Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
File:                     E7ur4fopzNr8vU-Utcfk0NH4lH0.mft (raw, json)
Hash identifier:          YlKAUaxja7Kf7QLUnBubTbD85vbTtEMOjf62dGQ/PP4=
Subject key identifier:   BC:CE:5E:5D:C9:2C:B6:76:B2:6A:2A:68:FA:6A:95:80:01:38:F6:EE
Authority key identifier: 13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D
Certificate issuer:       /CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
Certificate serial:       01962FAB3F096417CBC3AA09626C6F920F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft
Manifest number:          76
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: E7ur4fopzNr8vU-Utcfk0NH4lH0.crl (hash: L7g7Rxv+LtQV4Q4OfJC1S935zeKn1lsOcJtnr2cMYnc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3f:09:64:17:cb:c3:aa:09:62:6c:6f:92:0f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13bbabe1fa29ccdafcbd4f94b5c7e4d0d1f8947d
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=bcce5e5dc92cb676b26a2a68fa6a95800138f6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dc:22:d1:75:fa:52:7d:7e:0e:3d:1e:6f:9a:
                    a1:9d:77:c0:7b:8e:5e:46:64:fa:0f:35:61:95:ab:
                    d1:ef:41:25:32:b4:12:69:91:a6:47:86:72:e4:50:
                    fc:5d:77:c2:ac:d0:c6:b1:a9:12:6a:c2:92:af:ea:
                    9c:0b:7a:af:f4:3a:16:bd:8f:e1:c5:7e:f6:f4:91:
                    f0:b2:fc:af:35:16:3b:2c:4f:5b:34:7f:43:11:b3:
                    c5:65:79:85:ea:78:7a:da:4c:c6:f0:c1:11:60:63:
                    c2:a4:ba:31:00:56:8f:cb:d8:5e:cc:09:66:d1:94:
                    e3:dc:cd:a7:33:22:45:e2:c7:c3:d1:ff:2a:88:4e:
                    c2:52:c9:01:8b:90:4c:9d:a6:68:40:02:d8:30:98:
                    98:bc:86:ce:16:da:dc:36:e6:04:4a:48:0a:35:e4:
                    b4:b3:6b:f9:db:37:ed:e6:ed:a3:b8:26:7c:96:1a:
                    ff:1e:57:5e:4f:c6:e0:09:f2:a2:9b:21:61:00:0f:
                    8f:5b:c6:78:6f:4a:95:fb:9d:18:3a:63:90:0d:78:
                    dc:d2:85:5c:2e:f4:c9:8c:1f:d9:fb:f1:3e:2a:bf:
                    69:7d:7b:19:24:db:60:ea:d8:5b:4c:30:5f:59:68:
                    ea:db:02:7c:ae:90:4e:e8:13:e6:15:27:81:cb:2c:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CE:5E:5D:C9:2C:B6:76:B2:6A:2A:68:FA:6A:95:80:01:38:F6:EE
            X509v3 Authority Key Identifier:
                keyid:13:BB:AB:E1:FA:29:CC:DA:FC:BD:4F:94:B5:C7:E4:D0:D1:F8:94:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ur4fopzNr8vU-Utcfk0NH4lH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/360c74-f29d-4136-b400-40718e0e328d/1/E7ur4fopzNr8vU-Utcfk0NH4lH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cf:f2:86:75:47:f1:c7:42:ce:5a:d8:87:70:99:d5:64:68:
         66:04:e8:20:9e:33:e6:78:71:36:b8:3b:ca:a2:28:16:53:42:
         d2:fc:6b:b7:ca:80:e9:36:92:80:52:6a:b8:9a:1d:76:c3:99:
         d4:22:47:87:67:d6:ae:b6:33:79:2b:3a:8c:6c:52:7b:31:4e:
         89:8f:31:d5:6a:e7:65:25:a5:1e:c8:0b:4e:54:0c:49:da:f5:
         d1:30:ef:c0:d8:db:cb:a6:95:66:24:ea:a7:2b:83:9b:6b:22:
         e8:12:7e:bd:a9:ba:2a:d1:05:53:b5:a5:8c:8b:25:38:fb:c2:
         c5:fc:e3:3a:da:fb:01:05:9b:a7:00:d6:8d:c5:96:8a:64:99:
         07:90:83:35:3d:f3:ff:56:22:a8:95:a2:b4:8e:06:1d:9e:3c:
         14:ec:7e:a9:82:26:6d:73:51:0f:38:81:9e:51:f2:e5:89:f1:
         31:df:73:c8:5e:45:2b:ad:1b:ff:0c:c1:bd:df:29:3a:75:ce:
         27:f1:4c:4b:84:d3:5e:ea:ac:49:48:d7:66:6b:00:41:ec:b7:
         40:47:58:9d:63:c6:82:22:ab:60:88:8d:bd:9e:2a:39:ca:78:
         ff:ed:8f:27:d1:54:81:5b:34:f2:aa:e4:ea:5a:66:00:d0:05:
         37:ef:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----