Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
File:                     5D7dxEvG9TRFds9ZrwATXGtiwB0.mft (raw, json)
Hash identifier:          TeEmM3pxpRl/TBXqDOarQXABxqt4Zehre5Yam3B7JJQ=
Subject key identifier:   DF:A7:93:2A:C6:2B:0E:C7:AB:7C:CA:88:B9:9C:BB:B5:6A:35:2F:E5
Authority key identifier: E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
Certificate issuer:       /CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Certificate serial:       01962F07461982B4B5FC8F027C84C005D4D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
Manifest number:          0B51
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: 5D7dxEvG9TRFds9ZrwATXGtiwB0.crl (hash: N63oT2Gs46TPV7zrVb8HfiNRuU+RJCevOIBdqwhZF2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:46:19:82:b4:b5:fc:8f:02:7c:84:c0:05:d4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=dfa7932ac62b0ec7ab7cca88b99cbbb56a352fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:69:c9:1c:8f:28:f4:e6:89:09:63:36:c5:
                    7a:0c:55:8d:fe:f4:de:3e:76:5f:e8:68:b4:0a:8f:
                    6d:d6:f7:86:ac:76:6d:7e:50:03:01:5d:ed:99:05:
                    53:f5:e1:78:28:3b:d5:31:e2:cc:c7:b7:d9:8e:18:
                    7f:ee:7f:6f:a2:2e:10:43:2d:44:6c:67:c1:96:67:
                    e1:85:ef:eb:e0:05:58:71:bb:e3:bd:21:90:71:94:
                    f1:9a:69:0c:be:dc:d6:a8:ff:26:15:9a:53:85:1a:
                    0a:a6:69:a6:da:d6:e6:0f:c1:36:4a:6a:cc:7d:24:
                    0f:da:7b:94:db:e6:18:15:42:89:18:03:cd:c6:13:
                    ea:47:3e:1a:78:2b:e2:59:12:4a:7a:be:6f:fc:80:
                    32:4f:ab:a5:49:f1:45:ec:46:2c:f7:42:95:5c:33:
                    ef:da:c4:41:a2:e1:3d:cc:81:25:98:6d:35:bf:02:
                    ce:3d:21:81:1a:8a:82:97:4e:bc:50:09:20:46:60:
                    91:cd:97:6e:4a:0f:a1:ec:3c:08:ff:33:a0:9b:16:
                    66:ee:d3:96:2c:28:d8:b6:92:fa:c9:ee:da:95:b5:
                    89:9e:80:d5:1a:c9:a7:95:6f:d9:ce:3f:d2:39:ec:
                    fc:6e:d9:c1:9d:68:88:a0:52:c5:4f:e6:7f:1a:ae:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A7:93:2A:C6:2B:0E:C7:AB:7C:CA:88:B9:9C:BB:B5:6A:35:2F:E5
            X509v3 Authority Key Identifier:
                keyid:E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:fd:45:50:a6:62:a0:a8:93:b7:27:ed:a3:c1:2f:31:d6:
         96:60:c4:b4:a5:be:4c:62:ac:41:1a:c0:1d:48:60:d7:d7:e2:
         b4:90:67:aa:a7:2a:79:90:91:ea:01:47:02:50:f6:76:88:fa:
         4c:30:9a:5d:ef:9d:1a:4a:1f:df:0d:40:8a:0f:88:44:b5:ad:
         84:e5:6e:06:1c:60:4c:c2:3c:08:2c:5a:85:0c:a5:d9:d5:9b:
         b7:3f:e3:b9:f9:85:1e:76:5e:09:71:2d:11:5d:ec:a2:25:49:
         2d:47:2c:0d:79:a3:18:62:d6:b7:38:c3:ce:33:c8:07:f1:df:
         ac:4a:d8:ab:0f:33:62:9c:5e:eb:8d:c3:f4:9c:19:4a:0b:0b:
         cd:2e:6b:06:de:ab:15:10:05:b8:ed:cf:17:c4:5b:fe:cc:a7:
         d0:bd:1b:dc:59:29:bb:9b:c0:3d:46:38:a3:8f:d6:c5:82:29:
         20:76:32:a8:8e:15:b2:89:46:5d:cb:1c:ec:73:3d:46:b7:d6:
         53:46:72:7c:42:ab:3b:d5:2b:b2:3e:f0:ff:59:e5:34:f7:af:
         a6:67:3e:88:99:d6:82:59:83:0c:7c:3a:54:07:96:5d:90:8f:
         fc:69:23:a0:c6:4a:91:ef:78:8c:a8:75:20:2b:7c:8f:37:b6:
         a0:68:8a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----