Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
File:                     4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json)
Hash identifier:          Xht1iYA88ysFBRMhsIk4ClkE12awLg8v2zTHOCj9eSs=
Subject key identifier:   83:A7:B9:84:B9:1D:B0:A1:E2:FE:44:83:66:F7:A5:FB:28:D4:45:38
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Certificate issuer:       /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial:       01962F0667EBC0127DFDFB4933FBB2D3BC57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
Manifest number:          034E
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: NUyTjX/dq3FFgsuqdykB8YdGdASkx7WOjUfJxYTq1TI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:67:eb:c0:12:7d:fd:fb:49:33:fb:b2:d3:bc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=83a7b984b91db0a1e2fe448366f7a5fb28d44538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:61:55:0b:28:79:5b:ab:e8:7c:8b:78:69:
                    0a:29:4c:51:d0:cb:29:f2:d4:06:73:7f:74:e6:bf:
                    21:d8:03:21:d5:85:dc:b2:f2:2a:ad:c2:a4:4b:3c:
                    9c:57:5a:c5:86:45:5e:5c:11:1a:7a:06:fe:65:ee:
                    9f:1f:f6:eb:9a:bf:d5:bf:79:fa:53:0c:9e:52:3f:
                    9c:d7:4b:db:53:d8:1b:bd:60:26:aa:97:4b:2e:85:
                    ca:d8:87:69:85:2a:cd:fe:0a:db:c5:9b:1a:0b:a8:
                    7d:80:82:df:95:78:82:9f:70:93:34:ed:64:b4:20:
                    cc:2e:9d:da:bf:e6:ca:c3:ef:e8:83:25:cf:70:6a:
                    45:93:a6:c9:c9:d9:d9:02:7e:ec:47:bf:28:a2:bf:
                    9a:af:e3:d2:a5:e4:f3:0e:66:01:09:05:e3:20:f6:
                    dd:3e:32:ad:10:81:64:9a:2b:04:29:39:1e:88:60:
                    60:d8:de:bf:c8:04:6c:af:fe:ec:0d:09:34:ee:ed:
                    1f:3c:cd:9c:7e:ce:d6:ce:46:38:3b:e2:26:3b:73:
                    d0:0f:42:58:d9:03:85:fe:6b:6b:6b:0f:6c:82:d0:
                    b6:67:d2:ac:4a:1a:6a:95:5c:e3:59:af:cf:a8:78:
                    53:7e:d0:37:0b:c4:4f:57:58:01:f2:6b:6e:ac:c1:
                    93:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A7:B9:84:B9:1D:B0:A1:E2:FE:44:83:66:F7:A5:FB:28:D4:45:38
            X509v3 Authority Key Identifier:
                keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:37:b9:96:16:3c:1b:0e:42:83:93:91:95:59:e9:fc:bd:f3:
         0a:1b:6a:1e:a4:e4:6a:5f:bf:f2:68:32:4a:2e:07:3b:c4:be:
         ff:f2:fc:3d:90:e0:cb:1c:9e:f7:c9:0f:92:e3:31:6d:a2:16:
         ab:2d:42:b2:75:61:69:2e:03:ba:f6:92:e3:b7:1f:cd:d8:1e:
         55:3f:c5:4c:7b:b6:33:2a:ff:db:bd:c2:e7:d5:e9:8b:00:d0:
         57:a2:2f:27:0b:f5:eb:69:1d:08:be:91:da:9d:64:17:06:3f:
         b8:70:51:45:0d:71:31:c2:c5:0d:74:c2:42:29:ea:34:25:24:
         06:4d:8b:4b:bc:48:70:fe:95:1a:fd:5a:fd:8c:f6:87:be:fa:
         45:1b:5f:f8:17:d4:3c:16:a4:5a:9a:1e:46:b5:a1:6f:1a:36:
         2a:79:91:6b:ba:6f:10:df:b0:3e:d4:23:f7:55:ba:a0:d3:48:
         c5:6f:c5:d7:a5:30:d5:5f:22:32:07:cf:1b:c9:40:65:ed:9e:
         59:ff:74:43:05:f3:7b:47:71:02:fe:87:6c:b3:8b:2e:fb:34:
         f6:70:a7:c9:18:7f:4a:c6:56:ea:e6:78:17:b7:cf:70:b9:84:
         21:b4:a0:32:3f:89:9a:5d:c2:de:97:3c:44:21:1d:76:96:d4:
         15:5b:73:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----