Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File:                     7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier:          O19fCUNj+7gIbiEaNiwvZyiFhreQb06ERYXfRCYQl7E=
Subject key identifier:   E8:39:6C:54:9C:37:AC:C7:73:84:FE:25:F9:FC:0C:A0:1B:EE:3D:E2
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer:       /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial:       01962F74D902B226C663758298716570D07D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number:          117D
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: nW22ckTxLT/RXM3WzyADJFA4Gm3/FJLno9kYUuUFOCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d9:02:b2:26:c6:63:75:82:98:71:65:70:d0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=e8396c549c37acc77384fe25f9fc0ca01bee3de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fd:3c:af:c2:ca:1d:17:52:a6:29:93:cf:fd:
                    37:44:21:cc:59:22:b0:12:3f:9e:c2:de:ea:3e:b7:
                    cc:56:6f:fb:14:bb:1c:39:d6:b7:49:d9:04:1d:76:
                    fa:d4:40:6a:fd:cb:f7:6e:dd:7a:dd:e5:97:a0:2b:
                    56:54:50:e9:6c:88:44:d1:66:ce:b6:1f:23:72:74:
                    1a:51:b4:51:db:4f:7c:73:6a:85:b7:81:92:52:be:
                    c4:98:15:59:a7:bd:77:aa:2f:11:72:c8:6c:af:5c:
                    1e:4d:43:40:41:cb:eb:66:e4:05:36:95:dc:6b:70:
                    bc:02:c5:03:aa:6a:3f:b5:d4:ae:3d:7c:11:b4:5a:
                    6a:27:97:be:99:82:0c:16:d6:6e:68:97:09:fa:a4:
                    4a:a7:ee:79:9a:32:28:24:40:29:8c:25:9c:5a:8c:
                    06:7a:6e:71:92:08:06:28:a3:dc:10:df:05:9f:df:
                    94:20:c5:e3:f6:47:74:3f:dc:ef:26:06:bb:a8:2e:
                    9b:96:72:93:86:78:de:a5:c9:73:0f:ca:a0:6c:c3:
                    98:c2:1c:96:cb:e1:31:84:a3:6e:f1:df:ea:86:05:
                    39:a7:e0:dc:fa:80:ac:48:a2:7e:2c:cc:c1:79:56:
                    a8:e8:3b:60:ae:f1:c6:9b:5b:db:6d:fc:0b:da:60:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:39:6C:54:9C:37:AC:C7:73:84:FE:25:F9:FC:0C:A0:1B:EE:3D:E2
            X509v3 Authority Key Identifier:
                keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:50:07:cc:e9:af:76:5b:53:56:de:f2:8c:00:24:31:79:
         98:52:38:9c:1b:39:17:b8:99:51:e2:07:ed:79:4c:60:43:51:
         bb:1c:bf:df:50:9b:e2:f9:1e:42:ee:7e:53:a0:31:dd:83:95:
         66:46:bd:4f:2f:ec:ee:69:5d:94:b1:cf:4b:84:6a:44:e6:18:
         a5:65:77:27:ee:ad:60:c0:6a:98:81:5e:8c:83:8d:54:e6:2e:
         d9:60:41:ad:af:c4:37:58:b2:21:71:fe:42:34:57:a2:00:1f:
         53:0e:bd:7b:11:87:b4:f7:a9:fe:71:15:b1:a0:f2:98:5b:14:
         e7:f6:8b:ea:92:9a:b6:db:af:75:42:5e:5a:ca:0b:47:af:8b:
         94:b4:85:7f:c5:c8:cb:43:7a:e4:55:b9:9a:ad:d7:69:8a:20:
         03:d6:c1:e8:0f:bf:cc:44:7c:24:38:d9:4e:1a:11:c1:04:3f:
         03:e1:9f:27:95:79:f8:5a:44:3b:79:09:f3:60:79:e3:9b:7c:
         d5:ae:f0:f7:85:25:07:d5:1c:c1:23:ac:b6:d5:55:c7:8b:1c:
         4c:0f:b4:6f:7d:65:46:10:e1:e1:17:78:a8:b4:ce:5a:93:08:
         2c:05:37:be:90:ed:af:82:bb:d5:d3:1b:c2:17:76:85:43:cc:
         1d:2c:26:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----