Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier:          5qR6B5n+7xWN6BCI22t6jFx6xqgmgkzI2CwkGjtN7UE=
Subject key identifier:   A5:33:08:E4:1D:DC:18:FB:93:56:C2:C0:80:D1:34:56:F1:42:C2:A1
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer:       /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial:       01962E999106BC2B02302D583D3C2B48E1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: XxcSY3OGO+mIJA/t4AwXX58gmSfZSTw5gwzoWMYPKpQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:91:06:bc:2b:02:30:2d:58:3d:3c:2b:48:e1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=a53308e41ddc18fb9356c2c080d13456f142c2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5f:80:20:04:4d:a2:30:6b:0e:43:65:f2:8d:
                    ae:df:80:93:2a:47:88:29:4e:ba:27:f0:75:2d:f4:
                    02:2d:f5:e3:f2:44:6b:c4:d8:29:09:bc:e2:2f:f2:
                    7a:cd:11:30:aa:20:bf:41:fc:a5:e1:52:9e:4c:40:
                    1c:99:4a:ad:7d:76:9f:58:d5:d0:b3:97:d1:b2:d1:
                    ba:f1:05:6d:a4:b8:48:2d:e5:44:72:bd:2b:06:af:
                    e0:7f:4e:ff:72:e7:fa:e9:34:fe:d1:78:ff:6c:8d:
                    c1:b8:98:5e:b2:7f:fd:01:87:9d:e1:63:23:68:fe:
                    77:66:9d:81:af:e4:8b:aa:02:f2:de:99:1a:4d:f0:
                    35:22:e4:8b:7f:14:40:c0:73:b0:fb:bb:1e:f3:e0:
                    8a:15:f4:ad:16:f4:2e:c2:61:fc:7d:06:23:4c:c8:
                    c0:03:52:19:ab:ed:93:a6:ee:30:d3:41:52:28:2d:
                    bc:49:eb:79:7d:1a:5a:60:2e:60:47:44:97:ce:55:
                    02:3c:41:ce:61:75:b0:3c:47:5d:6d:4e:78:b4:3a:
                    58:23:83:a9:46:39:3e:0b:22:8d:12:69:0c:75:07:
                    3a:a7:db:36:80:54:79:07:f8:86:1a:26:73:a7:d1:
                    35:a3:ad:6b:76:90:00:81:4d:11:34:66:ee:8c:43:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:33:08:E4:1D:DC:18:FB:93:56:C2:C0:80:D1:34:56:F1:42:C2:A1
            X509v3 Authority Key Identifier:
                keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:50:3d:15:c2:09:1f:26:bc:ce:a0:4d:0b:1e:3f:c3:ab:
         b8:8c:61:eb:02:19:9d:49:b9:c6:fa:26:d5:a7:21:3a:e0:36:
         96:b9:54:be:36:64:30:71:2d:7e:6d:99:0a:9f:9a:fb:5e:6e:
         2a:8c:00:4c:ca:7d:60:e7:c8:57:69:27:e3:84:37:d0:96:5b:
         8c:0c:5f:28:b5:a0:3d:0c:c4:04:ea:f8:ba:55:5b:86:fc:bb:
         a1:1b:67:d2:b9:d3:1b:e5:26:40:82:4d:1b:34:c3:ed:70:d2:
         4a:98:05:05:3b:22:fa:b0:98:1a:ae:23:ab:10:f4:11:03:91:
         c4:11:5b:74:80:91:30:5f:3c:0d:11:c4:29:91:55:3b:4b:8c:
         64:07:1a:f9:7d:e9:3a:50:16:24:e2:b4:2e:6e:25:09:16:8d:
         1a:c6:7c:c2:34:83:16:fe:6f:e6:4e:d9:03:0c:a5:c9:15:a9:
         78:25:60:67:9f:9f:83:56:2e:70:d3:74:99:fc:ee:72:c2:e8:
         b6:30:0c:be:86:29:3f:05:fe:2e:83:6e:ea:72:f6:13:18:26:
         78:a7:33:15:7e:ab:77:52:7b:50:6e:26:ce:51:c0:5e:63:a9:
         7d:f8:83:ff:a5:ef:c4:4f:8c:be:ec:17:84:fa:74:dc:81:59:
         c3:33:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----