Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
File:                     enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json)
Hash identifier:          fUgImdHuNr8mZLY7pG6/8sh/ff6nJPhCieiSgYBD+eI=
Subject key identifier:   B2:E6:63:46:56:6C:51:8E:39:6F:90:99:8C:F6:75:8E:DA:05:54:1B
Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
Certificate issuer:       /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Certificate serial:       01962F06418D2383FB9C018EDB792F002E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: h2uq3JlUKQ12p767gAXGtQa8AXcNkEF+E5/g/sRmyqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:41:8d:23:83:fb:9c:01:8e:db:79:2f:00:2e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=b2e66346566c518e396f90998cf6758eda05541b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:ae:f9:70:1a:36:49:ca:50:81:e2:bc:3a:
                    17:c1:85:5f:26:12:59:84:4b:10:9b:f3:39:36:0e:
                    a1:c5:3a:ca:53:2b:04:60:7e:58:c6:26:0c:b0:7b:
                    4c:99:db:7a:a2:c3:0b:cf:f8:f8:43:3d:b3:ef:f4:
                    05:34:d6:8b:03:2e:61:ab:d3:78:2a:2e:10:8e:bf:
                    92:e0:91:96:b9:a6:e4:91:18:93:80:df:9f:67:aa:
                    0a:73:82:23:b3:bc:90:92:dc:b0:17:21:08:1b:ec:
                    9b:e7:df:5d:52:6e:bf:6c:9a:93:3d:26:06:62:52:
                    76:25:5a:e2:ec:e5:e1:7c:0b:d1:23:8c:76:14:4e:
                    54:09:de:9b:74:b0:65:92:06:15:3a:da:57:fa:95:
                    0f:a7:40:fa:15:6a:53:5a:66:e7:33:3d:77:3c:2e:
                    50:68:83:2f:ad:de:4f:94:27:95:72:fc:91:25:4b:
                    36:ae:92:e4:cf:4c:ee:e3:05:5b:92:16:f6:56:bd:
                    92:1c:ba:dd:d2:e3:87:58:a7:5b:c4:a1:2f:67:c4:
                    ac:67:59:e6:ee:86:e1:7e:ca:2b:a9:ec:95:8b:bd:
                    00:6a:6c:46:0d:2b:0e:89:1f:a1:fb:16:85:8b:2d:
                    84:90:fd:41:52:61:e7:ff:60:9d:7e:40:f4:3a:47:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E6:63:46:56:6C:51:8E:39:6F:90:99:8C:F6:75:8E:DA:05:54:1B
            X509v3 Authority Key Identifier:
                keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:e4:52:4e:cd:1e:a5:60:15:c4:89:5b:a0:3a:4f:bc:a0:
         1b:1a:9b:5c:80:6c:a6:d3:49:98:54:74:46:50:df:34:d5:b4:
         5b:03:a5:cf:da:81:91:1b:7c:0c:a4:9c:6b:ea:2a:17:a8:5c:
         b8:9e:5a:19:48:f3:1c:63:df:77:01:2d:36:b4:fb:09:9a:23:
         06:63:08:f6:f0:32:ee:a7:c7:4c:99:25:08:f5:06:48:9b:9f:
         1d:f7:4a:5b:12:56:0d:95:53:b7:6d:43:bf:b5:71:e8:be:f9:
         35:75:52:af:bc:d9:e5:54:d5:7d:59:2a:dd:3f:e0:48:ea:a6:
         c2:a2:09:fc:7f:8d:01:fd:60:6e:94:94:5c:ed:87:83:fd:8b:
         2d:96:6d:66:c8:cc:5c:75:97:0d:af:5b:0b:fe:6d:df:44:1d:
         76:0e:15:dc:c0:11:fc:f5:3d:9b:be:e0:a4:c4:87:cc:41:73:
         61:42:c8:e3:88:52:d8:97:77:f8:fe:c7:d7:33:70:6f:6f:94:
         a0:01:d4:dc:0b:f4:7d:9a:83:ca:0a:10:46:a8:87:f2:83:35:
         11:7b:9d:b2:92:c3:94:0f:d3:23:b3:48:e4:6e:31:2c:a5:90:
         15:33:08:f7:9f:a5:74:6c:e1:86:52:e1:8b:5d:37:87:7b:8f:
         b4:8c:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----