Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
File:                     f35evW-kacXjcL_BBsTUqtHh25Q.mft (raw, json)
Hash identifier:          PM7TH+zBsQCsdwSMT5RTWp0scT2OwcayPNSoT68AlhA=
Subject key identifier:   DB:A2:7D:C9:B6:B4:BB:5F:26:73:55:42:8E:17:52:EE:96:AB:F2:AE
Authority key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
Certificate issuer:       /CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Certificate serial:       01962F06D864B3B8A0E89B01482096ADCB52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
Manifest number:          0D52
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: f35evW-kacXjcL_BBsTUqtHh25Q.crl (hash: wV+W+1rynGX837Ntf8qxI17cLmglFE80oUnUVEIkjlo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d8:64:b3:b8:a0:e8:9b:01:48:20:96:ad:cb:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=dba27dc9b6b4bb5f267355428e1752ee96abf2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:c7:cb:ed:7c:a2:7b:1f:af:fc:f5:dc:25:
                    82:26:8d:f2:b7:38:64:78:1d:00:15:28:be:7d:5e:
                    7f:0d:50:ee:ee:f5:40:47:12:d7:1d:60:f8:9a:ff:
                    4d:b8:46:ba:67:07:88:ea:ce:52:34:4a:52:ba:48:
                    94:48:31:67:77:dd:e0:aa:12:da:b2:14:56:16:4d:
                    3c:07:cd:47:06:3c:1f:ca:fa:f1:17:23:2b:78:de:
                    51:09:ea:db:ac:ce:f8:b5:29:f4:25:9c:2f:55:50:
                    fb:46:9c:8b:cc:a9:c6:0a:a1:ee:c7:b6:c7:e0:bb:
                    b0:54:f4:86:ec:a0:19:a4:f4:bc:87:fe:e0:1b:99:
                    5c:f6:4b:24:9c:9f:50:4d:cf:18:74:89:31:9b:27:
                    5d:44:44:f7:6f:7b:43:f7:36:8a:3d:cf:f8:a8:34:
                    49:ed:38:40:ba:31:39:f7:63:54:39:b1:ae:4a:12:
                    22:e1:e9:ac:e5:5c:64:6e:08:99:d3:7f:13:f2:b9:
                    91:f7:23:d8:8e:bd:11:be:01:68:f9:d4:5c:aa:d4:
                    8d:d2:60:6f:c4:cf:72:6f:58:6e:92:26:87:45:62:
                    40:fb:c6:6c:a5:86:0f:c4:e3:e5:84:cf:59:95:5c:
                    42:f8:a0:db:0d:f6:08:53:be:c3:62:1c:cc:ce:b0:
                    33:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A2:7D:C9:B6:B4:BB:5F:26:73:55:42:8E:17:52:EE:96:AB:F2:AE
            X509v3 Authority Key Identifier:
                keyid:7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:dd:39:24:cf:28:a5:7b:49:3c:6f:c3:a0:f5:93:f7:c5:e5:
         f5:0d:cc:df:38:26:a5:48:cc:d9:61:5a:17:c2:ee:32:be:ea:
         9c:25:0d:c4:94:3a:3b:20:6b:3c:b2:2d:91:1e:29:ce:f3:2f:
         e8:7b:ec:a2:ee:cd:e4:e5:22:11:bf:f2:bb:65:f5:09:aa:8b:
         a2:1a:52:79:71:15:dd:ed:af:84:b1:ce:cb:a9:aa:d6:db:29:
         29:85:87:3c:04:12:59:4b:77:a0:35:ba:e3:71:82:ec:6b:03:
         44:44:1a:be:1f:0a:5f:46:6e:a0:b8:72:52:8c:16:90:c5:b9:
         1c:59:a5:dc:e9:41:e5:5a:a2:29:5c:fa:5c:ad:65:5d:b5:c5:
         6b:15:54:78:ac:05:31:e7:59:b6:36:1a:45:1b:ed:cb:95:b2:
         aa:f0:3c:fd:6e:fb:66:87:0d:03:49:2e:73:16:50:7b:86:0b:
         e1:92:5a:35:cf:49:a4:f8:be:87:37:bd:ee:9c:79:fc:6e:33:
         99:64:95:da:6e:00:bd:d7:54:15:c8:12:41:82:f9:c8:c5:74:
         91:c8:14:82:30:14:67:33:5a:8f:b1:57:b4:7f:46:2a:e7:3e:
         21:70:5a:11:23:72:97:18:81:0b:04:c4:3d:73:a6:ec:5f:20:
         a9:09:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----