Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File:                     RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier:          I0ezTmyiUCltIlbtxnebGuBs/OpDf4izhAUAlwO2Omw=
Subject key identifier:   7A:8D:F5:F6:62:54:CE:4C:4B:E5:B8:0F:30:2B:C0:89:18:9F:F1:03
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer:       /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial:       01962E98E19A8769119EF4A770B26D772E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: 9kwa2dKkbq18OHhgdFTX/Qop769yi+qTxIg9FQitPVA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e1:9a:87:69:11:9e:f4:a7:70:b2:6d:77:2e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=7a8df5f66254ce4c4be5b80f302bc089189ff103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:ec:b2:c6:33:2a:d7:dd:2a:3d:c2:31:7d:
                    28:10:9e:83:2d:19:58:03:8c:5c:94:ca:3d:c6:3c:
                    7e:b0:a8:fb:05:5e:3a:68:ca:e3:15:08:e2:12:a7:
                    55:88:66:85:a0:19:88:a1:89:24:04:70:69:4a:80:
                    b3:e4:7c:8f:d9:71:1c:c0:21:86:53:ab:20:e6:a9:
                    f1:dd:8b:36:31:a5:5a:64:65:84:3c:3a:b1:58:7d:
                    a4:89:6e:4a:a4:5b:a7:b7:c6:d1:34:e6:c4:99:e0:
                    9e:81:c0:32:89:40:25:92:35:b2:42:39:a5:f2:20:
                    57:7b:aa:dd:b9:05:1d:45:8e:71:8f:0b:2d:f6:47:
                    0f:c7:3d:ed:77:02:33:2b:1e:0c:58:e2:48:b2:2d:
                    0e:04:bf:ce:35:b3:fc:74:a6:23:6c:ca:a8:c8:93:
                    d0:dd:df:8e:d1:da:b8:3e:a9:89:95:1e:57:84:37:
                    de:85:41:66:47:70:d8:70:8b:65:99:96:cb:ee:3d:
                    61:71:be:cb:d0:54:a3:6d:db:c1:e2:e6:21:5a:04:
                    ba:90:5d:32:1f:e0:a2:90:4e:2c:de:c3:1a:63:b8:
                    ac:9e:c3:35:94:6c:fb:54:8a:d9:6b:79:6e:74:e6:
                    cd:51:9d:03:57:c1:94:08:d3:2f:ad:15:23:7c:12:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8D:F5:F6:62:54:CE:4C:4B:E5:B8:0F:30:2B:C0:89:18:9F:F1:03
            X509v3 Authority Key Identifier:
                keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:27:ef:01:39:2b:2e:f6:78:3d:0c:de:16:d6:df:95:66:dd:
         b5:f8:37:35:d9:3a:36:7c:1c:dd:46:cc:78:8f:68:e1:2a:2b:
         be:f5:fc:4a:56:32:43:ec:76:8e:08:1b:78:16:f9:df:1b:7d:
         e1:1f:36:0c:f2:44:e8:85:eb:38:fc:d3:77:1c:46:f6:5b:f0:
         ab:0b:e3:cb:86:50:be:22:cc:86:0a:01:25:25:4e:8b:91:f4:
         cd:6f:a5:fb:d4:17:68:b9:95:cf:c9:a5:0d:08:95:89:a8:06:
         89:68:e5:c3:3c:c8:fc:c9:98:24:26:5d:cc:f6:64:92:ef:77:
         ba:ec:dc:95:ef:38:f2:6c:c3:9e:01:9f:ab:02:be:0b:ae:11:
         63:48:fb:23:68:a4:1f:a0:ca:3d:60:30:c5:f4:c4:13:b9:46:
         7b:35:41:03:11:2d:50:bd:2b:7e:bf:16:85:16:d3:e9:6c:dd:
         9b:53:0b:8c:27:91:d4:fc:77:7e:ca:50:7b:ce:52:07:31:eb:
         8f:1d:79:23:ee:55:3e:b0:69:f9:e9:3f:78:38:0d:1e:9f:94:
         71:4d:4b:2f:8c:d5:d1:db:f3:30:a6:72:89:8f:f2:16:a6:27:
         f4:5d:c8:bd:82:73:52:bd:f0:14:5d:83:a3:df:9b:0d:4a:6c:
         76:eb:26:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----