Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
File:                     e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json)
Hash identifier:          uWkpgB7n9VmVCB4CWUpjkIM9eypo4dHUWIDTLeON0P8=
Subject key identifier:   45:32:2D:D1:8F:59:EE:C1:52:09:16:DC:49:A4:CF:AF:42:49:0D:EF
Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59
Certificate issuer:       /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
Certificate serial:       01962FAB2BB1A3B4DDF213F16215D39B6DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft
Manifest number:          04C2
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: KQb/3/jeuSRySPVxn/AsafP/eelVMnlg0SKqha6ZiUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2b:b1:a3:b4:dd:f2:13:f1:62:15:d3:9b:6d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=45322dd18f59eec1520916dc49a4cfaf42490def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:88:0f:8d:26:13:6a:03:81:73:c3:b5:12:
                    df:cc:3c:2b:b0:12:cf:6f:0f:7a:7f:01:7f:56:a1:
                    71:52:24:a2:3e:26:1d:c1:b7:06:0e:e5:3c:20:be:
                    fe:4e:11:c3:cd:9b:42:05:66:bd:b9:49:0f:5c:e9:
                    d3:4c:9e:83:ab:7b:8c:5b:b3:93:2d:fc:6a:21:f2:
                    71:f6:13:31:9f:60:29:7e:b6:4a:11:71:16:3b:50:
                    18:60:7d:c5:77:15:81:2e:73:ae:90:27:46:dc:2f:
                    d7:2f:3c:b8:44:c8:94:d7:0e:73:fa:52:b9:b1:0f:
                    dc:48:fb:bb:21:7a:d7:34:95:69:1d:d4:ca:cc:f7:
                    91:d2:8d:3c:a8:d9:c5:4a:11:08:d8:d5:64:6f:ef:
                    25:71:e1:1c:26:09:a0:4b:60:c6:af:c3:22:2d:07:
                    89:f2:25:65:d9:98:ea:69:da:76:cb:ea:01:33:c7:
                    8f:d3:37:76:cd:cf:5b:fe:da:c7:d0:f8:87:34:34:
                    23:59:91:08:61:c3:4d:24:da:6d:50:a9:84:d7:cf:
                    b8:c2:6f:a7:bb:9c:70:bd:48:8e:c0:6a:b0:49:26:
                    d5:4b:51:27:ef:cf:e5:90:02:9b:93:9b:83:d8:5b:
                    20:03:c4:5c:59:28:92:b0:b1:5e:0a:bd:43:1f:92:
                    ad:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:32:2D:D1:8F:59:EE:C1:52:09:16:DC:49:A4:CF:AF:42:49:0D:EF
            X509v3 Authority Key Identifier:
                keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:da:22:b6:4b:a0:fd:79:53:db:72:99:f0:c3:87:ed:3e:30:
         67:46:69:3d:b8:03:52:44:40:80:8c:2f:ee:12:e3:9e:16:25:
         08:f4:19:0e:e6:2f:35:14:43:54:86:38:c8:6d:71:87:59:11:
         95:63:3a:c5:d1:7f:9f:f6:f6:f1:ef:31:9a:76:e9:cd:4c:ce:
         70:6f:b9:2c:b1:42:67:d6:22:08:c1:a7:d3:27:bf:63:4b:e6:
         fb:5b:a3:f7:06:50:22:77:0d:ff:c4:a0:b7:82:04:c7:f7:02:
         7b:9a:f9:61:64:04:91:9a:f5:89:0b:65:30:77:1f:2c:b1:6e:
         15:ec:ba:f5:e2:78:af:81:f5:39:f4:35:7e:e4:68:9e:48:f5:
         9c:3c:24:11:8a:d5:96:d5:d6:f0:c5:0d:9a:48:4c:00:20:37:
         8a:19:74:1f:fa:7e:c8:ab:ac:36:1d:89:36:12:d8:4e:9b:07:
         04:8e:f2:5e:50:66:6f:22:50:ee:fc:76:b1:1e:ff:20:f0:c0:
         e0:83:20:51:78:48:3f:72:62:88:06:53:8f:b4:a4:64:f7:ba:
         25:0e:67:09:ae:24:72:e9:46:95:4f:23:9e:9c:c0:9b:d1:35:
         56:70:95:97:20:86:a3:21:af:cd:78:03:5d:0f:31:35:01:9e:
         f3:58:32:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----