Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/43ed1c-ff50-42e0-b7d4-af254ce3fe69/1/7bKno-y66qV0GCMdsLYkq797pkU.mft
File:                     7bKno-y66qV0GCMdsLYkq797pkU.mft (raw, json)
Hash identifier:          +1teRDNZLwUNh4rkdXMNV7pr6TvLNz2lVcVPVgYUKuY=
Subject key identifier:   EF:2E:F5:44:03:CC:51:D8:44:68:4F:A9:88:B8:91:5D:2C:03:E9:71
Authority key identifier: ED:B2:A7:A3:EC:BA:EA:A5:74:18:23:1D:B0:B6:24:AB:BF:7B:A6:45
Certificate issuer:       /CN=edb2a7a3ecbaeaa57418231db0b624abbf7ba645
Certificate serial:       01962F06787BD6B594643D14A72096A4A395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bKno-y66qV0GCMdsLYkq797pkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/43ed1c-ff50-42e0-b7d4-af254ce3fe69/1/7bKno-y66qV0GCMdsLYkq797pkU.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 7bKno-y66qV0GCMdsLYkq797pkU.crl (hash: 1/O947zvU/cUe8IFeA7P5U29/AW4GpO2UUI4NjB269E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:78:7b:d6:b5:94:64:3d:14:a7:20:96:a4:a3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb2a7a3ecbaeaa57418231db0b624abbf7ba645
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=ef2ef54403cc51d844684fa988b8915d2c03e971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:9a:9a:ce:34:70:b3:d4:ca:31:ee:4f:19:
                    f5:cc:08:44:d1:e8:6f:12:a5:e7:a7:fa:50:67:8e:
                    d0:ca:85:c2:40:94:09:88:f7:c1:9c:9f:5b:90:01:
                    02:f8:4d:d9:24:fc:3f:c2:c0:44:14:f3:ed:aa:dd:
                    34:38:7b:80:8f:91:54:00:66:71:eb:af:0d:03:59:
                    fc:17:06:b7:75:fe:86:f3:10:d9:1d:30:0c:56:84:
                    dd:f1:d5:e5:eb:e8:9b:fa:6d:30:3d:d9:5b:fb:54:
                    c7:99:ce:a0:e6:e0:94:ec:86:33:78:c5:a7:e8:8b:
                    1e:c7:94:4d:58:60:cb:bb:df:6d:16:8f:07:29:b7:
                    7c:74:c6:bf:12:23:9b:d0:ee:14:11:f1:0f:22:2b:
                    da:7b:45:e8:6a:9b:a1:04:56:7a:bc:26:34:e9:4a:
                    17:6f:83:52:69:19:39:31:92:dd:95:df:fe:95:da:
                    93:f3:70:4a:8e:5b:5a:2a:32:5a:87:c8:90:59:7a:
                    84:43:df:ff:1d:52:eb:c7:81:d1:1a:a7:65:38:c5:
                    bb:3c:33:ef:ba:ee:58:e4:d7:90:6e:9b:86:e4:62:
                    a6:e5:a3:02:97:e2:21:b9:ed:06:80:77:b3:d8:0d:
                    19:49:63:7d:c2:66:dd:36:bf:62:d7:1c:cb:78:7d:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2E:F5:44:03:CC:51:D8:44:68:4F:A9:88:B8:91:5D:2C:03:E9:71
            X509v3 Authority Key Identifier:
                keyid:ED:B2:A7:A3:EC:BA:EA:A5:74:18:23:1D:B0:B6:24:AB:BF:7B:A6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bKno-y66qV0GCMdsLYkq797pkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/43ed1c-ff50-42e0-b7d4-af254ce3fe69/1/7bKno-y66qV0GCMdsLYkq797pkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/43ed1c-ff50-42e0-b7d4-af254ce3fe69/1/7bKno-y66qV0GCMdsLYkq797pkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:77:9c:5d:5d:4f:6b:50:58:86:3f:41:f8:53:9d:27:d0:0d:
         06:b3:9d:45:ec:0c:0f:1b:cd:ac:01:9d:37:ca:e3:39:0c:b3:
         75:94:df:c1:33:cb:6a:e9:fb:97:c3:20:e8:31:f3:a4:d2:a4:
         3c:28:9e:83:ff:ca:aa:7e:2d:a5:e1:e7:35:33:39:7c:56:27:
         24:3b:cd:36:c5:59:e0:17:84:d3:af:c4:39:91:4f:04:a5:ca:
         f0:55:27:01:ac:69:fb:48:ca:8f:2a:6c:51:a0:8c:ea:ef:94:
         8b:21:d8:d7:68:62:c9:10:30:fb:cd:39:04:db:9c:29:35:ad:
         24:f0:d3:11:b1:10:32:c4:f8:1a:ba:fc:42:47:a4:76:3f:e7:
         f1:a0:86:9a:ef:35:fe:3e:62:05:16:d4:c3:a3:98:a2:b6:9c:
         d4:12:41:7a:a8:b6:f8:a1:11:5e:f2:81:43:d1:93:4b:cf:21:
         33:ae:bb:ac:ff:d5:d4:dd:e8:75:44:ad:7b:10:10:a1:1c:ba:
         1c:a0:a3:33:29:ac:f5:a5:89:c1:49:63:a4:f0:13:72:2f:d2:
         59:75:ea:cb:4a:28:45:4c:c5:d8:a8:6e:f6:64:d2:a9:55:a8:
         76:52:ea:22:58:cd:6c:a5:ec:15:b9:4f:d3:c6:e5:ad:b5:eb:
         d6:c0:0a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----