Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File:                     76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier:          WM3F7zfk7xFl5ET9EeK5yTldWM4A3ko4DdkXO8Il+mA=
Subject key identifier:   E4:F7:77:04:29:0E:7C:57:95:46:75:B7:FC:BC:89:51:57:7F:03:B0
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer:       /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial:       01962ECF92479ADC9C14ABCEE73319E74F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number:          02AC
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: gcMRSNzi+wTMU0hPGQfVMb6fgQeW3V01GL7OWEJyw/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:92:47:9a:dc:9c:14:ab:ce:e7:33:19:e7:4f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=e4f77704290e7c57954675b7fcbc8951577f03b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:96:f9:dc:cf:cf:4d:6e:7c:19:2e:fa:ce:
                    21:8e:4d:f2:d4:93:d6:81:0c:35:8e:67:7c:57:c1:
                    3d:31:4b:fa:35:70:88:b4:8f:c4:a0:e4:6a:d5:fe:
                    ab:93:df:61:b5:c0:e0:38:1b:f0:64:61:6c:34:d3:
                    07:43:6c:c6:05:3d:36:8b:98:8a:66:32:ed:77:fb:
                    a1:fb:db:46:2e:e2:08:88:ac:6b:58:9c:72:71:3c:
                    d5:13:1f:55:e4:8f:eb:4c:c6:f5:d4:42:3b:8b:d3:
                    b3:35:71:d0:04:d3:37:36:54:ce:7c:13:a6:ad:e5:
                    11:ce:e0:f6:99:88:8d:13:60:b5:8b:9a:9a:5d:b1:
                    ee:f7:c7:05:2e:0d:e2:e8:1d:b9:71:f8:c5:9c:8e:
                    17:65:48:21:d4:de:98:fb:98:eb:8a:36:dd:fa:be:
                    59:e7:df:c2:17:38:5c:ad:20:4a:8d:e5:ad:2b:8f:
                    b5:97:b7:49:bf:2c:d2:14:7e:ae:d9:3d:fa:d8:9b:
                    24:66:a3:04:76:f3:43:70:c4:49:3d:ac:59:b5:bd:
                    ae:dc:b3:a9:06:4f:01:30:16:27:d1:da:e1:54:05:
                    fa:38:1b:1b:ee:61:b0:4f:0d:23:f2:3f:3d:db:d3:
                    32:8c:ed:60:7b:4a:87:43:92:81:98:52:b4:1e:1a:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:77:04:29:0E:7C:57:95:46:75:B7:FC:BC:89:51:57:7F:03:B0
            X509v3 Authority Key Identifier:
                keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:93:05:bb:94:c8:c0:11:08:df:cb:73:6b:54:3a:2d:bd:b3:
         09:28:b2:77:e2:87:a0:b4:b7:bd:f9:1f:b7:00:21:a7:91:ef:
         86:41:48:4c:a1:e9:03:57:9b:66:5e:e4:73:7f:14:53:8b:a1:
         53:7b:eb:9a:c8:d4:01:54:be:c0:39:71:f8:1f:3c:a3:b2:14:
         a0:bd:af:5b:1a:ed:d9:c7:9d:39:35:3a:47:bd:a7:ce:c0:b7:
         f1:ab:46:35:38:b6:0a:7d:b6:d8:ea:e1:c3:b5:7b:67:5d:c5:
         35:96:e2:ec:45:d0:97:a0:c1:08:52:6f:28:2b:f9:20:22:c2:
         a6:e3:f6:04:88:2c:1f:ac:e5:41:a9:43:c8:de:c7:57:27:39:
         b3:9e:7e:73:ca:aa:80:d7:79:03:cb:5b:29:c7:71:02:b1:bf:
         9f:6c:a0:5b:0b:5e:ce:e7:bb:70:ed:82:cd:0c:24:c5:26:8a:
         db:ee:0f:fd:0c:f7:92:c3:17:b0:6b:91:56:a0:78:a6:e0:d2:
         1b:be:f2:25:52:43:38:4b:71:4b:a5:96:a3:d9:ce:f5:5b:3d:
         f5:98:0e:b2:30:02:96:42:83:f2:a4:84:42:ab:9a:05:aa:ea:
         bd:f4:81:fa:4b:f0:14:4a:bb:56:78:fe:dd:29:d3:1e:3a:33:
         b4:0f:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----