Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File:                     5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier:          i04aIrRHiFFaUhmnUA4N4MZvjXySmMJ122NQ53axTvY=
Subject key identifier:   8F:1C:89:93:85:6C:29:70:95:D5:1F:AB:A2:24:74:B7:2E:A2:8E:BF
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer:       /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial:       01962E99B488C0BFBA106C149A52CB15D829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: 8K+qhYoMiGei6B7EnxMZ1eAoNTanwa/fouvXqX0iJ3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b4:88:c0:bf:ba:10:6c:14:9a:52:cb:15:d8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=8f1c8993856c297095d51faba22474b72ea28ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:24:92:ca:b5:26:10:51:ab:dc:4f:66:41:
                    02:67:7b:43:ba:65:b5:6d:fa:44:df:31:84:06:c3:
                    45:18:b8:90:47:ca:bc:c1:6e:fc:1f:19:ce:05:e4:
                    08:a5:f3:56:e3:4e:7e:20:c7:a2:bd:a7:45:6d:4d:
                    0d:65:8d:8f:77:65:96:f2:88:8f:0f:01:2e:33:ee:
                    ce:e7:65:24:cc:02:88:3f:de:ac:e7:25:b3:b5:c8:
                    1b:af:6d:7a:e8:33:92:ce:9f:11:fc:29:e4:34:7c:
                    bd:40:69:06:b5:27:63:6e:29:2b:fb:4b:82:7e:b9:
                    e0:f0:4f:93:02:c3:7a:a3:d9:8a:73:e9:f6:6f:df:
                    0a:d9:73:02:c9:33:c1:06:e7:cf:6b:34:48:64:19:
                    f6:21:a5:99:04:b8:0d:7c:00:bb:29:6c:ad:e6:0d:
                    ee:dc:51:7f:1f:a6:fd:e4:4e:b0:4c:31:c8:23:69:
                    e5:01:e4:f6:7a:62:fe:f8:c7:e7:38:c6:4a:98:0e:
                    70:cf:7c:8d:e4:05:38:9b:d0:f6:05:43:c0:d8:69:
                    b5:18:7f:9b:10:4c:f8:f4:c0:94:cf:9f:b9:44:f1:
                    ea:59:31:29:82:d4:e1:78:bc:5e:79:1a:9f:fa:38:
                    98:22:4a:92:8d:f9:6a:5a:8b:75:fc:42:0b:2b:f7:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:89:93:85:6C:29:70:95:D5:1F:AB:A2:24:74:B7:2E:A2:8E:BF
            X509v3 Authority Key Identifier:
                keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1b:4c:79:bd:fd:71:73:fe:9d:99:d1:93:6e:e8:67:1e:67:
         ef:9d:7c:54:e6:15:f2:b5:0e:f9:13:40:88:6d:07:90:f1:6e:
         be:1f:73:5a:d8:af:94:7c:f4:85:03:5f:a5:41:18:cc:6c:ce:
         d6:8e:bb:b4:9d:36:d8:40:1f:12:de:7c:4d:f0:4a:13:62:76:
         e3:c5:f0:ce:c3:85:45:9f:fa:8b:55:a7:ab:6b:a8:cd:47:00:
         46:0a:b0:db:25:62:b1:7b:6a:99:fb:c5:fb:3d:4f:13:33:35:
         ad:d0:bb:8e:fb:04:e3:4b:01:b9:fd:e6:04:0f:5f:72:45:d2:
         52:ae:6c:fb:75:b4:72:bc:f9:15:18:09:14:a1:6f:14:f4:cd:
         49:bf:9b:18:80:cc:57:00:30:94:61:3e:64:ed:a5:75:c0:6c:
         8a:c5:be:2a:57:92:8b:12:63:52:f6:a3:83:7b:19:ab:ce:36:
         8a:ab:f6:96:ab:9a:3c:cb:38:de:51:9e:e1:6e:59:dd:b2:9e:
         6a:a5:10:03:f8:a6:57:00:ef:70:9d:e3:4f:64:0a:f9:13:c6:
         1d:73:4b:79:f6:b8:d0:96:e6:18:10:21:2a:e7:3d:4b:43:83:
         38:0e:59:40:75:18:fa:77:ae:a2:3c:65:f2:6a:c3:7d:f7:36:
         61:9a:39:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----