Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File:                     C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier:          eR7njMHqBNMRTAcJZaNM5BKWP3//jWFz1VorsSNGRUg=
Subject key identifier:   03:2A:FE:07:E9:FE:BF:6B:7B:82:6A:3C:A0:34:44:5E:87:A9:EF:F2
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer:       /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial:       01962E99B4E337C6B53A1B1488AC5276D5FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: frDRyJ8Wnv8TjaOH2ct3qyy8kg8HCYqnbqpNssOxT0k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b4:e3:37:c6:b5:3a:1b:14:88:ac:52:76:d5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=032afe07e9febf6b7b826a3ca034445e87a9eff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:c1:e4:9b:c0:60:51:27:1f:b1:bb:2f:d0:
                    73:80:64:27:eb:37:99:9d:ef:10:4b:a6:8d:4c:24:
                    d4:4f:f9:cd:c2:98:0b:64:80:6b:00:c2:07:a8:db:
                    34:a1:46:33:13:ef:bd:5d:ee:57:84:0b:eb:24:af:
                    8f:c5:d9:98:58:6f:e6:26:02:7b:ef:82:13:b8:94:
                    55:2f:91:29:64:e6:29:8c:2c:7b:ca:18:a4:2a:ee:
                    16:6f:75:0c:3c:28:b2:c7:ce:46:01:34:0e:5a:ba:
                    93:2a:f4:a0:06:2c:3f:c7:df:8a:22:4f:21:98:af:
                    eb:78:d9:2e:0d:b0:8d:3a:5b:a7:34:f4:b2:ca:be:
                    97:5b:64:f1:b4:5f:fe:9f:19:ab:e6:c9:8e:1a:ee:
                    c4:60:ba:54:df:b8:fc:81:f4:34:6e:59:14:64:35:
                    e7:7d:00:86:80:c2:62:b5:33:a7:75:9f:ea:1e:26:
                    cb:4b:86:48:99:35:82:5f:03:6e:e4:bf:6d:22:55:
                    ec:26:99:4a:92:70:2c:88:b4:49:8e:b1:13:67:a6:
                    30:15:96:55:0f:c8:67:bc:92:32:06:69:98:86:03:
                    e3:0c:25:6f:f5:a7:b8:96:09:08:f6:7a:ef:ce:ee:
                    44:76:8c:dc:e3:49:0f:99:f7:73:09:2d:c6:1b:04:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2A:FE:07:E9:FE:BF:6B:7B:82:6A:3C:A0:34:44:5E:87:A9:EF:F2
            X509v3 Authority Key Identifier:
                keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ae:15:37:04:4c:4e:41:6e:fe:81:80:db:30:4b:de:86:e7:
         f0:64:72:6d:86:09:41:c1:47:64:85:46:7c:92:0d:dd:9a:d9:
         b7:9e:85:4f:3a:17:33:dd:93:ef:ff:60:2c:6b:16:22:c5:2e:
         d6:5c:cd:fd:72:dc:3d:d3:6b:59:82:44:92:86:06:fb:af:e1:
         2a:04:27:b6:04:33:f5:b9:8f:70:71:99:6e:c2:30:04:69:e7:
         69:43:44:03:19:f4:d3:9c:6b:f4:2d:6c:05:16:05:83:48:83:
         8f:b0:fd:3a:63:b3:75:ae:30:b9:4d:8a:48:23:f0:63:ca:00:
         52:9c:16:0d:1e:8f:65:4b:6e:81:81:05:7f:74:ba:30:06:bb:
         bc:b8:19:af:a3:e7:6b:9c:23:9e:39:0e:eb:b5:bc:95:ca:c7:
         da:d8:62:51:cb:38:5b:3e:da:8b:01:f8:33:48:5b:2f:bb:30:
         2f:ee:12:84:3d:bd:05:5d:54:6d:32:04:63:db:73:1d:0d:c1:
         04:dd:5e:e4:e4:68:a3:a9:9a:9f:d0:65:b0:f8:4a:0a:8e:64:
         71:0e:1c:d7:35:19:ad:4d:0f:d1:53:e6:70:d9:f9:fc:88:e6:
         10:ba:07:3e:fb:08:41:a7:07:7b:8e:83:65:22:47:90:71:32:
         ed:42:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----