Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
File:                     51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json)
Hash identifier:          iud3o8ThlkPo/801BoDsxyuOgSU0Fgv7LV4mTs0fV78=
Subject key identifier:   11:AC:36:37:98:B1:BC:20:20:9C:36:D6:DE:10:4C:E4:49:8D:16:28
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Certificate issuer:       /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial:       01962DF40C1EE873DE76DF24F3E51B0488A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
Manifest number:          0484
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: 7FH6YYlmefFLYOR7u9g4apj6p5KQIFvIuR7LfNIzsNE=)
                          2: Ylfj2CG1V0DaK4f8uH_BBUtoGWA.roa (hash: CAUuMYHSplNovMOYBe0Qjx/057sd/Jrw0wK6ui3RBo4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0c:1e:e8:73:de:76:df:24:f3:e5:1b:04:88:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=11ac363798b1bc20209c36d6de104ce4498d1628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:81:2d:7b:a2:3b:59:6c:03:3f:27:22:ce:10:
                    1d:14:42:89:3f:93:4a:1b:aa:d1:4a:39:59:08:8a:
                    9a:25:3e:77:c3:71:6a:cf:6a:f9:20:fa:2f:52:10:
                    77:5c:c6:49:1d:e7:8a:1d:dc:ba:1c:81:a9:86:66:
                    d6:8f:a6:60:c4:a2:93:ca:22:f5:0e:19:30:42:af:
                    c7:26:2c:73:d2:9b:84:54:98:2f:01:23:0e:9a:9f:
                    5e:7f:22:6e:4f:ae:c5:77:49:e5:9c:9b:87:1b:8f:
                    d4:ab:8c:46:0f:bb:53:5b:c5:85:29:ba:7a:d4:6d:
                    85:96:95:33:9b:e5:2a:52:f2:1e:2e:93:5e:78:76:
                    b4:43:9d:87:65:5b:c1:eb:d4:db:12:1d:62:f2:22:
                    5c:f7:7e:13:e3:95:41:4b:69:63:51:3e:ac:4d:e6:
                    73:67:b4:8f:be:4c:98:01:bd:7b:ba:84:91:4d:bd:
                    74:aa:02:fb:d3:c8:fd:1a:bd:b6:9e:dd:3d:0d:c2:
                    62:5e:4c:62:5d:99:7d:3e:dc:19:30:7c:71:ce:fa:
                    a0:c7:f7:a7:a2:b2:83:da:e2:ff:e1:ea:a3:f5:20:
                    b0:95:6e:82:ec:a2:2f:9c:4e:53:85:d8:5f:27:a0:
                    8f:ae:be:76:e2:c3:79:e0:60:ce:ed:f9:29:b7:77:
                    4c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AC:36:37:98:B1:BC:20:20:9C:36:D6:DE:10:4C:E4:49:8D:16:28
            X509v3 Authority Key Identifier:
                keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4d:f7:01:83:00:f3:7f:ac:68:89:ca:91:e9:53:6d:2b:a6:
         c1:2a:ef:31:c7:0b:59:7a:0a:00:d1:25:a9:1a:ec:20:c7:44:
         aa:19:4d:81:47:e4:71:57:d3:e3:3d:63:3e:f6:0e:d7:3e:f4:
         9c:f3:f1:e4:89:81:bc:9b:b6:36:0c:d4:c2:c3:0b:b7:da:b8:
         58:ec:f0:c8:01:41:8f:d5:84:88:6e:c5:ba:52:e4:63:03:53:
         c8:77:54:e4:82:18:dc:31:f9:af:b3:50:a6:03:f4:a7:b1:ac:
         b5:60:9e:ab:38:6d:57:6e:db:c5:c8:a7:5b:22:c7:02:29:62:
         ac:cf:2a:f3:8c:ca:7b:48:ff:03:32:74:6a:d1:05:0a:3d:c4:
         10:99:42:35:40:43:af:80:96:f1:f6:3d:fd:c4:f5:ed:ad:78:
         1b:66:d5:a7:da:30:38:8a:02:78:f4:15:93:78:a4:c7:bf:9e:
         16:cf:5d:0a:ec:d7:ed:1e:49:f3:18:6b:25:f0:d6:2c:e3:97:
         87:11:e8:0b:f6:0c:b8:8f:ff:d0:30:f8:cd:38:8b:a9:44:0b:
         92:6e:68:90:a9:63:6e:43:a4:23:b9:24:2c:06:aa:09:44:da:
         51:34:62:14:4e:62:29:50:cb:07:9d:c5:42:35:26:7b:46:cd:
         59:73:9e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----