Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json)
Hash identifier:          BCtZjBKZxiVlmqIx9wA3VD4NWAJ5VYjChFH1cf+DfY0=
Subject key identifier:   AE:2B:2F:6A:56:65:68:07:F7:AB:05:39:F9:7E:71:19:DA:7D:E1:BB
Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Certificate issuer:       /CN=790bc19fd79266ca08a9dc23840a004205f4e865
Certificate serial:       01962E99414DDBA9E54A83629768BEA19D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
Manifest number:          0D01
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: 5cSLSj9MFgBdW+ZuSzhPjdXASoD1z+qVC8q+IcCpRrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:41:4d:db:a9:e5:4a:83:62:97:68:be:a1:9d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=ae2b2f6a56656807f7ab0539f97e7119da7de1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:f6:bf:63:ae:68:d9:b2:c2:a2:d0:7a:a8:
                    46:da:2a:34:f4:32:7b:3f:a0:7f:04:00:3b:f8:29:
                    95:81:5e:99:62:5f:32:53:38:e2:9c:30:09:99:a5:
                    b4:b9:c8:09:fd:0b:98:12:ad:81:09:a8:12:71:44:
                    ba:e1:95:06:81:ba:57:af:41:98:68:ef:03:fb:8b:
                    94:06:a7:55:ae:41:89:ac:3a:f9:a0:8c:cd:ed:5b:
                    44:43:b5:e6:fc:d8:b6:2d:47:8a:20:94:ff:74:ad:
                    25:16:62:51:30:8d:a3:d5:9b:63:24:36:dd:3f:7e:
                    a2:73:77:4f:6e:ea:af:fe:7c:3a:ca:72:d0:2e:9c:
                    64:a8:34:1d:5f:66:f0:6f:fb:81:e3:d2:22:b6:5e:
                    22:28:cf:ea:4f:61:6a:4e:9f:e3:20:de:8d:57:c2:
                    c8:03:1c:2d:d7:22:ec:0c:f6:e4:db:86:81:92:11:
                    91:1e:d7:ac:fd:d7:2b:9f:ca:d9:d2:25:8e:0f:2f:
                    19:b3:f0:dc:68:e6:bc:1f:ae:80:2f:74:de:39:dc:
                    34:11:4c:d8:2a:3d:36:b1:44:98:83:af:80:5f:57:
                    02:a7:4f:79:1b:08:ba:ee:8c:49:a7:35:6e:f9:2d:
                    7a:8e:5a:b2:29:1e:4d:6d:ad:95:f7:74:f3:8e:89:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2B:2F:6A:56:65:68:07:F7:AB:05:39:F9:7E:71:19:DA:7D:E1:BB
            X509v3 Authority Key Identifier:
                keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3e:71:e3:a1:1c:0a:f2:e6:63:3d:ac:6b:9b:53:6b:64:d5:
         9c:81:1c:1f:9f:a8:67:01:71:7c:68:0b:2c:6d:4c:57:bb:f8:
         f9:96:6c:a6:4e:26:fa:cd:6f:85:57:71:91:be:98:b8:94:fb:
         20:94:f2:3b:a9:ae:ad:92:66:3f:99:2f:89:e9:73:a5:5c:d3:
         ae:94:88:15:2a:31:c9:f9:c8:db:e5:45:59:19:81:a8:a2:c4:
         ad:d0:a3:7d:48:4b:58:23:98:06:d4:8c:34:86:3f:8c:6d:69:
         14:90:7a:cd:69:e2:fe:d5:39:c6:28:c9:42:d5:1a:dd:98:c9:
         e8:52:6e:27:c5:37:5e:3e:64:c2:c7:64:e3:e8:23:66:58:fa:
         08:0b:a2:c7:37:59:22:23:38:a2:ee:e7:20:51:4c:35:04:0a:
         73:df:8c:56:89:9e:67:fe:76:7d:e1:30:22:40:0a:24:19:77:
         b1:b4:be:bf:b6:28:94:93:7d:88:4d:5c:8d:f8:19:36:6f:62:
         b2:bd:74:c1:90:2b:f4:19:89:9e:06:ba:1c:3d:32:81:55:53:
         fb:78:3d:00:3c:cb:cc:6b:66:83:3a:e5:b4:02:0f:3f:75:51:
         3e:16:ea:c6:be:1d:16:a6:0e:f3:d0:88:de:96:f2:ad:48:ac:
         4a:1f:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----