Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File:                     4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier:          RPfNiV3VSy+o3X7X114HTQaGmio5bRJX4maX/kbPq0s=
Subject key identifier:   38:04:16:BC:D6:9E:2D:D6:4B:7A:FC:E3:3E:65:6E:EA:C2:C0:43:7D
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer:       /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial:       01962DF3D87001ADEA89FD9E8F0ABBCDE6FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number:          066C
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: jfZLOItG45w8jYOFSjxPrDZpkRfs3T0r/m8jEw6/hoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d8:70:01:ad:ea:89:fd:9e:8f:0a:bb:cd:e6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=380416bcd69e2dd64b7afce33e656eeac2c0437d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:3e:6c:69:34:84:54:95:c1:91:6e:7d:17:
                    7d:55:36:75:10:b5:17:7b:90:09:e1:c7:bf:54:82:
                    22:41:15:2e:b0:ac:6e:3e:a9:02:e0:d7:53:46:fe:
                    0d:6c:f1:ec:c9:67:7d:65:34:ad:4e:ff:10:e3:92:
                    5a:b4:cf:14:a1:41:54:78:84:e5:3f:00:0f:57:0e:
                    97:41:42:b1:96:e8:ae:64:f5:50:d4:6b:8e:fd:5f:
                    a6:22:8e:86:4b:a2:f9:5f:26:fa:6e:7a:a3:be:e3:
                    03:fb:0c:90:c8:38:07:54:97:29:3a:d6:5d:c7:f4:
                    40:3e:9b:f5:8e:69:69:f1:db:9d:76:88:ab:67:47:
                    b6:d2:fd:b0:07:29:65:c3:b2:a2:78:16:5b:b9:27:
                    7b:a7:04:82:8e:ae:73:3d:3a:c1:06:79:ce:8e:21:
                    a9:eb:8c:62:cd:eb:e3:44:57:f0:79:45:aa:c5:ca:
                    9b:86:4f:78:76:0e:34:8b:5a:50:d9:3f:f3:99:18:
                    f8:0c:6a:fc:c6:00:b7:9d:9a:85:fa:a4:fe:19:0e:
                    0d:a9:dd:61:86:96:89:94:d8:68:07:ce:29:77:9c:
                    40:4d:20:e6:a1:58:03:34:99:62:68:fa:48:33:88:
                    6b:23:44:de:85:63:63:32:3f:17:ca:6c:e5:7f:40:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:04:16:BC:D6:9E:2D:D6:4B:7A:FC:E3:3E:65:6E:EA:C2:C0:43:7D
            X509v3 Authority Key Identifier:
                keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:c1:46:28:a2:78:19:67:ae:74:01:75:ae:e7:fc:46:0c:
         2c:db:24:c4:2f:c8:a7:18:f6:aa:ad:4a:a2:35:70:c0:02:2c:
         82:7d:21:ee:5d:ac:36:13:4b:45:a3:c7:9a:0b:4f:a1:0e:4e:
         e7:f0:94:26:9e:9c:3b:9c:18:b8:a6:cc:45:39:7b:71:9f:c3:
         98:de:d8:06:99:79:74:9e:ee:fd:6a:4d:2a:b2:65:94:b6:70:
         d2:f8:f7:09:af:27:b6:56:84:2a:5b:c9:c2:94:85:3e:63:02:
         6e:3e:a7:ac:ef:e9:5f:ec:b0:e6:ab:b8:c5:1f:39:98:20:7a:
         38:f7:40:06:2f:9c:01:84:61:08:b9:f3:70:ca:a8:cd:f1:ae:
         f6:dc:04:ec:b7:ed:59:26:fb:66:9b:45:73:67:b1:01:c7:01:
         c1:63:7a:85:19:fa:d2:21:23:f4:42:04:1c:79:84:49:71:31:
         ac:57:90:92:82:b9:87:1d:de:ec:9f:0e:4f:27:27:00:6d:d8:
         c8:5e:ff:d5:a3:a0:55:17:6d:67:8b:65:b1:57:aa:22:86:0b:
         9e:64:fd:98:b2:a6:8c:5f:28:78:28:fd:fc:4c:d4:ad:e2:d0:
         10:a5:b5:84:e1:f9:8d:e3:13:8f:00:39:c7:85:7f:1c:61:f5:
         54:1a:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----