Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File:                     4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier:          IWhJ0db9DvHM1tkdTz2WVEzFcpsbQcCgwsKxJ9uKUJE=
Subject key identifier:   9F:86:78:F8:EE:EC:1C:25:6D:38:E4:32:D8:E7:D9:BA:D4:E7:F0:D3
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer:       /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial:       01962F0691180F55839A4F74D536AA1F946B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number:          0C6B
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: MPEg6tQrYoG4D0MxHDE+mrFpBg98KBcPxPszFQ3Hbbg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:91:18:0f:55:83:9a:4f:74:d5:36:aa:1f:94:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=9f8678f8eeec1c256d38e432d8e7d9bad4e7f0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:8f:fe:6a:40:ad:4b:7d:a9:71:66:a0:c0:
                    f2:64:65:c6:da:bf:b0:ec:ab:c7:e7:e9:87:59:d4:
                    64:2a:f5:70:e5:55:0e:ac:24:f1:ea:92:94:ac:e3:
                    c3:51:3e:1f:13:ec:cc:a5:fa:6d:35:8d:f3:b8:77:
                    dd:5a:03:f3:2e:af:f6:14:b6:b3:a3:38:08:2b:84:
                    2e:d3:c1:93:a0:eb:b8:bc:0c:5a:6b:b9:0f:bd:9b:
                    b0:51:68:ba:4c:ef:20:de:5a:81:57:06:de:bd:ba:
                    2e:25:a4:6b:bd:9a:8d:07:7b:d6:a8:a8:b5:bc:1d:
                    9f:e7:fd:92:15:36:11:75:49:0f:d0:7b:41:d0:5d:
                    25:85:10:97:26:b4:9c:21:60:30:1f:1d:0c:ff:a9:
                    4b:d1:de:52:90:d1:8a:28:ef:fe:27:1b:fa:d6:54:
                    75:49:6b:fa:19:2f:fc:15:88:0b:40:6b:36:7f:4f:
                    51:26:f7:37:43:a6:2e:da:ec:53:11:ff:1d:1c:11:
                    35:62:ae:d6:8e:a4:09:ca:e0:3f:50:a2:be:50:c9:
                    97:d2:90:cc:e7:5b:b0:41:61:9e:21:ce:5e:c1:b6:
                    e0:0d:cb:23:7e:8e:c3:e1:a7:27:dd:4d:a0:d7:df:
                    7a:cb:12:b2:a4:c9:dc:d6:a4:78:4d:24:ce:a7:ee:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:86:78:F8:EE:EC:1C:25:6D:38:E4:32:D8:E7:D9:BA:D4:E7:F0:D3
            X509v3 Authority Key Identifier:
                keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b2:24:20:78:d6:f0:42:1f:c6:36:c3:94:ee:cd:eb:10:b2:
         57:6d:17:ac:cf:d1:5e:c9:4d:79:3c:f4:9e:65:ba:8b:06:b5:
         b5:8d:fd:69:54:37:87:c7:53:98:a9:df:78:6e:24:59:4c:e9:
         0b:a7:e8:da:04:dc:fe:21:57:c1:28:15:6e:fa:03:90:e1:b7:
         58:33:d1:74:90:23:27:1e:47:6b:a2:d2:00:aa:a0:20:07:45:
         6e:dc:02:01:1d:7a:71:a0:f1:8c:48:87:a3:7e:08:59:d8:3a:
         03:86:c4:6e:9e:8f:88:c6:7f:9d:1e:b5:da:1a:ff:11:0f:0b:
         75:e4:93:d8:9f:b0:8e:fc:c1:40:2f:32:0a:0f:3a:7e:05:fc:
         3a:57:a9:62:56:bf:05:6a:66:38:c5:d2:2e:85:31:52:cd:fb:
         b3:34:a7:33:de:cf:ba:6e:79:9b:47:35:1d:9d:e2:68:d2:4e:
         c3:7a:29:58:30:30:ef:09:58:03:67:ac:66:3c:cc:38:3b:b9:
         3e:94:63:a2:ad:6b:4c:f1:75:83:a0:b6:84:3c:f7:1c:ee:63:
         8b:14:29:ba:3b:0a:95:1f:65:73:ff:48:e1:a2:39:68:88:bf:
         5f:c4:62:b6:a6:c3:83:81:b7:4c:79:93:de:e8:f1:44:bd:f4:
         c3:d7:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----