Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File:                     7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier:          3aViUMppCKH2JDz7hY0t0mLw8TirmMRMeQaGm6mK/rk=
Subject key identifier:   A0:EE:71:EC:C1:0E:3A:4C:89:2B:2E:99:72:35:15:EA:CA:E4:06:02
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer:       /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial:       01962ECF8D7AED552D6CE45030AF82FDC45F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number:          0446
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: TU1pIpAVT/I5rVCHJtyzwVpYzPggyhmZM1L9b0wjM3o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8d:7a:ed:55:2d:6c:e4:50:30:af:82:fd:c4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=a0ee71ecc10e3a4c892b2e99723515eacae40602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:b0:2a:df:61:15:b4:d7:96:f5:a1:d6:5d:
                    67:3e:fb:84:97:66:7f:7e:df:e2:ad:64:70:28:f3:
                    32:a2:6f:24:21:5b:b9:d3:5f:e5:cd:a5:6c:9d:f4:
                    15:a9:0d:7e:90:ca:77:6a:a5:16:e9:80:9d:8b:cb:
                    0d:8a:ea:de:b9:36:f6:3d:a5:50:13:b0:54:c8:94:
                    f5:86:2c:79:2b:b2:b3:bd:e8:db:7c:b3:b5:6d:22:
                    dd:22:f5:bc:4a:e2:b1:82:2d:c2:5e:39:7c:f8:0f:
                    9e:5a:70:69:95:1e:53:50:e7:77:4d:6e:62:56:5e:
                    e8:00:28:c1:51:6a:1a:1f:12:b4:f7:dc:ff:4c:3f:
                    ac:01:a3:9d:32:3a:6a:be:b2:14:c7:18:5c:24:ae:
                    f2:6d:39:65:8b:a6:f1:42:da:ad:1f:e4:68:99:d0:
                    5c:14:f1:ec:bd:64:27:5c:ee:f3:97:eb:9c:5b:0b:
                    b3:e7:20:dd:57:f8:e0:0b:2a:6a:cf:33:c4:62:d7:
                    5b:9d:d5:3a:93:64:e1:05:a8:eb:85:63:e2:d4:9c:
                    de:8f:cc:f6:fa:81:08:7b:be:3f:c6:82:77:d9:66:
                    ab:64:63:5a:e1:cb:d6:43:6b:ef:6f:de:61:a0:d4:
                    cc:38:a8:7f:4c:7c:34:c6:63:10:6d:8e:ff:a1:98:
                    65:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EE:71:EC:C1:0E:3A:4C:89:2B:2E:99:72:35:15:EA:CA:E4:06:02
            X509v3 Authority Key Identifier:
                keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5a:0e:43:69:34:28:ca:29:0b:f6:95:22:99:b2:94:2c:99:
         78:2f:b2:60:67:73:3b:94:d9:16:02:69:07:63:18:ce:51:ce:
         9c:6c:8f:3b:57:ef:f4:90:c3:9f:12:94:8b:3a:20:6a:4c:3b:
         63:68:d4:7b:72:22:c6:6e:4b:4c:55:48:71:3f:b7:b8:d7:05:
         ff:fa:78:0c:92:c8:5a:08:51:ca:d0:fe:5f:2b:59:17:e0:b9:
         e4:85:e0:21:24:ab:b1:76:38:4d:ec:f1:6d:01:71:c5:e6:56:
         aa:55:21:75:a7:e9:12:b7:49:f2:64:60:17:1b:b2:25:a2:06:
         0c:bb:e6:70:d0:51:ef:ac:08:84:bd:8d:dd:9f:99:92:43:77:
         e4:6c:b2:35:69:74:8e:cb:71:ea:4e:c6:ca:bd:61:9b:90:60:
         10:49:dd:74:6e:26:bb:21:20:e8:d7:74:78:6c:d3:34:2b:61:
         ca:1a:d4:52:76:37:09:07:c3:33:23:88:98:f2:d0:7b:49:8f:
         eb:b0:a3:d1:e6:fd:f2:4c:c9:21:b1:4c:1b:b2:ca:72:f7:ea:
         2a:31:f9:f9:dc:03:64:4d:6d:38:df:23:bf:6d:d0:8c:d5:af:
         f0:14:b8:ea:ac:cc:dc:60:b5:27:cc:be:dd:f5:33:9b:40:26:
         8f:fc:dc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----