Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
File:                     7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft (raw, json)
Hash identifier:          ZtRiJDi0AYXQo486ruG2iU9pznNg0WZFfSqAsz6rlog=
Subject key identifier:   99:B6:40:A1:2D:51:73:E7:F5:F3:B3:4D:BD:DC:F7:AD:1D:DC:93:4B
Authority key identifier: EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19
Certificate issuer:       /CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
Certificate serial:       01962F06D77BA39608D2BED5B2197CAE54A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft
Manifest number:          0D41
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: 7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl (hash: 5Dr6Jp0oSwq6bkKM5Z8v2gOCbyoaMMvQwZHoOBooGlc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d7:7b:a3:96:08:d2:be:d5:b2:19:7c:ae:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effc8a6f3c44b8edd177fe51a5999158b8dcf819
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=99b640a12d5173e7f5f3b34dbddcf7ad1ddc934b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:f6:5e:14:fe:74:e6:03:0b:51:b8:2c:e2:
                    e2:ea:67:51:c9:06:ae:e2:2b:64:63:92:ed:3c:8f:
                    07:57:59:d8:88:6d:f0:b8:d7:cf:d3:a5:d0:d0:c4:
                    0a:c1:cb:7c:8d:b6:c8:99:6a:bd:31:2a:e4:fa:61:
                    c6:7a:95:58:2d:e5:46:84:3d:aa:7a:45:87:a6:6e:
                    88:de:89:5e:59:5a:b6:e4:43:68:e5:49:52:12:a0:
                    37:82:ed:c9:ea:42:46:23:92:c2:e4:c2:7b:4c:7e:
                    c1:c7:42:a6:a5:0a:c3:71:51:e2:61:f3:c5:06:40:
                    31:b4:69:e0:63:dd:e1:dc:50:af:f8:4f:12:c7:ba:
                    88:75:c1:fe:78:11:b7:6d:a3:a8:b1:71:4a:70:87:
                    4a:a0:73:94:b4:06:66:eb:b6:45:a5:75:73:1a:0c:
                    57:95:23:84:f8:c3:f1:81:d4:5b:de:ad:f6:49:97:
                    38:77:38:4a:00:f6:a0:21:8f:0f:3d:3e:06:13:95:
                    f2:e4:9c:88:4d:46:2b:96:ac:6e:c9:4d:6b:19:88:
                    8b:99:24:c5:38:32:7d:35:13:a2:49:6c:3e:9d:a9:
                    4e:59:88:3d:5f:28:27:47:e6:c0:e2:2a:9f:c6:ac:
                    ec:88:ba:b4:9d:c5:fc:a9:f5:a0:2e:ed:87:e8:e6:
                    d5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B6:40:A1:2D:51:73:E7:F5:F3:B3:4D:BD:DC:F7:AD:1D:DC:93:4B
            X509v3 Authority Key Identifier:
                keyid:EF:FC:8A:6F:3C:44:B8:ED:D1:77:FE:51:A5:99:91:58:B8:DC:F8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad26ba-0314-4ff9-a39d-6dd9387141a8/1/7_yKbzxEuO3Rd_5RpZmRWLjc-Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ee:d6:dd:01:9c:89:fc:68:04:d0:8c:64:5d:ab:eb:42:5e:
         6c:35:2d:16:29:70:cc:ac:0f:4d:63:d3:b5:6f:0a:49:06:20:
         7f:49:f6:ac:a9:5a:bd:46:d0:8f:f4:db:dc:70:6b:53:ec:73:
         63:27:3c:bc:7d:07:ad:c7:5e:34:4d:f7:4b:38:57:0e:0e:e9:
         33:a3:8e:4f:e3:ef:96:aa:47:71:2e:70:2d:59:20:ac:ac:dc:
         78:48:a5:42:0e:d9:cc:c3:f3:7a:cf:c3:8b:cc:73:cf:53:7c:
         0c:59:af:ee:c9:34:30:a4:b5:ac:b8:5b:c8:7b:04:42:fc:b3:
         86:89:d4:2b:47:0a:41:44:bd:99:15:e2:2e:47:65:f0:fd:17:
         df:3c:dc:83:e0:c0:75:7c:4c:99:48:39:be:64:b6:b1:32:85:
         ab:e9:3b:f3:a5:38:1a:34:80:bb:f2:c5:d0:65:b5:fb:14:3c:
         d5:39:44:01:ab:8a:79:6b:01:73:7d:58:ca:6f:6d:8b:73:e2:
         6f:06:a2:47:d7:41:17:30:eb:83:f7:59:ee:08:e5:4d:bb:47:
         d9:b7:bf:02:94:45:0c:15:8b:56:5e:83:ca:22:2c:11:b9:d5:
         23:62:e2:4e:a4:a8:fb:0a:ce:d0:1d:d1:0b:d8:e2:8f:6c:40:
         9a:f1:6b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----