Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File:                     eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier:          UytViq8SukLuVqHXO4iq+sKWb8jOZXZ3x48DqOAGTk8=
Subject key identifier:   A6:27:BC:60:4F:57:C6:13:E8:77:7A:E7:D8:BD:34:82:8C:69:C8:AF
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer:       /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial:       01962E98C395279735B477EDEC56CBA2CE6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: HzqiLSWQ63HkGBU+cgLv8OOcM3LoDoPmK3jJ0kU8heA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c3:95:27:97:35:b4:77:ed:ec:56:cb:a2:ce:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=a627bc604f57c613e8777ae7d8bd34828c69c8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:05:77:ee:ba:7c:55:2c:02:9d:79:f6:03:e5:
                    d2:2d:47:33:f8:31:c9:8f:dc:20:6b:40:c0:57:09:
                    44:24:b1:f7:7c:9a:37:db:a6:f4:36:dd:d7:1d:b5:
                    49:9b:24:21:1e:7c:f1:ca:99:40:cd:99:2a:e5:64:
                    56:66:fa:54:11:6c:8e:69:fc:cb:b6:ba:e9:24:f6:
                    30:a5:2a:34:e1:a1:88:aa:a9:d0:4f:a6:85:ee:58:
                    6f:0c:3a:28:e8:5f:1f:46:6f:3f:4a:a4:9b:2e:ec:
                    0b:0f:a7:8e:df:49:ca:c7:ee:d1:74:b8:c0:83:a5:
                    7f:b8:2d:95:2d:ef:b4:4a:e1:11:b1:72:83:a7:28:
                    13:d6:22:d9:8f:02:80:8c:1e:e0:f6:96:4d:d9:9c:
                    2e:36:c5:91:e8:29:4c:e9:5c:72:d3:60:42:b3:dd:
                    96:6a:e6:30:8b:1f:8c:af:d8:5c:36:8d:5f:e9:d0:
                    5e:54:0e:5b:8f:ad:c8:50:62:9a:1e:d1:49:91:c0:
                    1a:ab:1f:b3:83:34:eb:c1:da:9c:7d:65:55:a7:75:
                    fa:07:08:00:2d:b6:23:7b:00:6c:d2:84:16:24:8c:
                    d9:8b:fa:ac:82:e8:2d:31:d5:1a:c0:1c:8a:ec:03:
                    1d:78:4f:be:7d:ee:2a:9d:2f:4d:ab:4b:e5:77:3e:
                    54:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:27:BC:60:4F:57:C6:13:E8:77:7A:E7:D8:BD:34:82:8C:69:C8:AF
            X509v3 Authority Key Identifier:
                keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:16:2b:25:59:df:b4:78:a4:b4:5d:8b:1b:1a:6c:06:e3:0d:
         9a:86:b2:bc:93:1d:50:e8:89:53:4d:ce:4c:ba:b2:67:e3:15:
         f1:62:c7:ac:2d:79:e0:03:3d:58:bc:6c:91:0a:a1:c1:84:04:
         c4:bf:67:64:57:36:ad:ae:78:9b:c1:d1:ea:cf:ec:2a:42:d4:
         27:3c:13:f1:03:3e:41:31:a8:35:78:0d:e8:36:d7:e3:ba:26:
         f6:1c:42:c4:ec:9d:75:e7:7e:9b:7e:60:de:c3:22:25:3d:aa:
         e2:df:70:e0:02:bf:c1:19:32:4e:2d:a0:e9:f2:70:60:c6:77:
         12:6b:e9:15:5a:bc:af:84:2c:71:41:97:c5:f3:a7:9f:f6:83:
         90:6d:51:b3:a5:4e:69:31:c0:69:ae:a7:e9:a1:dc:a4:aa:ff:
         cd:55:c0:cd:b4:52:9e:93:37:6f:f9:f9:0d:13:43:e7:05:f5:
         16:b6:ea:c9:a4:ea:3a:07:6f:e8:f7:e3:28:5d:09:83:47:c2:
         a0:e3:aa:1d:a5:4e:a1:7e:25:56:db:12:bb:94:35:63:1b:ca:
         72:09:c3:72:56:bd:13:98:2d:59:a9:c7:02:a8:80:1d:bd:25:
         64:07:41:49:54:30:03:71:c3:12:45:ba:e2:5b:6b:ce:43:61:
         a3:92:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----