Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File:                     4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier:          2A1o0iJ5dhiffIwwddbe+2ZcLe+hb9RQdXYwftiHrts=
Subject key identifier:   EC:A5:8C:4D:7A:97:B5:95:14:56:56:3A:1A:C7:F4:2B:82:24:71:5F
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer:       /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial:       01962FAB20D2073D1922B23E3DE35BED05A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number:          0169
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: NMJk1gB0SPjnbpN2dYZ1GcUIw/xJmyCBMG3ia0WkK/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:20:d2:07:3d:19:22:b2:3e:3d:e3:5b:ed:05:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=eca58c4d7a97b5951456563a1ac7f42b8224715f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e5:7c:08:5c:fb:0a:34:f5:41:f0:41:cb:2a:
                    90:96:97:43:51:8b:3c:8d:a6:2e:df:3b:2f:3a:22:
                    74:be:f5:df:78:fe:8b:e0:92:17:93:89:12:06:a8:
                    6f:fd:6a:5b:fa:de:31:4a:b1:a1:d6:4d:fd:b4:d4:
                    34:90:6b:33:47:77:7d:98:9d:7d:1a:15:fe:74:92:
                    cd:01:ab:13:e2:39:9e:2c:8c:6d:a7:0d:42:a7:c8:
                    c2:56:69:3c:0d:73:9c:82:9c:9b:00:d9:a4:72:71:
                    da:fe:df:00:95:2b:04:96:4b:12:4e:dd:7e:7f:6b:
                    80:58:3e:0c:42:5e:a1:be:ad:da:ec:d5:95:f0:81:
                    f0:a6:1a:61:f3:0e:6f:e7:be:69:c2:96:db:02:83:
                    e9:26:e2:c7:95:34:45:0b:7e:e3:6c:39:bf:5a:72:
                    3e:85:60:a0:e5:81:8e:04:88:dd:d8:ae:e6:68:17:
                    19:34:93:ec:16:90:f5:07:13:ae:b3:72:c8:74:a3:
                    77:86:39:af:11:f3:8a:ef:eb:20:1b:09:3b:ed:b7:
                    81:db:a3:09:d9:07:4c:c8:83:9e:e1:ef:a8:6f:dd:
                    23:d9:0f:a8:b2:2f:47:8c:b5:0a:f3:b7:e8:ab:8a:
                    0d:32:0c:fb:b1:db:83:c0:20:4c:51:bb:f7:56:b1:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A5:8C:4D:7A:97:B5:95:14:56:56:3A:1A:C7:F4:2B:82:24:71:5F
            X509v3 Authority Key Identifier:
                keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:87:1e:68:1e:75:e0:5e:0f:d7:ed:4f:9f:aa:c0:57:30:b8:
         3e:09:a7:f6:e4:e2:6f:5a:d9:ab:c8:b8:e4:1f:69:4c:eb:17:
         41:1d:ba:ed:88:cc:d2:bd:9c:d0:56:58:e5:da:28:3c:33:cf:
         59:7c:ad:cb:08:b8:0f:43:13:24:3d:55:ef:9b:6f:1d:f2:be:
         37:f0:e2:4a:8d:93:8f:a5:05:73:9a:61:5c:63:76:79:d5:90:
         65:f7:06:80:c6:7c:7b:1d:6a:0d:d6:f2:9a:81:3e:86:a7:5c:
         50:ae:5a:c8:d3:6f:7e:1e:a2:bf:ba:d2:28:6c:80:d0:33:f7:
         33:43:18:a8:ff:45:ca:fb:90:8b:1b:cf:85:59:1e:fd:7a:a7:
         3a:01:16:64:19:d1:89:0e:55:f3:12:0e:26:75:e8:7c:5a:07:
         b3:4d:7c:fe:52:14:a2:02:8f:1a:cd:87:75:ba:a7:72:6a:f1:
         86:ec:d7:cf:d1:bc:3e:9e:8d:51:5c:72:7f:4e:af:3c:e1:62:
         60:ba:ca:de:4c:9f:b1:9b:30:d6:27:0e:ca:9b:24:da:db:82:
         4e:26:cb:cd:ab:c5:a6:3e:51:03:30:e1:00:35:7f:7a:18:b8:
         ed:1a:06:af:35:f9:b9:12:a8:8d:7a:af:39:ca:28:09:4f:8e:
         7f:5a:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----