Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
File:                     aBHhJcs1cHby-jE4yT6aJoGxeJM.mft (raw, json)
Hash identifier:          mn/yUTwE77rHWJ30giFM2NVMo8DL+WdjlDspbMSiuSc=
Subject key identifier:   DE:25:78:BB:50:E2:8E:AE:77:A9:EC:A8:4C:8D:46:78:09:2C:0F:CB
Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Certificate issuer:       /CN=6811e125cb357076f2fa3138c93e9a2681b17893
Certificate serial:       01962E99268C16169BC1BEE2118D95E0E415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: aBHhJcs1cHby-jE4yT6aJoGxeJM.crl (hash: Jgr/u4wMb2tZ49GzHSRCnMU2qRy5XsZ2hm3qA5ZMKpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:26:8c:16:16:9b:c1:be:e2:11:8d:95:e0:e4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=de2578bb50e28eae77a9eca84c8d4678092c0fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:b1:9d:4c:1e:c6:5f:8b:f9:53:17:74:ef:
                    72:71:78:17:1d:59:cf:e5:81:aa:1c:e7:9b:85:a6:
                    39:20:47:7b:fa:f9:b9:12:ce:cd:f0:4c:36:be:ea:
                    79:6c:32:6f:ed:33:97:d3:3d:f5:34:3e:f7:17:f2:
                    23:66:ed:a4:8b:19:dc:20:56:11:22:ce:10:9a:1a:
                    66:99:19:fd:3a:d2:e1:6a:69:de:b9:be:e9:48:00:
                    26:1c:97:04:7d:52:d7:d8:fb:a9:bc:45:a0:aa:ae:
                    20:f6:4d:e3:f3:3a:cf:c8:86:58:6b:07:42:5c:66:
                    01:f4:6d:c0:9e:19:82:fd:16:35:e3:c8:7c:15:af:
                    58:29:92:2e:0b:a2:6b:6d:73:b0:12:a2:91:e3:14:
                    73:97:b6:8d:75:a2:07:24:c9:d7:5b:fe:d6:05:cd:
                    6c:3f:da:8a:df:1e:be:94:fb:6b:4b:32:f7:fa:0e:
                    61:9a:b6:e6:8a:14:61:ee:e1:67:0c:d6:ca:a9:97:
                    92:94:5f:69:30:bc:b2:b6:8b:b3:7c:a0:36:62:2a:
                    9a:a8:ad:d7:6a:b8:66:2e:36:38:9f:3a:ac:e5:18:
                    40:67:7b:0a:b0:88:02:09:9b:29:9e:41:05:46:a4:
                    fe:89:31:f7:39:6f:b0:68:5d:d2:05:f2:f0:a1:81:
                    12:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:25:78:BB:50:E2:8E:AE:77:A9:EC:A8:4C:8D:46:78:09:2C:0F:CB
            X509v3 Authority Key Identifier:
                keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:1c:de:ef:aa:ee:20:b4:8d:7f:1b:10:83:07:1a:82:fe:
         cb:b9:e8:bc:cf:5e:a5:f4:06:cc:22:79:de:94:a3:e5:de:cd:
         11:29:5b:1d:d7:42:b8:35:08:5e:01:97:af:a1:f6:30:41:54:
         78:13:b9:91:aa:1c:ba:24:cb:a3:d7:d4:60:33:cf:14:38:e8:
         d8:d1:e3:6c:fa:13:1f:2e:e8:7c:fc:b8:bd:cc:46:90:a3:16:
         3b:c8:22:bf:e9:78:5e:4f:ec:65:7b:07:75:f2:33:49:15:7a:
         09:39:0d:55:7f:48:6b:26:15:f3:93:7e:16:26:44:da:e8:b8:
         5b:36:45:22:ea:10:11:a3:79:a1:8f:71:29:29:b1:08:84:f5:
         a4:a4:82:f0:d5:e5:5d:32:45:57:01:d0:b9:08:96:89:cf:50:
         0d:4c:33:6a:2b:30:e1:7d:a2:1d:7c:da:64:6d:8b:45:f2:75:
         f0:56:be:83:78:9b:c1:64:ca:fd:50:67:7b:0f:61:2e:df:6d:
         d2:29:ef:57:ed:b5:15:ea:c5:51:c3:b4:49:c6:c7:59:2c:89:
         2d:42:4e:37:fc:c1:ef:71:b0:44:c5:93:32:cf:f9:c9:90:b2:
         69:e6:18:53:92:d9:74:e9:92:3f:a7:b6:7f:3d:e1:fa:38:1e:
         c5:34:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----