Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File:                     eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier:          0MoGPveMlKIeYg2IR97KY2MO4FkaCAy3jfRg4nv/Cnw=
Subject key identifier:   74:06:0C:ED:90:D4:A0:25:4E:04:BA:FF:A0:DC:45:53:90:83:0C:B0
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer:       /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial:       01962DF3958B35B92BE9C0B52476B2BBE4E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number:          0AA8
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: UXM92AOy+5WEP3VMzWanw55bwuvKaquK/ZEgBYmiMUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:95:8b:35:b9:2b:e9:c0:b5:24:76:b2:bb:e4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=74060ced90d4a0254e04baffa0dc455390830cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:d5:c5:63:7e:91:9c:2b:20:6b:38:36:6c:
                    af:d3:d2:3d:a4:02:e8:5c:34:44:e2:39:fd:39:38:
                    74:3c:3e:9b:e9:8f:04:a2:1a:9f:cf:23:be:02:a0:
                    9c:6e:89:3e:d0:2f:92:04:18:2a:70:82:cf:45:6d:
                    a5:3a:7f:3a:0d:b8:72:6f:90:37:a9:37:e3:ef:5a:
                    c2:8b:d9:be:d1:1f:20:e0:dd:a4:cf:5f:aa:7a:2e:
                    80:89:39:ac:3c:64:21:47:ef:f9:e8:15:9b:dc:15:
                    f8:56:6f:fe:24:79:94:63:46:19:39:3d:a5:81:17:
                    22:9f:1f:dd:e3:50:1c:1d:2c:47:02:2b:81:51:76:
                    61:d5:a1:f3:bf:4e:d3:30:c2:40:6a:9e:06:e4:92:
                    9b:e8:02:73:35:98:5c:22:ee:cc:6d:a2:0c:3d:14:
                    25:d7:80:8a:51:a8:85:cd:14:c6:17:59:6b:42:bf:
                    a1:b4:d3:c8:64:d7:c1:fe:20:67:d7:c3:65:ae:e8:
                    2a:18:c1:88:fc:b1:cc:5a:90:ce:a1:d8:ad:4a:7d:
                    c2:ff:76:c7:49:a9:4d:0d:7d:ea:8a:e0:34:5a:50:
                    59:a3:c9:7e:5d:f0:6e:a1:b6:f8:40:97:7c:23:0e:
                    01:48:e2:1b:74:e0:e5:60:cc:a1:12:58:83:d0:47:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:0C:ED:90:D4:A0:25:4E:04:BA:FF:A0:DC:45:53:90:83:0C:B0
            X509v3 Authority Key Identifier:
                keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:63:93:67:40:77:07:6c:03:fb:8d:88:56:f1:9d:8c:3d:05:
         38:5a:6a:02:90:a9:48:0e:0a:25:91:1e:f8:9c:7e:83:72:43:
         c9:3e:24:89:4c:1c:97:19:e6:fe:7e:7b:e0:df:b7:9f:52:82:
         6f:fd:40:f1:4a:d7:2f:6c:15:37:7c:5b:54:39:6d:18:68:3d:
         d8:59:98:3c:b3:d1:ee:4c:e9:4f:6a:93:c9:58:37:12:aa:9b:
         3b:7e:13:1c:ff:59:f5:24:07:72:e6:de:99:c3:ba:e5:38:39:
         11:5b:c0:21:c9:44:53:48:e5:42:7b:b0:b4:05:b5:c6:88:62:
         8f:bd:33:3a:8e:28:d7:5f:8f:0c:2c:aa:42:0e:87:f9:92:b5:
         80:84:13:22:bf:2f:20:6b:8e:1a:7e:f3:16:b6:18:0a:22:00:
         01:1c:fb:10:86:bd:03:ed:77:32:fa:0d:31:3d:c3:d5:5f:e9:
         e8:1e:91:94:e4:dc:0d:e9:f3:e6:c0:97:b8:a9:e2:71:dc:41:
         1a:65:0e:19:51:f4:ab:ef:9c:23:3a:1f:33:cd:59:56:f2:cd:
         22:a4:86:5a:bd:14:b8:a0:b4:ba:97:3e:12:c3:07:ae:b0:42:
         43:25:15:43:4b:d9:42:0f:1a:06:8d:cb:61:d5:f9:bc:b8:ce:
         30:ac:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----