Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
File:                     EDfew086MutlAvFmKoKiD4teohw.mft (raw, json)
Hash identifier:          CxKBoDt00B296gePBuKrCqMyYVQGKZTFifzUWYWdS44=
Subject key identifier:   0E:3F:E4:33:59:5A:9E:AF:CF:2A:2C:6F:37:52:A5:33:83:B1:E1:34
Authority key identifier: 10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C
Certificate issuer:       /CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
Certificate serial:       01962F063C67CF7665F5490CECC7303F38EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:00:59 +0000
Files and hashes:         1: EDfew086MutlAvFmKoKiD4teohw.crl (hash: hoUzoj0jUPVRTPo3aCxN53H07Y6ZPhxATz+9SNPYCvg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3c:67:cf:76:65:f5:49:0c:ec:c7:30:3f:38:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
        Validity
            Not Before: Apr 13 12:00:59 2025 GMT
            Not After : Apr 14 12:00:59 2025 GMT
        Subject: CN=0e3fe433595a9eafcf2a2c6f3752a53383b1e134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:06:17:ca:e3:7a:4b:0f:c3:da:e7:6c:23:
                    e1:ec:88:2c:db:22:33:ff:8f:ea:0a:6c:12:1f:e1:
                    2c:05:9a:f9:d9:7a:1c:9f:43:6a:d3:75:fd:50:b9:
                    f0:3b:41:f2:bc:26:33:59:6b:c9:b1:e5:f5:fb:4f:
                    05:95:82:8b:44:f7:38:d5:3e:8f:26:c5:cc:66:96:
                    b2:77:01:06:8b:14:51:da:5c:30:d2:48:c0:4a:31:
                    2a:42:20:a1:5e:49:10:d5:db:71:b8:45:1d:41:20:
                    08:63:b2:b5:c5:7f:81:c0:62:2a:3b:3f:35:60:83:
                    69:c0:2f:93:3f:a6:39:cc:b5:b2:6f:3c:80:ab:39:
                    26:f2:73:66:71:4d:69:0d:3d:40:9f:ef:56:4b:04:
                    8b:e5:b7:f6:cf:3f:4e:a5:44:dd:8e:3d:31:a1:a8:
                    dc:81:a7:51:87:1e:62:22:c3:ee:b8:1d:9a:15:22:
                    9a:d2:3e:0e:42:6b:48:0f:19:14:90:ef:2a:f9:d6:
                    48:14:85:7b:78:1b:f4:48:1d:04:47:c9:ec:21:01:
                    f8:3f:ca:c1:5b:a0:22:fe:c6:13:fa:61:f9:3c:8a:
                    d9:0d:bb:ba:1e:28:e1:2d:e8:e2:f9:49:48:48:c4:
                    97:3d:aa:b0:6d:a2:f3:70:2e:39:6e:d4:12:ef:5c:
                    81:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3F:E4:33:59:5A:9E:AF:CF:2A:2C:6F:37:52:A5:33:83:B1:E1:34
            X509v3 Authority Key Identifier:
                keyid:10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:aa:6a:aa:d9:e8:07:2d:62:29:13:98:4c:01:2d:de:33:47:
         bd:a4:94:ec:a0:81:77:eb:31:99:d2:1e:7b:4c:57:df:86:1d:
         1d:26:95:0e:e0:fd:be:4e:77:b5:5f:1a:11:16:e2:c3:ce:08:
         6d:e6:b3:f0:99:03:75:8e:fb:73:fc:30:eb:d2:53:5a:4b:48:
         61:08:8b:a2:76:e1:a2:38:cf:33:ad:3e:0d:ef:47:a3:d7:3c:
         e6:3c:fe:f0:ff:77:05:cb:db:83:70:cc:f2:a6:42:6c:20:56:
         cd:db:46:9f:56:1f:1d:df:e6:44:7b:e6:da:b2:69:2d:f5:6e:
         15:e8:b1:69:9c:4e:93:58:a7:bf:ba:15:57:8d:60:fd:5a:53:
         54:ff:1a:0b:7e:c4:e4:8c:14:cb:ab:64:7e:18:97:0d:b2:e6:
         33:a7:39:7b:bc:59:8b:ac:90:96:d3:17:28:56:6f:e7:55:fc:
         1f:56:12:65:18:df:3e:a5:84:fe:22:97:42:b1:01:aa:b0:85:
         59:1b:63:fd:ce:a6:b1:31:2d:a4:79:c7:9c:51:53:b5:b0:15:
         a6:bd:32:a1:be:44:80:4e:54:a2:cf:9d:57:3b:0d:ec:a2:bb:
         20:4f:f7:93:58:2b:e6:a0:6c:c0:8f:d3:f7:b1:6f:50:59:c8:
         e1:d3:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----