Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File:                     7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier:          FCWLcpRNo5HWP6ql6SZo2sI2IuTSc33/fGGvwr7heug=
Subject key identifier:   94:6E:69:0A:EC:99:2B:1E:99:34:9D:10:DF:4C:51:D8:FC:87:E0:F4
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer:       /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial:       01962F3D7EBB082EB0AFDF841C3213007198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number:          02DF
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: mr+ueZ+BhEOQioTp/chCzK9fabMVGBzH9MARYkTUK60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7e:bb:08:2e:b0:af:df:84:1c:32:13:00:71:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=946e690aec992b1e99349d10df4c51d8fc87e0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:0f:73:01:a1:a5:b5:25:8f:1e:bb:71:d1:
                    94:c3:a2:a0:aa:ce:01:1a:f6:cc:30:0f:56:8e:9b:
                    f2:6e:14:4f:c1:a9:29:54:fd:10:13:4a:13:75:e7:
                    df:02:43:02:60:a5:7b:09:c5:73:3e:28:d1:a4:56:
                    a2:f8:2e:7f:59:dd:67:5e:ea:83:a1:6d:0e:11:d1:
                    3c:ce:1c:25:db:06:93:19:3d:4e:d9:bc:b6:aa:19:
                    05:d7:54:43:f5:57:eb:ab:da:f3:eb:13:7f:b4:9f:
                    da:a8:50:9b:93:e2:00:f2:fb:c5:bc:3a:34:69:60:
                    2d:ee:e1:ad:97:14:4a:00:7d:92:44:00:b9:35:19:
                    66:b2:4f:fa:e0:ad:1f:b2:77:cc:e8:31:15:a2:0a:
                    42:18:04:db:8f:0c:3f:4d:87:9c:f1:95:18:a9:2b:
                    25:5a:f5:34:2b:56:92:18:aa:f6:fd:e5:80:a0:7d:
                    8a:a5:12:da:a7:df:d9:67:c3:1c:04:e2:c8:c8:f4:
                    1b:ba:6c:c7:a4:83:b0:69:f6:37:f0:ea:8d:66:04:
                    0d:b2:12:b8:37:a0:42:7c:7c:15:7c:f4:9f:84:5e:
                    99:8e:72:12:63:24:62:e0:cc:cc:0a:01:1c:1c:b9:
                    68:71:77:84:34:a1:8d:4a:de:35:82:10:82:c6:23:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6E:69:0A:EC:99:2B:1E:99:34:9D:10:DF:4C:51:D8:FC:87:E0:F4
            X509v3 Authority Key Identifier:
                keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bd:80:68:37:09:54:c2:49:3e:b5:4e:c2:cd:8d:3e:b4:d0:
         da:6d:52:df:dd:90:57:ca:8f:6c:3c:bb:d5:fc:10:3f:cd:c4:
         fc:94:07:f4:43:c0:b6:bc:c3:c2:3b:78:6c:06:c9:63:fd:bb:
         57:4d:ad:d5:b8:be:ba:e8:b5:4b:40:33:e7:61:1e:13:65:1e:
         d8:80:80:c2:81:16:fb:fb:6e:cb:bb:d6:ca:f9:6f:f3:ab:dc:
         09:cb:fd:67:d8:f3:7b:ac:e7:e7:db:7d:b6:2f:54:d2:05:7c:
         67:ee:4e:aa:8e:83:e9:60:64:b1:03:fa:07:ee:fe:55:ec:78:
         d7:de:41:4f:68:a8:b8:85:a4:41:7d:9e:ce:ac:6f:c8:29:cb:
         84:34:66:e5:85:c6:04:70:84:8b:0a:bc:b2:6e:3f:e4:1f:dc:
         b9:2f:b0:a2:7c:d8:6d:4f:50:61:3f:70:09:68:6d:07:3c:13:
         6e:5b:7b:e7:86:20:3b:87:84:a7:f6:fc:cd:77:b7:06:6b:7b:
         a0:8a:18:00:b0:ba:77:6a:dd:29:37:e2:e7:3f:29:84:3f:42:
         3e:0a:84:83:c7:56:a3:cb:13:f3:b4:16:2d:3a:86:21:57:4f:
         3a:a6:c8:68:2e:d8:ad:5b:18:d7:39:ee:48:4d:19:75:27:5e:
         99:97:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----