Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File:                     4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier:          0TqqlxV+1YDXKBjIG3udJKj0u2+xzmJXgIBN07NWa80=
Subject key identifier:   5E:C7:57:8A:79:55:98:2E:0C:8D:01:1F:AE:A9:09:18:9F:EB:D0:BD
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer:       /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial:       01962DF3D471A71B200AA0B67BF5E501D596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number:          0125
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: z2VQN5S/wVCl0zzd3C+8H9gdLOPBLegamovVqWBFU3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d4:71:a7:1b:20:0a:a0:b6:7b:f5:e5:01:d5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=5ec7578a7955982e0c8d011faea909189febd0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:11:f9:bb:2a:00:d8:83:ec:72:38:a0:8f:
                    39:1a:10:0f:0e:fa:4f:71:43:8e:2d:4a:33:0b:ce:
                    77:43:61:01:cf:03:06:ad:5c:80:b4:d5:7b:c3:8d:
                    c5:ca:76:cc:7f:91:ae:cc:bf:d0:03:60:15:00:1b:
                    ff:aa:e1:e6:54:81:67:78:9d:4e:61:4a:43:af:da:
                    07:c4:9c:db:aa:39:1c:3b:66:a3:6d:8a:da:83:58:
                    40:d6:f4:ac:d2:77:f3:fd:e6:3c:84:20:c0:d4:c0:
                    43:3e:ec:a5:b1:b5:dc:e6:c1:4c:cb:78:98:78:aa:
                    0b:45:45:20:ba:74:03:f1:07:22:7f:2d:c7:f0:46:
                    87:79:ba:f1:4f:ad:b5:cb:02:13:b4:d1:4a:9e:77:
                    2c:32:1c:76:22:96:45:57:e4:b3:e7:09:b9:d7:71:
                    63:34:35:56:49:8f:6d:4f:b0:55:cc:4a:83:b1:04:
                    10:4f:23:65:17:39:63:7f:e7:37:1c:75:46:f7:b9:
                    22:95:ab:38:46:34:b4:ef:58:f2:b1:fc:79:07:ce:
                    f7:10:7d:f1:a4:77:d5:b9:f2:23:6e:16:8e:22:df:
                    d8:d7:bf:ed:9f:7f:be:c5:84:ca:05:28:3e:26:29:
                    05:2e:7f:15:ec:0d:32:3a:fd:ab:3f:4e:e1:37:bc:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C7:57:8A:79:55:98:2E:0C:8D:01:1F:AE:A9:09:18:9F:EB:D0:BD
            X509v3 Authority Key Identifier:
                keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:9e:a1:0c:bc:36:e7:2b:56:aa:00:38:80:96:96:3f:80:
         10:ae:82:a9:57:36:80:23:d2:a1:53:b3:f9:98:cb:b8:61:42:
         5a:a8:28:b2:f8:8a:4d:02:ad:0a:41:dc:77:45:9a:86:3b:93:
         cf:f7:47:f9:1f:ca:6f:a8:14:0f:74:b8:6b:ea:f1:11:13:fd:
         36:0c:55:01:b0:8f:f7:88:c0:ed:90:22:d2:14:1d:ff:c7:1a:
         a0:dc:6b:3d:e6:10:fd:59:5f:a6:2f:78:7a:76:d4:f0:34:fc:
         31:d1:55:73:4a:3d:d7:b9:b6:e9:61:0a:8d:c0:eb:c9:11:39:
         55:11:8f:be:05:c4:56:dd:9a:c9:95:52:e6:f5:ed:cb:de:e2:
         e5:bc:cb:8b:8b:91:07:72:69:9b:cb:46:e2:be:ed:3c:50:ed:
         c3:5c:8b:6c:39:8f:c0:1c:bd:cf:74:cf:24:b2:25:c4:53:96:
         73:27:86:43:7f:23:9e:b5:de:bf:da:31:fb:42:4b:de:7f:1b:
         5b:b3:15:cd:49:09:76:43:19:79:e2:77:a2:e9:d4:2d:22:d5:
         2e:91:17:4e:7f:43:e4:40:55:69:34:cd:c2:ae:65:8a:ce:22:
         a2:27:41:c1:9b:4e:24:64:e4:6e:dd:be:86:17:ce:dc:ea:03:
         ed:f0:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----