Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
File:                     RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json)
Hash identifier:          Y+PTqwulGSGZ3xkSEBOjHbEl3cQEzQqmlk8GkohwcLY=
Subject key identifier:   52:6B:7D:31:29:94:A1:59:54:78:31:E9:D0:77:39:A8:11:22:66:34
Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
Certificate issuer:       /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Certificate serial:       01962E991AE47539E74A27FF2828E517FEE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
Manifest number:          074C
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: ZS3x/xD3RZqN7/C1TEzp124NUoEFprWF5NEhu4K99uk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1a:e4:75:39:e7:4a:27:ff:28:28:e5:17:fe:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=526b7d312994a159547831e9d07739a811226634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:7b:70:b4:58:a1:2a:e3:c1:d4:03:8f:5d:
                    c8:83:ec:f6:d0:ef:16:cf:a2:e0:c3:3b:43:a7:0c:
                    40:ab:d1:0c:e6:44:fd:07:42:c7:c5:42:bc:c7:f6:
                    5c:7a:24:70:b7:fe:58:a1:fc:3f:56:ce:09:ec:9d:
                    14:8f:7d:be:62:de:9a:16:55:34:4e:4d:f9:7d:79:
                    21:aa:f0:19:e6:a1:40:ae:da:54:29:ce:d0:2a:7c:
                    f3:ec:52:05:47:47:1f:98:34:91:fa:16:cf:ff:d6:
                    ca:3d:f2:96:01:b7:db:da:e6:fd:8e:ca:fc:5c:69:
                    e8:95:5a:a5:36:62:2f:b8:59:e7:00:b9:3a:10:b4:
                    76:10:36:81:6a:8e:1f:37:42:5e:4a:20:9d:8a:7e:
                    2b:b9:c8:f1:44:6a:0e:a6:1a:79:fe:f3:70:04:53:
                    59:cf:f5:ee:51:32:f5:ec:dd:cd:c6:04:18:90:b8:
                    79:b2:b0:20:6d:77:c2:a0:15:25:c0:65:28:81:eb:
                    15:6b:bf:5e:6a:78:e7:93:4e:5f:a5:f7:07:40:95:
                    57:ea:33:8e:f9:14:94:f2:ed:56:d3:34:b9:56:05:
                    d4:c5:e6:43:23:f6:1e:77:5e:6c:3c:6c:29:26:ff:
                    d7:45:f4:c1:b2:e4:19:4e:03:3f:b1:fa:a6:da:cb:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6B:7D:31:29:94:A1:59:54:78:31:E9:D0:77:39:A8:11:22:66:34
            X509v3 Authority Key Identifier:
                keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:84:fa:7f:f5:e1:02:d2:fe:20:77:52:bb:48:d2:7b:42:46:
         d3:22:4b:51:fd:de:9e:f1:3f:a8:87:01:cd:9b:08:bc:14:dd:
         06:5e:46:d6:cb:7b:32:25:1d:79:e7:cd:fc:c7:eb:e1:21:a3:
         91:4c:db:a9:6f:b8:17:c0:18:27:14:fb:41:42:e9:20:eb:8f:
         7b:80:db:04:aa:26:f0:4e:97:27:4e:fe:7d:be:c1:46:0f:ad:
         b9:8b:37:d1:c5:a4:13:8a:58:3b:f1:28:79:bc:33:57:27:55:
         52:13:95:23:00:6c:82:d5:a5:97:25:6a:70:0c:89:f5:2e:7a:
         20:74:9b:cb:c0:13:5a:b7:80:12:07:5d:6e:cb:fc:24:a0:ed:
         85:bd:7c:b6:f4:36:4d:76:c6:75:94:a5:98:42:6d:55:10:b5:
         3f:04:6d:70:ba:4e:67:2f:e3:a5:21:6b:f5:92:16:e2:84:03:
         f8:84:41:46:fc:ae:51:3f:77:52:6b:f9:c4:af:e4:e1:95:d3:
         2e:6d:79:77:74:c0:5a:ae:30:ff:b8:5f:3c:d4:7d:00:c3:a2:
         ec:d7:c8:d9:88:c1:a2:e8:09:7c:fd:28:83:b5:36:44:c6:15:
         4a:5f:c9:16:a7:b0:1e:28:d1:55:74:ee:73:00:ff:ed:85:fc:
         fc:5d:77:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----