Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File:                     xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier:          VCyTRy5dv1+3uMX2n09d32tPO0dYLODYmRDFIbx743Y=
Subject key identifier:   D7:60:38:7A:B9:F2:FF:00:08:47:24:8B:71:49:B9:81:85:76:E1:BA
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer:       /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial:       01962ECFE1C96C6FA459110EB9FD3D5E1045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number:          0437
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
                          2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: TZ6TSBKLfeF72FSoorm7JDuWmhWRHhnijR7Amreqczg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e1:c9:6c:6f:a4:59:11:0e:b9:fd:3d:5e:10:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=d760387ab9f2ff000847248b7149b9818576e1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:72:1a:64:28:62:5f:46:06:18:79:a3:b4:
                    ac:85:6c:d3:6a:26:47:dd:b7:b4:cc:50:4a:1e:b8:
                    3d:b8:8e:0e:ba:df:e6:54:74:ae:a0:41:ef:09:84:
                    84:3f:16:eb:a0:20:e2:81:72:ed:69:2f:6f:83:e7:
                    de:86:b1:75:17:b2:16:4c:b2:8d:b0:98:7d:3a:73:
                    3c:12:ab:46:bf:ce:40:a8:3a:bb:a9:af:d2:7f:9c:
                    d9:32:c2:a3:07:8f:63:ac:64:09:90:87:4f:cd:09:
                    b8:6b:cb:dc:2b:b3:a7:c0:25:dd:92:69:5d:d1:92:
                    ec:8b:ed:f0:de:27:47:c9:65:0e:f6:d2:48:b0:0f:
                    b3:dd:dd:76:40:d3:f0:83:89:26:dd:fa:ce:d6:df:
                    88:3d:c9:c4:ef:a6:87:7c:5f:1e:77:ed:d2:6f:34:
                    c0:c4:75:b2:f1:d1:ad:2a:e5:43:10:77:8d:a6:b8:
                    8a:6c:3a:6f:49:29:57:ed:52:ab:e5:a5:1e:84:78:
                    c7:8c:18:2e:8c:18:f4:66:10:c6:83:1a:ea:88:0e:
                    7b:6c:3d:b2:47:91:91:02:c5:04:30:76:c8:30:da:
                    58:76:c8:8f:e5:13:a2:07:b0:25:b3:f5:32:6a:d7:
                    1e:5a:5e:c4:41:a8:1e:49:2b:72:1f:a1:8b:b2:a5:
                    71:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:60:38:7A:B9:F2:FF:00:08:47:24:8B:71:49:B9:81:85:76:E1:BA
            X509v3 Authority Key Identifier:
                keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:7b:43:17:81:62:62:c7:a5:54:eb:0e:50:ea:c0:aa:40:c6:
         93:a1:a2:64:55:28:33:5c:69:6a:bf:2a:fb:cc:7f:72:81:d5:
         ed:37:96:78:95:e4:26:98:30:b9:fc:79:e3:2d:a1:e3:99:1d:
         39:d5:6f:b8:bc:c2:9b:1c:a8:30:89:f0:d2:bd:64:58:70:d8:
         90:90:66:62:1d:27:f2:00:80:08:62:71:9e:43:fe:8f:a1:1c:
         dd:1d:2c:65:fa:cc:a7:f1:c0:81:99:30:f2:ac:fa:c1:fd:58:
         0d:f9:40:c1:8f:25:85:70:d6:c9:e7:4b:a4:21:52:7f:87:0d:
         6e:25:63:40:30:ad:9c:63:a0:ab:82:43:f0:30:d4:29:ab:00:
         32:42:bb:28:77:f2:8b:34:85:29:de:ae:dd:7e:80:d9:41:4a:
         9a:cc:a2:2a:f3:d2:ec:5b:b8:21:94:82:1a:92:6a:1e:9a:fb:
         65:94:68:51:93:bd:3b:70:75:47:4f:10:1d:19:a4:b8:ae:95:
         d4:87:8d:8f:fb:2a:6e:f3:05:df:d4:78:b6:d1:c3:53:92:32:
         d5:13:75:01:48:9f:52:3f:78:a1:31:33:d6:89:cd:cf:9e:00:
         51:65:d2:73:3b:40:09:2f:4d:53:d5:87:13:5f:a3:b2:55:c5:
         b6:95:8a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----