Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          eAKVp5uc5p+6AITb6YpC9H1lrE09Ud2YjpnZM8WvEog=
Subject key identifier:   5C:E9:4C:4B:2C:C6:CC:4E:0F:EE:CC:55:E3:C6:C8:3C:B3:39:C7:B3
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       01962ECFA02B744224D5EA8A8C98005DF4D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          01A6
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: c5V72tjTbOhX01j+zLiDsp18ycN5tq8HMY2Pvz8gJNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a0:2b:74:42:24:d5:ea:8a:8c:98:00:5d:f4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=5ce94c4b2cc6cc4e0feecc55e3c6c83cb339c7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9b:cf:6b:e5:ca:ad:95:30:0a:1a:60:a0:40:
                    94:91:9f:c4:d0:3e:f0:8d:60:db:4c:b9:67:7c:4b:
                    18:d8:be:f3:d5:39:f9:a9:1b:c5:42:4c:18:e0:49:
                    c8:b8:0b:8f:13:0a:f2:5f:87:57:29:d2:51:71:bc:
                    dc:d7:05:ac:01:b3:e5:95:87:c6:95:f2:19:ca:4a:
                    9f:1c:3e:17:4c:29:0c:42:6b:3b:3a:d0:57:2d:15:
                    0a:a1:35:a4:3d:a0:40:a2:5e:88:ce:8f:86:e6:19:
                    28:49:b1:78:89:43:f5:a3:77:c6:bc:27:18:14:44:
                    36:be:60:f9:3f:af:8d:6f:9a:da:d2:d2:05:fe:ff:
                    5f:75:65:8c:5b:ab:33:29:7e:0f:a6:31:e9:a3:72:
                    8c:ae:5f:86:54:8f:63:36:c6:fa:03:21:41:71:fd:
                    96:f2:07:d0:ec:2d:6f:44:a2:fe:89:af:4d:b5:27:
                    39:18:23:f8:89:0c:9e:61:b8:ae:fe:e5:1e:59:b4:
                    ac:e0:b9:e2:cf:9d:9e:0e:27:c6:e7:bb:84:a1:04:
                    70:4c:f8:41:2a:8f:08:35:7c:9f:4f:3a:be:4c:1d:
                    de:2a:27:29:45:f0:b2:4c:fe:ca:9f:11:29:57:84:
                    20:3e:97:8d:af:f2:5c:a6:fc:c6:bd:e0:27:31:f7:
                    1d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E9:4C:4B:2C:C6:CC:4E:0F:EE:CC:55:E3:C6:C8:3C:B3:39:C7:B3
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3d:08:be:4f:f9:40:f6:7a:29:b2:b8:33:e9:d9:e1:37:73:
         5f:d7:dc:aa:d6:83:07:cc:5e:14:8a:df:91:57:77:cf:14:e0:
         06:dc:40:9d:d9:0d:06:86:d1:89:33:33:05:0f:fe:31:ea:17:
         29:1a:2d:c5:0e:32:95:a6:f9:8f:94:2e:3e:5c:e8:af:f4:a2:
         69:80:36:06:af:e5:b6:cd:fe:0f:3c:99:1b:5e:81:cd:f9:e5:
         0f:70:a6:f2:ae:38:d5:c2:d7:a9:c6:ce:1b:5b:9d:51:e7:fb:
         d9:d1:2a:8f:ee:71:0c:ed:70:c7:d2:6c:1a:46:7b:9e:87:ef:
         69:4d:14:aa:a8:56:f8:bc:2d:3c:1e:3e:0d:55:05:f7:ff:3d:
         e4:e5:97:ba:33:16:bc:5d:f6:f1:7a:34:49:7b:dc:dc:c3:8b:
         e0:0f:2a:69:d7:ce:76:83:f9:45:2e:3a:35:ad:9a:7a:83:10:
         b7:24:03:53:0c:cc:03:14:a8:30:6d:3b:81:b8:2a:2a:9c:5f:
         eb:9d:2a:a4:d2:a3:a5:d0:a0:4a:9f:04:c7:7e:d4:4e:6c:6e:
         81:0b:71:19:d1:ab:6e:b0:a2:8d:d5:5c:8b:14:d5:33:74:2c:
         48:23:22:ae:7e:f7:4b:d7:52:74:3a:ee:bd:de:2f:7d:96:ab:
         52:96:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----