Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
File:                     xLxp1Co7FePOy5HHcrpkM8URvpk.mft (raw, json)
Hash identifier:          Per8+WW2DRUJlZeyhgqgbPmML5uxLY92T9FlYMWeHd8=
Subject key identifier:   72:8B:4C:C5:1F:DD:78:D8:45:29:FA:46:36:D9:E4:FD:FF:BE:88:2A
Authority key identifier: C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99
Certificate issuer:       /CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
Certificate serial:       01962FAB347992BB9266DBEC129D5B950E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: xLxp1Co7FePOy5HHcrpkM8URvpk.crl (hash: OYP2c6MBAnXZiKa6Qn2/S8f4FG3TuF6XFrAwUg4WTKQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:34:79:92:bb:92:66:db:ec:12:9d:5b:95:0e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=728b4cc51fdd78d84529fa4636d9e4fdffbe882a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:35:df:b8:63:c1:52:65:22:eb:ff:ff:75:
                    f3:a1:e1:d7:f6:30:24:39:a3:30:43:dd:0d:d7:8e:
                    b2:38:a7:b1:17:1d:e5:56:6a:0a:b2:1b:75:12:cd:
                    ce:91:8b:b4:82:1e:52:fd:c7:54:79:2b:09:b2:cc:
                    8a:ad:27:a9:d4:10:bb:4b:17:cb:85:23:3f:8f:26:
                    90:c5:00:07:33:1c:64:f5:af:a4:41:2c:f6:72:36:
                    41:0c:0c:22:2c:93:43:c1:03:e4:10:5b:ef:ae:60:
                    45:c4:0a:8f:fe:d1:54:cc:04:57:4b:b8:bd:48:2a:
                    f4:d4:0a:27:e6:c9:fc:b4:f7:41:78:8d:04:a7:5f:
                    03:25:27:6a:e2:67:63:7c:9e:04:73:c1:b1:38:19:
                    c9:5e:6f:b1:70:42:77:2f:36:64:c7:81:80:2c:0c:
                    ba:dc:ee:86:7f:34:ca:b8:02:18:cc:b6:8c:26:1f:
                    a4:e7:fb:c7:72:9a:05:91:94:43:33:e0:31:c3:16:
                    28:97:47:8b:e2:f3:68:51:fe:a6:63:e3:0f:11:54:
                    a0:eb:c7:b3:f1:6c:db:4e:fd:e1:14:68:5f:bc:48:
                    c2:52:0f:24:27:fb:55:bb:c8:5d:6c:8a:89:02:04:
                    32:92:dd:73:dd:49:bc:dc:65:78:76:c8:99:99:1d:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8B:4C:C5:1F:DD:78:D8:45:29:FA:46:36:D9:E4:FD:FF:BE:88:2A
            X509v3 Authority Key Identifier:
                keyid:C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:0c:b1:b3:28:49:be:fc:84:fe:11:cf:56:b1:6d:d1:94:4f:
         33:6f:7c:f3:08:49:7c:9d:7b:42:a7:02:7a:0e:0f:10:91:c8:
         8c:5c:da:16:40:42:26:5f:c8:fb:b2:c1:7d:50:d3:9d:4a:e7:
         ae:16:5e:aa:47:e1:7d:98:58:32:dc:f7:d2:6c:12:83:45:92:
         00:58:7e:60:c9:b3:69:1c:21:e6:a6:74:e2:03:f8:5c:1e:47:
         69:98:9f:4c:75:5f:50:52:16:74:71:79:c6:ae:9d:49:eb:a2:
         87:9f:71:36:94:09:9d:0f:80:9d:80:29:6f:56:3c:d6:dc:48:
         dd:e3:dd:ce:3b:58:ae:0e:6d:57:ff:e7:78:3b:f1:03:e1:5d:
         5b:5a:4f:da:ef:b0:8b:fd:54:d3:21:6f:2b:85:4f:2d:5a:c6:
         52:32:ee:db:d1:1c:34:7a:69:38:b9:db:23:50:8b:7c:4c:fa:
         c0:16:94:ea:22:1b:62:32:7d:85:4d:11:97:4c:12:50:69:92:
         86:3c:ca:90:61:0f:e7:f7:f1:3b:36:e5:b1:83:18:86:4c:6d:
         b4:e2:a5:48:ca:68:f4:82:48:13:6f:84:22:ce:9d:02:3f:b1:
         23:d0:94:73:f4:77:90:0f:a2:c9:5f:37:0d:0e:af:cf:dd:a2:
         b2:4a:98:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----