Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File:                     pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier:          apXYPEx9P/JMrezVEpl37eMtvoBypLX0LTiehek1Qdg=
Subject key identifier:   50:B9:BF:70:AF:03:30:FC:7C:35:C0:07:C0:1F:6A:4B:A6:7C:73:B5
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer:       /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial:       01962E61CC563D06C46513C8817DA12A0DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: LqH7RjEeh8X60/z82SjoxDwuMRHX1/LfxDlWJPZoY2A=)
                          2: pV9OuJfGvboWa4RSwyOam_iwesY.roa (hash: RTkqdqbXmblScuzpz+Ud/Jj/+DA6UotPUIkNIsu6BJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cc:56:3d:06:c4:65:13:c8:81:7d:a1:2a:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=50b9bf70af0330fc7c35c007c01f6a4ba67c73b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:ec:b3:36:1a:64:dc:c9:43:75:04:9f:5b:
                    f5:84:79:ea:cd:05:e5:98:b0:e2:9e:a5:27:60:56:
                    bf:0c:af:06:d5:e6:7e:55:e8:59:38:08:69:65:09:
                    4b:6a:64:51:19:54:11:b3:16:d0:47:05:e1:f5:5b:
                    b8:8b:9e:03:f4:2e:61:c2:d2:f1:58:dd:99:0d:47:
                    27:02:8d:75:6f:c8:27:91:95:2a:71:45:39:44:54:
                    e8:d1:2c:d6:f4:fe:a1:a6:ba:5b:6e:bb:a5:9a:c2:
                    6a:1c:ad:19:0b:c8:83:77:45:ef:42:8a:fc:eb:ee:
                    75:be:b4:8e:2d:a3:e7:48:bc:85:6d:77:07:d8:2c:
                    75:12:f4:15:85:2f:8a:43:a3:e1:8d:20:8f:ac:85:
                    8c:96:22:2b:74:7f:4e:ee:03:85:db:d2:d6:1a:02:
                    fb:3f:34:78:a0:23:ef:28:80:cd:fa:79:1a:f8:32:
                    eb:72:f9:bf:1d:5a:19:ff:4a:bd:7e:3c:c7:92:12:
                    34:ca:cb:4f:77:00:3f:f1:64:7e:a7:3c:f6:c7:a0:
                    bc:51:31:3c:81:b9:f2:41:b6:93:88:3c:e1:a0:92:
                    7b:8b:4c:f6:d8:34:e9:99:18:d2:d8:d1:5f:9b:5a:
                    ff:df:84:e3:ff:2d:88:9b:9e:95:73:10:fd:09:0f:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B9:BF:70:AF:03:30:FC:7C:35:C0:07:C0:1F:6A:4B:A6:7C:73:B5
            X509v3 Authority Key Identifier:
                keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:95:6d:65:95:1d:96:f3:d9:39:13:63:b0:60:54:55:6e:6d:
         d4:11:26:71:c1:f7:77:67:a8:e4:bf:f2:a2:15:5a:d6:ac:d1:
         1c:6c:81:7e:cd:32:71:ea:a6:e1:11:79:76:12:d8:70:ab:f7:
         c6:f2:86:23:e9:68:d8:4b:ae:77:33:dd:93:09:64:f7:75:59:
         f5:4c:3a:1b:d4:0c:19:5d:b8:99:e2:c9:d5:c4:b2:25:c8:b1:
         42:89:ff:82:36:37:f8:3a:1b:55:f3:7e:9d:f5:b8:93:cf:51:
         48:93:4b:eb:55:c2:51:c8:b0:da:23:79:78:da:11:8c:1e:f8:
         b5:e9:be:ab:79:c4:b9:c8:c1:cc:b8:6c:8e:a6:86:ea:7a:21:
         12:91:19:b8:42:21:83:96:b2:c9:8c:8f:ae:2c:d6:59:ae:9c:
         3d:d8:0f:cb:2e:5c:e1:db:c7:98:bf:f6:c8:5c:c8:e3:6e:a2:
         5d:1b:25:51:c6:67:87:17:68:66:83:91:fc:bd:c8:42:cb:c3:
         34:86:5b:d0:9a:28:be:b6:06:b6:e4:4b:e6:7a:73:03:38:d0:
         16:ad:bd:3b:29:27:3b:16:6a:b9:65:50:de:29:8b:65:c7:10:
         45:48:3e:af:d8:3b:6a:e1:19:eb:ec:2b:00:b9:a6:f0:9b:0e:
         c6:4b:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----