc:90:36:1f:46:72:
                    fd:97:66:a8:f9:8b:d6:57:ac:be:22:02:a0:4e:fa:
                    f4:1a:95:51:c5:4c:7a:c0:b0:a3:19:2b:4c:1a:57:
                    b6:1b:f2:f4:33:35:d6:bd:ef:21:11:19:f9:9b:2b:
                    b2:9a:3f:a4:fe:69:89:82:c4:b4:bf:b0:d8:40:94:
                    8f:12:24:84:67:2a:4f:97:a7:57:d8:05:ae:9f:c8:
                    a7:fd:80:73:5b:4b:40:4c:8f:1e:5d:31:d3:57:9e:
                    1c:19:48:80:91:bf:f8:0a:03:cc:60:fd:50:b9:4c:
                    eb:4c:19:5b:2c:69:0e:2b:a4:5a:2b:e3:aa:c9:08:
                    88:cd:50:bf:2a:a6:b2:63:3b:d3:75:a6:d4:b4:d6:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:67:4D:37:52:33:9F:01:46:50:DD:BD:AE:4F:08:A4:18:F0:13:05
            X509v3 Authority Key Identifier:
                keyid:D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:80:3a:a8:41:33:20:49:22:31:26:e5:73:10:8e:25:74:52:
         51:99:52:5e:c3:13:75:f0:cc:9c:3f:39:12:8f:15:f4:48:8e:
         58:a2:2b:a6:3b:bf:2e:0e:7c:d0:f5:25:da:c8:f7:c7:f7:34:
         36:ca:4f:eb:9e:e3:58:96:db:a7:1c:91:38:b8:62:28:96:a1:
         18:c2:72:0c:40:eb:66:37:b4:eb:b7:e0:37:19:24:fc:88:b4:
         42:14:4a:a6:1b:57:44:64:50:21:d1:de:bd:62:d2:8a:1c:ac:
         2b:c3:d4:83:41:de:ac:39:24:81:8a:43:e1:90:d3:75:15:0e:
         8b:19:66:5c:cf:16:6b:7c:4a:59:2e:68:72:4e:6c:56:6d:25:
         aa:a8:cc:58:94:94:24:43:97:f6:29:93:61:8f:b9:c2:a1:a3:
         75:c0:27:51:61:f4:37:68:34:71:ef:a8:f0:4b:82:14:f9:35:
         5e:5d:6a:21:0d:90:28:31:cd:eb:6d:90:7e:c1:94:3a:cd:94:
         37:17:cd:a9:bf:bc:61:14:05:d6:e6:b7:a6:fb:46:f0:a3:15:
         23:e7:af:1d:0d:0d:1e:dc:7f:a9:35:00:84:e9:0d:47:96:d1:
         d9:96:c7:8e:8c:9a:75:4a:43:fe:6e:c6:2d:88:0b:22:c0:37:
         f3:e2:7f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----