Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File:                     1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier:          o+zxRdWL/dWJxorkjlYoqdi4xpdmVxGm1YZmGWKSmhs=
Subject key identifier:   7E:AE:E0:62:3E:0E:7D:EE:ED:CA:DB:DF:BE:5B:89:52:F8:DF:6A:43
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer:       /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial:       01962F06BAC0FC5153A95BD215B79B769C6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number:          09A7
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: fktlYY9upkBN4mPV8PL+Nhd0HM6pKIEMuQ/UiFefxjM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ba:c0:fc:51:53:a9:5b:d2:15:b7:9b:76:9c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=7eaee0623e0e7deeedcadbdfbe5b8952f8df6a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:3b:65:e0:09:a4:a9:e6:a5:91:1b:0d:0e:
                    65:f7:c5:65:1f:e4:5a:d2:c6:47:96:fe:d9:36:43:
                    a6:c1:67:4f:a0:18:0a:f0:48:5b:1b:34:e8:de:61:
                    34:94:8a:60:2a:cd:03:6a:48:9e:1e:20:11:48:25:
                    38:96:fe:97:da:89:d4:a3:4d:ad:89:f0:1a:0f:9a:
                    a1:00:59:5e:9d:3e:1e:68:00:57:45:78:b8:d7:d8:
                    eb:17:0e:43:09:75:e2:49:a6:d6:22:21:8c:49:05:
                    96:7b:de:3c:81:1c:74:12:5a:a2:e0:56:a8:22:26:
                    bb:8a:d6:b7:fe:d4:62:74:65:f7:e8:f0:de:e8:55:
                    09:26:c0:bd:ec:48:00:67:68:5a:98:5e:0b:b6:36:
                    43:c1:9f:94:11:66:69:00:b3:c5:bb:27:32:aa:e3:
                    32:db:7a:87:20:81:e0:92:56:d3:52:d3:b8:10:f8:
                    63:4a:d5:5f:d0:36:f9:e8:f6:7b:b5:3e:43:b0:e5:
                    46:49:79:ca:97:b3:d4:6c:50:da:82:86:5b:e9:4e:
                    8b:c7:5a:bd:4e:c4:d1:cf:98:f4:7b:fb:65:dc:7b:
                    6e:99:d8:8a:ab:31:e9:ab:f8:fa:5b:12:05:db:52:
                    75:4c:ad:68:5c:d8:17:17:c8:13:25:9e:0e:35:10:
                    93:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AE:E0:62:3E:0E:7D:EE:ED:CA:DB:DF:BE:5B:89:52:F8:DF:6A:43
            X509v3 Authority Key Identifier:
                keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e6:8e:4f:17:d7:63:c4:ee:ce:b2:67:69:5a:c8:e4:73:31:
         79:cf:f5:61:a2:2d:72:c7:ee:eb:3f:72:93:06:55:ab:8a:05:
         84:a5:7b:d9:19:2b:c8:52:a4:de:6c:04:c1:4f:59:9c:ea:02:
         b9:e5:30:65:e6:25:20:83:eb:6c:c4:8a:74:d2:85:b2:28:d2:
         79:13:d6:38:df:a3:0f:69:6c:5e:5d:b3:ce:c5:8e:3d:7c:d3:
         a2:f7:28:32:7a:ce:5d:ac:aa:0d:aa:5a:e5:15:19:ff:3f:ff:
         75:e5:6c:31:72:3d:9f:ee:f7:22:70:1b:b2:66:30:5f:8b:c1:
         78:96:d8:f5:c4:db:a5:cf:a0:5c:94:3a:39:9a:b0:5a:0b:29:
         6b:a3:c8:55:cd:37:99:b6:61:97:08:eb:9e:a2:e5:d9:54:be:
         60:e6:2d:77:04:35:78:d1:79:be:69:5c:8e:a8:74:57:c5:a3:
         98:b6:45:84:31:55:42:95:c1:69:d2:03:1e:30:90:28:53:55:
         49:ec:78:2a:33:32:f1:5c:d2:98:68:4f:b9:4c:34:9c:07:38:
         4a:85:e7:3c:69:b2:a4:04:0e:05:4b:e9:3a:91:1f:34:f6:04:
         cc:72:66:95:47:8e:fe:c5:99:6b:c0:08:e7:94:19:e7:d4:41:
         97:e8:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----