Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1d457b-40bd-448f-a915-20c8ab92696f/1/U4sGLLVCbwDmU3Pu9OTNihwn9o4.mft
File:                     U4sGLLVCbwDmU3Pu9OTNihwn9o4.mft (raw, json)
Hash identifier:          cfvJpH3qjosoDPGf049IeVrJc+e3G0bvoqVMGUVyS28=
Subject key identifier:   64:71:3A:64:02:87:B2:26:DD:64:21:AC:36:92:E9:09:53:2D:57:67
Authority key identifier: 53:8B:06:2C:B5:42:6F:00:E6:53:73:EE:F4:E4:CD:8A:1C:27:F6:8E
Certificate issuer:       /CN=538b062cb5426f00e65373eef4e4cd8a1c27f68e
Certificate serial:       01962E992F145E0A10E8A36D02F68223B703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U4sGLLVCbwDmU3Pu9OTNihwn9o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1d457b-40bd-448f-a915-20c8ab92696f/1/U4sGLLVCbwDmU3Pu9OTNihwn9o4.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: U4sGLLVCbwDmU3Pu9OTNihwn9o4.crl (hash: E4bu6O3HOS3/rxbdcfNTPozU3O4LxyGBnXCBNv5pIXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2f:14:5e:0a:10:e8:a3:6d:02:f6:82:23:b7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=538b062cb5426f00e65373eef4e4cd8a1c27f68e
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=64713a640287b226dd6421ac3692e909532d5767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:3a:a1:cc:d4:7e:68:f5:f3:e3:a3:e8:db:
                    e9:33:5e:5d:5e:7f:d2:8f:f3:39:ba:ba:9e:c4:f9:
                    5e:04:1a:b4:c8:2a:5b:d5:62:d8:3f:5c:55:f0:9d:
                    43:ad:d7:f0:63:a1:54:ae:55:45:e0:a5:35:97:72:
                    a2:ae:d7:51:22:35:9d:39:7a:36:48:7a:a8:51:90:
                    7c:ee:45:12:39:33:d9:16:a9:fb:77:1e:b7:ee:3a:
                    95:dd:c3:5a:3c:9d:8d:e0:ea:49:1e:82:3a:02:db:
                    d0:1a:f7:b5:aa:fb:b1:e8:e2:42:ac:05:c8:09:11:
                    6d:d7:e4:5c:18:ef:c1:d4:ea:79:fe:62:a7:8d:65:
                    8a:cd:c7:de:c6:7d:d4:ae:58:ea:23:04:79:f7:76:
                    dd:1a:b8:5e:b8:aa:1d:2d:2f:eb:5f:0a:75:77:84:
                    6b:73:6c:2c:74:c3:6e:54:ad:0e:b9:00:b8:d7:9e:
                    db:40:69:53:3b:8d:da:65:ce:13:2f:ce:19:9d:08:
                    c2:55:78:d9:b9:76:10:57:5f:75:13:84:16:f4:2c:
                    0c:ba:6b:f9:a7:3f:38:27:b4:6d:28:d4:3e:ac:30:
                    93:6d:56:bd:e2:42:18:b5:0b:d2:ae:8d:fc:47:bf:
                    ad:97:77:06:72:d1:7d:cc:14:48:d6:05:ec:86:74:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:71:3A:64:02:87:B2:26:DD:64:21:AC:36:92:E9:09:53:2D:57:67
            X509v3 Authority Key Identifier:
                keyid:53:8B:06:2C:B5:42:6F:00:E6:53:73:EE:F4:E4:CD:8A:1C:27:F6:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4sGLLVCbwDmU3Pu9OTNihwn9o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1d457b-40bd-448f-a915-20c8ab92696f/1/U4sGLLVCbwDmU3Pu9OTNihwn9o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1d457b-40bd-448f-a915-20c8ab92696f/1/U4sGLLVCbwDmU3Pu9OTNihwn9o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c1:94:6d:62:e0:40:38:75:01:7b:9e:d0:b2:f5:5c:4b:15:
         64:20:2e:a5:c3:ed:3d:8f:44:fb:4b:2f:68:f9:38:c1:d7:eb:
         ea:bf:9c:a1:7b:04:2f:f2:ac:98:93:16:b5:da:92:10:63:9a:
         91:06:62:3a:fd:8c:93:e8:b3:4d:3b:f3:78:bf:83:46:24:ad:
         93:0b:9a:1d:aa:f1:cb:ae:bc:a5:32:80:8d:d8:43:b2:20:1c:
         29:fe:bc:8f:e9:32:bf:78:a2:da:b8:78:06:be:07:d9:46:bc:
         30:cd:c4:b2:00:c7:46:a6:3c:0f:8c:47:57:bf:16:2f:5e:78:
         ab:2b:0b:68:ae:55:af:d2:17:06:b3:60:06:74:f4:80:03:ae:
         66:02:19:79:21:ea:dc:e8:f0:5d:b9:56:f9:e6:26:e1:71:41:
         cd:f9:53:fc:50:70:cd:ae:de:3b:b9:8d:40:61:6d:67:f7:75:
         cb:0f:41:a2:28:6f:41:9e:ec:2c:1a:ef:d6:3a:bb:98:3a:41:
         7d:87:16:3e:66:bd:cb:ec:62:96:95:70:3c:7d:5a:5b:e6:6b:
         3b:0c:97:1b:e7:ee:75:14:df:a1:ce:19:4c:95:aa:da:ab:48:
         f0:ea:a2:c5:27:01:95:0f:a5:19:b8:8d:8a:dd:2a:8b:ca:6d:
         d2:12:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----