Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File:                     49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier:          khief6PAdJldovHY6Ksr1A2G0ycH+IGZ+JLQBuZPBdA=
Subject key identifier:   AD:B2:1B:39:BD:60:4D:DB:83:54:9C:37:EF:0B:D6:AF:8D:7C:BA:34
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer:       /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial:       01962E98FF42819F07B2E706BC6A8CE4F2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number:          0DBD
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: gUd+yNCHP40lQyvI/3z3P1AgrDj8iY9zlL7XRim8aAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ff:42:81:9f:07:b2:e7:06:bc:6a:8c:e4:f2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=adb21b39bd604ddb83549c37ef0bd6af8d7cba34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:b5:ab:e9:5d:a8:af:c0:3e:cf:11:fc:ee:
                    1d:da:60:77:c1:34:f3:10:95:7a:9b:3c:a3:f3:b2:
                    aa:4b:dd:dd:1f:b3:89:56:c2:96:98:00:25:f5:79:
                    9b:88:f8:88:3b:46:ff:67:7e:50:31:91:20:b7:81:
                    d4:b3:ee:ba:67:6a:74:4a:01:0f:72:5e:54:11:62:
                    80:98:5b:ba:97:55:90:85:7a:3b:db:28:78:a3:95:
                    eb:9c:96:a9:6b:22:b5:32:40:0d:76:14:30:55:88:
                    0e:49:67:b6:c1:9f:e3:71:c7:5a:c9:77:28:ee:1d:
                    e1:4d:12:2a:64:b7:26:da:b4:f4:65:11:94:84:24:
                    82:2b:6d:9b:ec:0f:ba:a6:6e:1f:eb:95:ee:54:a6:
                    1e:8b:5f:c9:9f:d7:60:63:72:5d:64:ae:35:d1:a8:
                    04:a5:0c:05:dc:73:91:a4:c9:aa:d9:99:31:53:1f:
                    0c:14:58:64:a2:56:b5:87:c9:cd:93:f1:fb:f3:90:
                    4c:02:43:8e:fd:f3:3f:87:54:ea:0a:33:1c:b1:be:
                    40:e4:77:f1:81:aa:31:18:f8:47:16:c8:37:34:e4:
                    10:79:09:c0:12:f7:06:d3:6d:4f:86:90:0a:e5:5a:
                    60:bf:63:5f:82:99:e0:14:b7:eb:2e:1a:ff:ca:98:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B2:1B:39:BD:60:4D:DB:83:54:9C:37:EF:0B:D6:AF:8D:7C:BA:34
            X509v3 Authority Key Identifier:
                keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:69:4e:dd:cc:9a:84:42:0a:c3:00:7b:88:04:ce:f3:a9:5a:
         8c:bd:6a:64:b2:2b:ca:bc:41:51:0c:d8:6c:06:e9:82:37:86:
         10:bf:cd:cd:92:9a:03:4a:2f:51:cc:07:c1:31:47:ed:e7:05:
         13:34:0a:a7:ad:f1:41:db:10:14:ff:2f:6c:e0:7e:a7:d4:f4:
         e9:eb:9d:f5:4a:21:be:49:4a:07:00:a9:a8:32:89:41:8b:61:
         1c:eb:0f:1d:91:69:4c:14:52:7b:24:a8:0a:bf:c5:08:cf:30:
         fe:97:f9:b7:6f:08:77:fe:8b:70:54:fa:d0:51:35:98:d2:5c:
         08:49:65:9d:de:20:0e:67:e4:54:9f:a0:b5:4e:b7:6e:8c:cf:
         f5:c6:8c:88:88:5a:d4:1b:3a:3a:1e:ec:61:f2:01:5c:3f:0b:
         cd:cd:2f:ca:53:00:f0:e9:1b:be:05:19:f4:3e:c7:1e:ec:63:
         f3:1a:b2:34:8e:c4:f0:27:0a:b8:40:01:77:4c:91:3f:e8:b0:
         cf:9a:33:d9:d9:62:a6:af:38:9c:e5:6e:d3:57:69:91:8c:0a:
         56:4e:f1:fe:54:dc:9b:a6:a3:a3:ac:13:a5:32:75:2c:db:a1:
         32:be:c3:2f:61:16:9d:9f:3f:60:2f:bd:f5:db:1f:d8:88:cf:
         da:0c:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----