Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
File:                     RgxXERGq_A1R5f3ggjC_eLieSkg.mft (raw, json)
Hash identifier:          /lP0GLo/yndeW2zNNMMZm1AOu4OeOwxgKkm0C0AwKS8=
Subject key identifier:   F2:46:0E:80:8A:94:22:4A:0F:26:F3:0D:BD:1B:EE:28:94:3B:F2:9B
Authority key identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48
Certificate issuer:       /CN=460c571111aafc0d51e5fde08230bf78b89e4a48
Certificate serial:       01962E99A4C13B26B728AC18BE07A4714A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: RgxXERGq_A1R5f3ggjC_eLieSkg.crl (hash: rV04nfDQC564bUJGyY3QbrMuHqv+9OwfRtgbWUn5dAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a4:c1:3b:26:b7:28:ac:18:be:07:a4:71:4a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460c571111aafc0d51e5fde08230bf78b89e4a48
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=f2460e808a94224a0f26f30dbd1bee28943bf29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:2b:c3:4a:30:42:2d:4e:57:18:57:0c:b4:
                    15:d1:70:c5:3c:fa:1f:0a:fd:6e:f5:80:0b:31:2d:
                    19:35:61:5b:f9:65:75:e4:29:57:89:7a:2d:c6:8e:
                    e3:c7:44:7c:79:74:65:dd:df:76:a6:04:c6:9f:e6:
                    35:cb:8f:0c:f4:77:ee:a7:b7:c2:46:d0:03:2e:fb:
                    61:78:ee:10:17:d8:5b:db:3c:b0:82:49:55:87:db:
                    73:02:4f:1e:a2:b7:c7:fa:50:58:2e:fa:85:9c:d2:
                    2f:4a:5d:0c:0b:10:51:1e:59:2d:ff:54:de:40:de:
                    90:94:91:17:f6:7a:4c:34:4e:43:41:f7:52:2a:52:
                    7d:e2:d6:8e:f2:f3:37:7a:ce:07:c2:fc:2c:18:1f:
                    a1:97:e2:73:b9:1a:cc:1a:ac:9a:cd:b0:ec:e1:5b:
                    e7:f3:db:99:43:b9:4c:2e:86:ec:b4:c3:20:e9:2d:
                    78:9f:19:4e:e0:48:9d:cc:d8:ad:a3:a9:18:12:1d:
                    84:1c:6b:1d:c9:21:c8:3b:f7:31:9b:92:d1:77:50:
                    b5:43:52:3f:7a:9c:6d:47:9f:a6:e1:33:27:19:67:
                    80:a8:bc:6f:9c:20:1d:aa:70:d0:2f:50:1b:2b:40:
                    18:d0:44:04:01:17:16:11:c5:a0:80:1f:58:12:cb:
                    65:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:46:0E:80:8A:94:22:4A:0F:26:F3:0D:BD:1B:EE:28:94:3B:F2:9B
            X509v3 Authority Key Identifier:
                keyid:46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0c:6a:90:71:42:c5:73:8c:14:1d:8a:57:e7:df:32:67:cd:
         3c:ea:e9:9c:85:09:8c:8c:1a:9f:4d:9a:25:d4:e1:61:eb:12:
         81:54:88:19:6d:7e:ae:46:7d:08:27:55:44:82:cf:ef:01:d4:
         cd:be:69:21:95:fa:33:b3:86:fa:a3:34:fe:0f:81:a6:97:7d:
         7e:9d:b1:b8:57:b1:e8:f2:93:27:2f:99:1f:af:24:e7:13:73:
         2a:b1:ff:ef:33:bf:f5:b2:26:7c:c7:a6:da:e1:57:f5:67:93:
         fd:6e:87:a7:91:44:e4:8d:40:9f:1e:8f:70:ae:f3:4c:40:73:
         c8:25:88:a5:62:5b:02:38:7c:02:fc:ba:12:31:e5:a2:2b:66:
         a1:e0:f7:d6:5d:9a:1c:fe:9b:e9:d3:a5:05:aa:54:a7:6f:99:
         90:c7:bd:c7:20:08:be:64:ba:13:67:75:cf:e5:2e:cd:68:da:
         67:7e:2f:63:e4:8a:2c:9b:71:ae:af:c3:94:d0:db:93:10:be:
         41:38:07:61:f7:70:7b:f4:26:8d:ad:6c:34:e2:07:6f:cd:8f:
         9f:06:58:52:35:f0:5c:12:e8:12:cd:c9:62:cc:47:ca:4d:fe:
         8a:25:e2:e5:d4:22:b2:46:30:a2:4c:9e:73:48:1d:50:05:08:
         81:2f:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----