Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
File:                     7N0ioeDFuwAoDxkz7uz4HNig5rI.mft (raw, json)
Hash identifier:          DPCGu1oe1kKk3fsTPTZrIC8ZSnIFafIwDEKXlxIDghE=
Subject key identifier:   C9:35:82:4A:D1:38:22:FE:9F:71:4B:EB:FE:F0:17:CD:A7:8A:A1:BA
Authority key identifier: EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2
Certificate issuer:       /CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
Certificate serial:       01962E9913A47450B2D0DB1DF23C0988612B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: 7N0ioeDFuwAoDxkz7uz4HNig5rI.crl (hash: 7ub7aHMa4sDt7IFPZ18qCslDSDcGndxYt3GVJGJOof0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:13:a4:74:50:b2:d0:db:1d:f2:3c:09:88:61:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd22a1e0c5bb00280f1933eeecf81cd8a0e6b2
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=c935824ad13822fe9f714bebfef017cda78aa1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:7a:8f:df:ce:3f:45:7d:c3:cf:22:b6:4f:
                    ff:da:92:56:0d:49:ee:ab:55:75:5a:1c:07:3a:87:
                    aa:31:5b:54:f2:e0:10:3c:c5:aa:61:34:12:38:8b:
                    8a:0f:fe:d8:03:32:5b:26:37:26:d4:11:01:10:83:
                    e5:9f:1d:48:fb:6b:73:b9:c2:8c:b9:c8:f4:a8:d6:
                    79:3c:71:71:96:a7:d6:0f:c4:e1:e4:39:04:3c:f9:
                    20:67:8e:22:8d:4e:ae:5a:1a:61:a2:a4:33:3d:77:
                    93:0f:49:3d:45:9a:6a:8d:86:c9:d1:79:4a:2d:cf:
                    4d:96:8b:aa:7e:4e:aa:36:93:fb:68:7c:ab:fa:24:
                    62:5e:b8:a6:05:ab:06:9e:55:03:9e:e2:bd:40:30:
                    eb:8a:e8:1e:55:72:08:00:55:9b:81:39:3f:d3:70:
                    38:ff:3a:28:74:dc:1a:ac:38:36:cc:06:83:df:c3:
                    7d:e0:6c:56:ea:e0:c9:ef:de:62:1f:3b:8d:41:37:
                    17:5b:0e:9f:74:3a:35:f8:b9:94:39:38:99:bf:b7:
                    da:0a:a2:62:e7:2a:3f:42:51:dd:33:ca:dd:5b:84:
                    0b:53:a0:1e:d0:b9:39:2f:f5:f3:3f:f2:f1:05:e7:
                    78:cf:89:d3:d6:3f:48:86:ba:62:3f:15:68:43:f9:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:35:82:4A:D1:38:22:FE:9F:71:4B:EB:FE:F0:17:CD:A7:8A:A1:BA
            X509v3 Authority Key Identifier:
                keyid:EC:DD:22:A1:E0:C5:BB:00:28:0F:19:33:EE:EC:F8:1C:D8:A0:E6:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0ioeDFuwAoDxkz7uz4HNig5rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/717648-55c0-407a-811e-5961655c34d9/1/7N0ioeDFuwAoDxkz7uz4HNig5rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:93:64:4b:0d:a1:eb:de:de:76:a9:3c:bc:bf:51:1e:d0:40:
         1e:6e:f5:01:ec:99:50:91:3b:fc:26:a9:d5:16:31:2e:95:00:
         00:27:96:23:a4:a9:25:92:26:9c:93:7d:fb:20:60:d0:67:d5:
         dd:31:b7:b2:39:20:fa:16:f1:08:03:bb:9c:f9:08:1b:7d:7e:
         7f:77:39:ed:64:30:87:70:79:d5:46:af:11:37:0d:cf:3e:7d:
         87:2a:56:24:f8:a2:f2:d4:b8:4d:82:0d:94:07:4e:fe:58:6f:
         a1:3b:ad:db:f0:78:35:2d:6e:ab:98:d6:31:1e:55:62:2f:50:
         28:53:48:a2:35:88:a0:3a:35:b3:2c:4f:f4:6c:ee:89:3b:d8:
         65:bb:d9:73:27:ba:df:d0:62:27:79:3c:35:e7:58:b2:6c:4e:
         d0:36:d8:58:31:42:ff:9d:ad:08:b5:d0:cc:fa:2a:78:7d:c0:
         98:b9:29:9f:7a:a3:40:1b:16:4d:0e:f4:9c:ab:34:c6:fd:8a:
         29:39:d3:7b:f2:93:bf:30:15:13:83:0a:6f:57:71:ae:7f:6b:
         68:96:d8:b2:0e:fa:1e:a0:e6:92:62:57:22:c8:1f:ea:3d:f9:
         33:f2:10:bc:f6:46:5c:80:f0:1a:3a:69:d0:92:bb:e9:8a:f3:
         8a:e0:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----