Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File:                     4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier:          tEmC7cNJT45n3DC4K5+s8pJSZyxgIEclEozXY9PdPkQ=
Subject key identifier:   79:1A:D0:14:E2:33:8E:B3:5F:AC:56:FA:1F:3C:11:E2:36:EC:46:2B
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer:       /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial:       01962E2AFABBE4FD314B04D2EF52418FB901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number:          0449
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: d1Lrt26NzxspyM7C9n1CE12ze3h5TENK30MzfWoRE4Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:bb:e4:fd:31:4b:04:d2:ef:52:41:8f:b9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=791ad014e2338eb35fac56fa1f3c11e236ec462b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:33:8c:33:7b:ea:87:cc:d9:42:56:f1:5a:
                    10:fd:92:43:ee:f1:fd:cb:ed:04:ad:aa:4b:3e:16:
                    dc:fb:a6:50:00:b8:c1:e6:73:9b:e7:59:fb:a7:80:
                    8d:1c:c1:b2:d2:fb:2d:78:fd:ba:07:c8:8a:1b:e2:
                    28:6b:46:03:68:0c:d3:da:e5:59:b6:a7:47:ce:55:
                    81:7d:35:b4:25:e0:e4:0a:be:a7:e4:d8:f7:86:bc:
                    65:b9:43:ba:97:e8:07:cb:e4:8a:9d:05:7f:5d:16:
                    74:f6:70:88:22:f9:04:a9:75:87:a6:fb:af:66:74:
                    7d:8d:6a:27:1a:ce:dd:86:86:8c:2d:fa:9b:35:7f:
                    db:8d:dd:04:82:43:b8:5c:f8:80:bb:a9:8f:47:de:
                    04:5c:62:4b:4d:22:9a:d8:a2:88:e0:29:88:e3:5c:
                    a4:ff:59:99:06:ac:d3:df:07:28:9f:21:2b:12:30:
                    14:90:46:31:d3:23:89:39:bb:fa:0c:8d:d6:33:7d:
                    43:a1:35:09:af:42:44:06:14:21:c3:76:95:0f:82:
                    b9:bc:6d:f6:de:99:95:9e:57:9f:dd:fa:21:4c:df:
                    90:ac:d5:5d:88:96:5d:38:bc:bb:14:98:c0:1c:a9:
                    f9:c6:26:d0:90:fd:a7:25:0a:7f:8f:3f:c8:75:98:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1A:D0:14:E2:33:8E:B3:5F:AC:56:FA:1F:3C:11:E2:36:EC:46:2B
            X509v3 Authority Key Identifier:
                keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:54:35:ed:76:17:44:02:15:f6:9f:40:84:19:40:41:bc:5b:
         a5:b1:5a:14:52:c5:c1:aa:bd:5d:e1:76:6c:12:45:88:f9:5e:
         a9:98:35:0e:13:e6:9e:26:7d:c9:85:8a:71:4b:aa:92:77:ce:
         c6:ca:6f:49:ed:46:3e:b1:5a:bd:e7:97:24:d9:72:a5:40:0e:
         09:99:d7:0e:9f:26:92:af:fe:24:e2:b9:bd:b6:25:5c:68:9d:
         34:3a:c1:ce:db:4a:00:dc:12:8d:5d:73:c6:b4:dd:59:a8:5b:
         e1:e4:e0:bf:16:04:07:07:63:21:27:79:2c:4e:45:70:99:ae:
         37:3e:5c:71:50:93:c8:04:23:4b:e8:cd:f8:9d:63:81:e8:0b:
         2c:d8:00:e3:7d:94:c2:45:e1:76:cf:5d:03:ce:ec:d0:21:f9:
         64:a7:ce:47:85:94:98:53:29:d4:1a:18:e5:71:fb:67:6e:ba:
         8e:17:6c:57:f0:f8:c0:0a:46:b9:33:24:51:e8:b1:fb:ce:f1:
         bb:53:1b:33:23:3c:64:2b:b5:93:0d:a6:a1:9e:c3:54:63:ae:
         6d:92:7d:c3:e8:19:d2:82:8c:ba:3f:70:cb:0a:ef:35:9a:c0:
         91:a5:7d:21:9a:21:61:a7:b4:50:7e:a7:4e:90:ff:0f:fd:51:
         b2:42:71:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----