Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
File:                     fAVoDtezkIbfBF_4vOx13J2_iY4.mft (raw, json)
Hash identifier:          C7Oh/kAAj+ZyI9P7ICNclnNrR15lFMLs7XJn+5VkNNQ=
Subject key identifier:   E8:BA:BE:C7:39:95:8D:AD:34:3B:11:58:39:90:0E:C4:DF:AC:60:6B
Authority key identifier: 7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
Certificate issuer:       /CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Certificate serial:       01962E98729E1C565C7E68D04F7790A76616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: fAVoDtezkIbfBF_4vOx13J2_iY4.crl (hash: HQU9cVRVOorddTpSzgPMrBBtESkY8YLxQw+5PPkLfMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:72:9e:1c:56:5c:7e:68:d0:4f:77:90:a7:66:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=e8babec739958dad343b115839900ec4dfac606b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:58:69:32:b9:00:d9:d8:d8:ef:9e:77:2f:
                    fb:a5:b6:a7:9d:8a:b3:77:e4:13:03:df:76:57:97:
                    30:69:fd:3e:e2:47:be:32:d6:d5:82:4d:f6:b4:b7:
                    d4:14:66:ff:67:7a:65:f0:95:1c:1b:d8:86:bc:57:
                    54:65:f1:0c:14:86:68:81:35:ae:18:f5:b2:d3:16:
                    71:8c:cb:dd:62:d7:3d:3f:4b:db:af:b7:f9:80:df:
                    e5:b3:12:ba:9c:41:55:9e:3f:ec:c9:23:e7:42:4c:
                    00:3f:10:73:df:b5:70:78:a4:78:1e:a0:7c:b1:68:
                    7c:5a:82:94:d1:f9:e7:26:73:78:6b:46:cf:12:7e:
                    2c:a4:b0:b4:bb:bf:35:6b:f7:a2:f7:f0:76:bd:a2:
                    34:bd:e0:f5:83:0d:86:c9:59:4f:d3:0b:75:5e:7e:
                    7c:86:3a:e3:93:89:65:96:c2:88:de:e8:96:4d:e0:
                    42:31:82:0e:fb:27:27:72:89:ea:0e:e3:ed:43:01:
                    ba:86:fb:7b:ab:bd:a6:1e:f8:09:07:61:66:44:a6:
                    0b:a6:30:ec:c6:9a:88:fa:a3:93:e1:b5:8d:12:9f:
                    78:69:2c:f3:ac:a5:0f:4d:3d:77:79:b5:7e:c7:6e:
                    8c:ff:83:8e:09:dc:ad:50:8b:6d:2e:ed:f4:e9:79:
                    13:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BA:BE:C7:39:95:8D:AD:34:3B:11:58:39:90:0E:C4:DF:AC:60:6B
            X509v3 Authority Key Identifier:
                keyid:7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:45:6f:2a:b5:ef:3d:9f:a0:57:37:29:5e:5f:1a:96:84:9a:
         ab:de:16:a7:05:4b:cc:c1:27:bc:a4:5b:36:92:d1:f1:62:4b:
         15:94:bb:a1:cd:61:7e:7e:89:75:d5:1c:ca:41:34:c3:85:9e:
         d2:e0:ff:40:a6:fd:0c:a1:76:2f:ef:71:c9:1f:c7:40:df:36:
         18:36:bc:98:60:f5:b7:f0:ba:9a:d4:95:45:86:b8:46:5b:39:
         5b:09:ce:e3:eb:97:9f:e4:eb:dd:14:75:62:57:56:10:16:7e:
         28:54:49:d6:ac:a0:25:a0:db:28:3c:1a:d4:4a:2d:86:6b:fe:
         79:7b:46:b4:db:a5:b9:fe:91:6c:9e:6d:1f:04:10:ef:84:90:
         a8:51:4a:be:7c:5f:43:7b:e5:74:26:c0:df:1f:0a:38:11:d8:
         4a:b2:32:c6:00:d7:bf:80:a6:de:cb:7a:8a:4c:1f:47:ed:14:
         56:86:1d:67:3d:00:f5:4f:2a:8a:33:e4:11:41:94:a0:93:c3:
         0c:1a:49:e7:90:3f:52:38:81:5c:6e:c0:b3:d4:54:eb:8b:2c:
         c8:92:51:5e:e3:d9:7e:18:f5:4c:ff:29:38:cf:7f:b4:fd:a7:
         16:5c:b0:19:be:7b:ce:1c:2c:b7:65:44:8d:40:4a:a6:19:57:
         41:c3:89:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----