Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File:                     76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier:          WyJBNCIYpAqhGvHYQroTkb90o86bfXE9F2TJa9Yzp1s=
Subject key identifier:   86:3C:0D:06:4B:6B:12:8E:0F:17:AE:4B:E2:24:A6:DF:37:D3:30:E8
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer:       /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial:       01962F06DDD4A81D356BE20F89DF437CB537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: PjCRnZPdqPTDDw3Vzw4WMK8JSqAMiswNXbdQskGxNBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dd:d4:a8:1d:35:6b:e2:0f:89:df:43:7c:b5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=863c0d064b6b128e0f17ae4be224a6df37d330e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:1c:89:b3:ad:03:83:b5:4b:f1:37:a5:c8:
                    ed:f2:63:37:0a:d2:73:d4:e8:ec:22:45:73:57:fa:
                    3c:cc:14:e3:e6:af:d7:9f:5e:45:04:a4:0b:3c:67:
                    9a:6b:5b:6d:4f:8f:63:80:ed:b8:4c:dd:0d:cd:dc:
                    6c:17:61:d7:38:f1:2a:10:79:00:56:e5:07:38:a0:
                    12:99:ab:42:a7:27:7a:a4:18:20:0a:fe:7a:23:d3:
                    f8:00:9b:cb:52:1c:eb:07:29:d5:7a:7f:0f:ea:09:
                    08:77:f6:c6:93:4a:79:25:ee:bf:b8:7d:27:bd:b2:
                    4f:0e:5e:41:86:8e:33:91:ce:9f:12:56:a4:26:82:
                    ee:92:e6:3e:e2:c8:f3:07:59:dd:c2:5f:86:17:36:
                    a1:98:b9:0d:0d:56:51:96:ca:fb:20:50:37:f5:9b:
                    06:c4:59:53:68:b3:7d:ff:d2:a8:e7:6a:8a:e1:37:
                    e4:ce:8f:c2:9d:68:d1:09:60:ca:d1:93:b8:6d:ef:
                    a8:57:34:8e:85:45:9a:c4:77:13:c5:e9:1c:c0:bd:
                    ac:36:0b:ed:6e:29:27:d3:3e:ca:ab:cc:87:e8:76:
                    34:9f:82:78:39:00:8a:a5:6e:8b:d9:59:38:6b:75:
                    19:34:e6:1b:af:b7:b8:78:74:68:1d:d6:d4:d8:53:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3C:0D:06:4B:6B:12:8E:0F:17:AE:4B:E2:24:A6:DF:37:D3:30:E8
            X509v3 Authority Key Identifier:
                keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:a3:bb:da:49:3a:e0:71:fc:3e:e7:68:44:5a:56:8e:94:
         5c:17:39:36:98:56:d3:10:cf:66:9e:61:83:7f:46:9f:e1:f1:
         54:b7:fd:50:5f:8f:d4:60:a9:ff:98:9d:e2:06:bd:89:ba:6a:
         75:73:8e:3f:12:b3:d0:a6:1b:80:d6:9e:99:23:37:22:05:b6:
         ca:c7:9a:d8:8e:c1:d3:3e:a3:13:8a:68:84:b8:56:5c:95:6d:
         0e:5b:24:53:2f:1f:1f:d9:0c:22:d1:a9:be:6a:9f:63:27:5b:
         1a:b8:92:c3:a8:6a:d9:2c:14:e7:12:24:5d:d2:76:b6:bf:f8:
         65:77:4f:e1:a5:d5:d9:4f:8b:a6:d0:11:2e:6a:ed:e1:c9:a4:
         47:d0:af:9c:ac:38:3e:0d:d6:10:67:5e:f2:29:31:8b:a3:a8:
         1d:e3:f1:36:22:f3:6a:1d:6c:7f:70:fe:8f:58:9e:6f:7d:d9:
         d6:f0:fe:b3:04:11:6f:4b:e4:88:d2:b3:59:ad:40:0a:fe:81:
         55:2d:ad:8b:16:32:6a:1b:42:dd:61:34:2f:d7:cf:1c:da:ff:
         e0:10:92:0e:79:1a:7a:16:0f:17:e1:bd:3d:18:20:19:1d:8e:
         82:47:2c:8d:47:f6:eb:e0:cb:44:96:f4:eb:14:4b:e3:92:3d:
         0a:e3:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----