Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
File:                     eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json)
Hash identifier:          uKKBGKJaiqZNbEQndK+5iyGy1+xipNUPJepDnYk1pmY=
Subject key identifier:   DA:38:E2:D9:90:3A:C6:EA:CC:C8:BA:29:56:10:1A:C0:C5:89:93:9E
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Certificate issuer:       /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial:       01962DF43BB5DBA1D5B08DC699273B6A01DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
Manifest number:          0C77
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: ou7bT55mL10UNpP1eD2m7f8di4i/iBLhk1oszwqWMXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3b:b5:db:a1:d5:b0:8d:c6:99:27:3b:6a:01:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=da38e2d9903ac6eaccc8ba2956101ac0c589939e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7e:8f:e0:d8:d6:eb:9a:bb:da:ff:e5:ab:ab:
                    c2:f2:86:d6:17:8b:1b:35:56:f8:a7:df:68:dd:ce:
                    65:9d:bb:6d:a7:ee:c5:d5:4c:4b:61:cb:8a:f2:51:
                    f1:5b:21:b1:8e:f9:78:b0:73:7b:01:3b:40:3d:2d:
                    ab:2a:b9:b3:51:ba:a6:36:78:cd:2a:a1:c1:16:2f:
                    00:54:9a:d5:bd:fe:2d:68:78:b2:30:43:d2:bc:a9:
                    58:95:d1:bb:6e:67:3c:d3:37:33:7c:b5:75:da:06:
                    5e:67:c7:c3:e8:ae:27:48:de:d9:9f:94:0a:87:b5:
                    5f:58:44:b5:75:e2:90:2b:4f:9f:64:53:a0:8d:81:
                    6d:53:e7:80:24:e2:50:04:1f:7f:b2:74:ce:26:86:
                    a3:8a:d8:5b:9c:6d:03:29:99:9f:99:89:9b:b3:0c:
                    70:3c:1d:51:5b:6a:5b:d6:89:82:b5:f3:8c:fb:26:
                    40:b2:9c:3b:3d:57:f4:d4:0d:7c:3d:45:c3:d2:37:
                    c7:fc:d5:a8:13:25:08:d5:94:c9:f6:3e:e0:e8:76:
                    72:bb:c7:39:d4:15:81:11:55:31:ca:30:1f:1b:3e:
                    d1:58:de:b3:44:32:1d:43:89:c9:de:8e:4b:76:9e:
                    ac:f0:c3:fd:14:6e:8d:28:b4:ff:d0:ad:6b:3e:7a:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:38:E2:D9:90:3A:C6:EA:CC:C8:BA:29:56:10:1A:C0:C5:89:93:9E
            X509v3 Authority Key Identifier:
                keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:de:a0:e7:f3:90:a7:91:8a:02:41:84:71:3a:9a:05:e7:cf:
         31:e4:f4:7b:a1:6e:d1:d0:33:67:73:cc:96:48:5a:4b:45:6d:
         6a:84:0b:17:1c:f5:ee:db:0e:e0:6f:d0:f1:40:94:06:df:5e:
         b3:64:c3:08:d8:39:d4:48:51:bc:3d:21:b8:d1:f4:26:58:dc:
         11:b6:8a:49:a8:4d:47:70:76:b2:8d:ba:73:af:fc:5d:7c:e5:
         4f:77:3c:de:d1:10:76:2a:34:96:ee:a8:aa:62:b1:41:47:d2:
         5f:77:4c:d4:dd:75:87:61:a1:36:cb:26:79:28:46:fe:72:0b:
         d0:72:71:85:51:a9:34:f3:1b:89:3e:98:42:5c:b0:3a:66:77:
         f4:d0:38:c1:14:63:f9:e5:3a:20:5f:16:b4:64:4e:14:51:8a:
         f4:d9:27:41:75:b2:03:d2:f3:97:cf:0a:f4:85:90:c5:2f:0f:
         6d:fe:40:2f:1d:3a:66:33:96:45:5d:2c:46:36:ab:6f:a5:aa:
         56:3e:32:7f:6c:48:67:6a:81:e1:d8:9f:58:00:1d:62:23:bd:
         ca:52:d8:2b:fc:af:9f:7e:3d:b9:c2:0d:65:1a:60:aa:8e:7e:
         78:58:2d:8b:dc:5b:f0:8c:4d:94:04:d2:f5:82:8f:70:8e:81:
         7a:8e:c2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----