Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File:                     7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier:          3O8SmVch7CstObzeyZaC2G3oI5mQpDKNj2TkvnIQ55c=
Subject key identifier:   23:BB:DC:8C:8F:83:53:A1:84:3A:2A:45:39:C6:2F:ED:85:8C:B5:51
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer:       /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial:       01962E2AD3F60FFDDD276E5C247C4BC4A3B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number:          037D
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: Y30zeugM/tp7nfopve7k4K4rf+hLapiVz+/FmBi1xGI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d3:f6:0f:fd:dd:27:6e:5c:24:7c:4b:c4:a3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=23bbdc8c8f8353a1843a2a4539c62fed858cb551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:d4:84:de:3a:f0:6a:79:3a:cc:92:79:88:
                    bc:ef:b1:ed:ab:e0:7b:e0:4e:a6:fb:59:b4:a6:01:
                    1d:25:3f:ac:97:0d:28:b1:56:60:32:c8:38:f0:ef:
                    81:75:29:26:4e:39:02:f1:9d:e7:7a:43:33:76:30:
                    04:8a:c0:a1:33:25:0f:b6:cb:d5:5a:e2:81:9f:7e:
                    7b:8c:e4:bc:cf:05:cd:f1:b8:57:07:2d:2c:0f:3f:
                    7d:57:68:33:54:48:ca:0b:ec:3e:7a:d5:17:fe:ce:
                    65:36:e4:9f:c8:b1:43:0d:c0:9f:30:42:de:4d:9b:
                    29:7b:fe:9b:56:de:49:73:4a:d1:ce:0f:f6:aa:ff:
                    1b:c8:3b:50:5f:c7:7e:76:07:03:8e:f1:1f:a0:3e:
                    16:37:5a:2e:de:ca:a5:14:f8:57:46:80:f1:9b:5e:
                    81:0a:14:e5:d2:7d:10:7f:16:50:a7:17:a7:4c:78:
                    2c:38:7f:57:67:f1:4b:f4:74:5e:bd:f6:46:ea:67:
                    3f:f5:d7:7d:a2:62:a1:5f:bd:ad:46:b4:bd:b3:b2:
                    86:25:f5:6a:87:39:7c:cf:8b:49:0b:a5:eb:aa:6d:
                    c9:fe:ad:4a:6c:e7:a9:3b:eb:b0:99:0f:6b:75:73:
                    8c:39:33:89:bb:63:5e:dd:25:99:10:7d:27:d6:2b:
                    61:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BB:DC:8C:8F:83:53:A1:84:3A:2A:45:39:C6:2F:ED:85:8C:B5:51
            X509v3 Authority Key Identifier:
                keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:14:be:8b:b9:fc:20:41:53:8d:13:2f:db:37:2f:7e:1f:d6:
         dc:cc:2b:b9:72:59:ad:32:54:07:87:cb:0d:ee:48:d2:1b:06:
         64:f4:7e:53:10:15:16:77:8d:c5:ab:7b:7a:36:dc:4d:78:fd:
         5a:66:76:0e:60:d9:ee:ba:2a:00:81:40:08:cd:72:be:27:c8:
         59:45:68:ec:ed:5c:b1:bf:e3:62:41:d0:e5:05:ae:ed:56:8a:
         0d:a7:74:6a:63:9a:7f:5f:a5:3e:1c:b9:05:97:46:58:1e:98:
         45:1a:55:06:e9:f1:8c:cd:bf:f4:1d:2b:14:35:db:fb:da:12:
         a6:e0:71:20:3b:a5:8d:e8:7e:81:21:2a:b4:c1:00:d0:65:be:
         6a:39:47:b7:28:3d:ca:1f:37:20:b1:5f:60:ee:3e:2c:88:1e:
         2f:4d:93:38:0c:63:99:7b:eb:61:50:63:b3:84:20:35:db:20:
         cb:30:e1:8d:a3:96:fe:b2:c6:38:df:6e:6f:cd:93:17:ee:87:
         0f:3c:fe:4f:c0:6d:8e:48:4c:f6:46:6f:b0:5c:42:bf:fe:e1:
         f7:04:01:e5:ef:af:3a:40:f0:37:e0:70:10:64:84:90:ae:d1:
         d5:1c:11:5b:9c:02:46:87:e6:7c:e9:39:c5:f2:a2:99:58:16:
         3b:88:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----