Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
File:                     X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft (raw, json)
Hash identifier:          eE1Qhiv2VoHZEs8F7A31ww/QGVqnQ7KhZaSlSmndOHM=
Subject key identifier:   B7:18:7D:EE:E0:2A:D1:00:57:09:32:1A:AE:53:3C:50:2E:23:1A:9D
Authority key identifier: 5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C
Certificate issuer:       /CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
Certificate serial:       01962FABA1C53F1C3968A91270AB07CDE9F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft
Manifest number:          0B05
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl (hash: GW5KeFLARMdpF2QMn1WMYgWmYTbP40k6536rfFsIW1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a1:c5:3f:1c:39:68:a9:12:70:ab:07:cd:e9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fb7466d8e92b21c7b1aa135f30efe6e73e1f86c
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=b7187deee02ad1005709321aae533c502e231a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8a:59:65:0f:70:e8:82:81:06:7a:ca:eb:f7:
                    6a:f6:1e:ae:68:df:38:3a:f1:a0:c8:35:98:41:88:
                    e2:e8:49:56:52:86:d5:8c:c2:46:02:06:31:9e:04:
                    b8:7b:9e:06:ba:17:4e:df:e0:1e:da:ac:a1:3a:31:
                    00:f4:c0:1a:2d:56:18:0c:7f:fe:93:e1:76:57:4e:
                    c8:9a:49:9e:50:58:d8:7e:be:96:77:7a:e3:35:04:
                    45:68:ed:63:9c:51:94:2d:d3:27:7e:fc:ca:6b:4a:
                    46:81:df:3e:c2:f4:21:f5:1d:97:dc:2a:0f:fa:f1:
                    71:6a:8e:46:be:d0:7c:bf:cb:ae:e3:f5:22:0b:1e:
                    4e:42:31:10:79:34:07:0f:42:68:af:ea:ca:99:d4:
                    a8:82:63:3b:5f:d5:65:09:e8:c3:0b:14:76:2b:05:
                    bc:f9:5a:57:c4:a5:13:c3:dc:86:9f:0a:57:63:63:
                    4d:86:a8:94:38:d0:2e:28:29:83:69:2d:4e:69:70:
                    e5:81:60:b4:e3:8b:42:d0:02:ba:74:f3:b2:f4:bc:
                    81:f8:59:38:aa:de:a8:84:1c:56:32:10:4a:97:f2:
                    91:31:b1:3f:96:36:61:78:94:67:ef:f2:a8:eb:02:
                    27:e4:26:45:76:ee:40:d2:b0:29:f4:a7:8e:24:4f:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:7D:EE:E0:2A:D1:00:57:09:32:1A:AE:53:3C:50:2E:23:1A:9D
            X509v3 Authority Key Identifier:
                keyid:5F:B7:46:6D:8E:92:B2:1C:7B:1A:A1:35:F3:0E:FE:6E:73:E1:F8:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7dGbY6Sshx7GqE18w7-bnPh-Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ed289-d661-4343-a2e0-0b92679d3625/1/X7dGbY6Sshx7GqE18w7-bnPh-Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:25:fc:8e:97:df:20:ce:db:28:3d:ff:9a:99:84:5b:53:d0:
         0b:2d:70:92:41:2e:08:94:65:3d:f8:ae:59:74:d8:6b:cc:f6:
         d9:57:bd:2b:ab:07:f1:3d:5a:00:a2:f3:70:f0:94:b8:fb:18:
         e1:de:86:21:b5:69:f3:27:cd:db:c5:96:d8:46:53:ca:11:ba:
         e4:17:2b:fd:36:a8:2e:3a:8b:f2:47:1e:b1:12:a7:b7:1c:08:
         30:08:86:f3:b9:56:03:1f:6b:76:1b:96:64:1a:4f:e5:09:23:
         c1:49:97:19:0d:d2:e8:e7:72:f3:74:40:ee:28:a7:d1:bd:17:
         c9:b2:e1:c6:27:bb:82:44:6b:f7:39:4f:04:c9:62:5c:12:e9:
         2a:8b:d1:1e:d0:38:13:de:e1:1d:01:f2:64:74:25:20:38:64:
         98:a2:e9:96:23:48:c5:ab:78:92:18:7d:87:20:04:10:40:20:
         ad:f5:ce:97:7e:1f:35:79:ae:8b:e3:fb:a8:28:ba:91:df:81:
         e2:45:51:a4:d4:ae:51:7d:c1:c8:0a:e1:d6:ca:44:6e:ab:17:
         36:b1:eb:55:05:b3:96:96:24:60:b4:7d:b7:aa:d8:0f:b4:d6:
         c0:3d:98:42:06:ce:ae:46:4d:ef:a6:09:62:1f:8f:ec:f0:a7:
         f7:bd:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----