Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
File:                     7sI7DnggvD7NT4cI57mQ7daSDV0.mft (raw, json)
Hash identifier:          AxJFQ7+Cscr3zHa7SN/VCUY9wWnIxlsRXaiYJTNtFPg=
Subject key identifier:   F5:B3:F3:3C:41:87:09:89:DF:0A:82:C0:F4:1C:2D:9A:68:1E:CF:57
Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
Certificate issuer:       /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Certificate serial:       01962E98A0BED51F4B28A7497C52AEF50315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
Manifest number:          04AE
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: 7sI7DnggvD7NT4cI57mQ7daSDV0.crl (hash: Zr24iMZwO50BGOEeHgOcDiqjwqQbVda1labyiNJOhWA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a0:be:d5:1f:4b:28:a7:49:7c:52:ae:f5:03:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=f5b3f33c41870989df0a82c0f41c2d9a681ecf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:46:99:b9:82:ea:b4:2b:9c:47:e3:4b:51:
                    5a:31:21:00:8a:57:bb:be:02:0b:b8:4a:51:02:a9:
                    d1:88:16:96:fc:54:36:dd:77:55:23:a7:f4:e0:13:
                    bf:cd:5c:9a:b0:62:78:40:ae:5e:78:b5:fb:0b:e7:
                    b0:8e:b2:c3:2d:92:e4:6a:83:8b:55:13:61:bf:4d:
                    66:e9:96:43:1c:c3:96:10:25:3f:18:6e:f6:a3:1d:
                    4a:0d:5b:96:3d:1b:fc:60:60:bc:23:a1:af:5b:d4:
                    bb:e2:d2:b6:bd:7d:e5:05:fe:b3:c5:33:1c:31:83:
                    81:e0:e0:ac:2b:3f:1a:e8:63:11:3e:1d:16:54:be:
                    0c:68:a6:c2:6b:ba:41:df:23:d1:8b:b1:aa:2c:a9:
                    06:8a:ac:c4:d8:80:60:0f:e1:d5:f1:70:a2:73:6a:
                    be:38:cf:ce:63:90:68:67:4e:e2:a9:b9:6d:c7:e9:
                    b7:53:b9:a9:62:5e:d8:36:0d:0f:f7:00:96:82:c1:
                    e7:09:fa:08:79:76:51:9f:e2:60:66:41:e1:24:54:
                    0f:43:56:06:40:a8:36:b1:a9:9e:9b:26:e5:40:cc:
                    da:18:b5:8d:4f:11:62:e7:1e:10:84:d1:83:24:ff:
                    f7:1e:d3:fc:26:25:7f:17:db:4b:00:fc:84:35:0a:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B3:F3:3C:41:87:09:89:DF:0A:82:C0:F4:1C:2D:9A:68:1E:CF:57
            X509v3 Authority Key Identifier:
                keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e9:0c:86:92:29:53:73:92:8a:ce:ec:54:37:e3:58:8c:89:
         e2:4f:04:fb:38:25:fd:41:a1:da:91:5f:dd:98:89:be:27:fe:
         bb:95:82:12:0e:bb:40:ab:74:97:ef:5d:b2:74:2a:3f:a5:0e:
         55:a9:9e:0b:53:81:17:21:b6:89:76:a8:cc:39:54:f0:31:ee:
         72:1a:a6:a7:80:f5:5a:58:a0:15:bd:6d:8f:d5:0b:1d:cb:51:
         9b:bd:86:68:a7:42:93:13:09:9b:57:52:95:ab:df:e7:c8:80:
         5f:21:b6:f2:2a:35:f1:06:a5:e2:e9:93:f8:ed:ce:c9:eb:e6:
         03:62:97:b9:09:a3:bf:66:5c:e3:59:2a:bf:32:66:f9:24:6b:
         67:51:84:f0:a0:a7:d0:80:da:0b:d7:dd:b6:24:79:7c:d2:bc:
         af:f1:01:10:95:8f:fa:f8:c7:c1:28:5b:d1:83:52:6e:36:f3:
         80:84:f4:b1:c0:0f:85:4a:36:9c:90:fd:b2:5a:86:91:a1:c7:
         6d:49:8e:a6:7a:0e:24:50:77:18:cb:50:5b:18:8a:7d:c3:a6:
         79:3b:90:bb:99:31:62:b9:83:8f:3c:83:8b:5c:7e:2c:0a:7a:
         47:cd:6f:af:0b:6b:bf:94:25:60:58:49:1a:95:f4:c6:35:8e:
         64:93:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----