Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          9Y9ozObfzBtSZUWku9+wafPRQdtSQ5pAleLIHs4dOdA=
Subject key identifier:   88:9D:4E:74:A5:03:C6:90:FB:1E:9F:EA:75:CA:3D:F0:EF:CD:12:E6
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       01962F07017F1291AEA5A6C84B03DE294E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: wn4ZNC8AYK4kfXFrabdsMmZ3H+QJ4ewDOdMYiCFt82o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:01:7f:12:91:ae:a5:a6:c8:4b:03:de:29:4e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=889d4e74a503c690fb1e9fea75ca3df0efcd12e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:53:88:ee:ca:44:4c:88:6e:01:99:5f:8c:14:
                    f9:8b:64:80:62:1c:ba:85:77:39:48:7f:a3:f1:12:
                    e1:56:50:0b:8e:04:a0:db:da:6a:c4:fd:06:c2:b8:
                    d2:f0:db:dd:51:4e:5c:aa:a9:6f:db:e0:0e:40:8f:
                    a8:26:94:eb:bf:93:93:d7:2c:84:f2:a8:b3:f5:68:
                    85:0a:35:18:bd:e8:41:51:65:f0:f7:93:78:70:8e:
                    f2:19:29:79:41:4a:af:53:cb:7c:ab:4e:d8:8e:8a:
                    80:e2:4c:1d:ce:c3:92:f2:45:bb:2f:8e:4b:7a:c4:
                    a4:19:09:d8:47:ea:e1:a2:ec:f1:a5:d5:d0:9b:6f:
                    d5:db:ed:80:4e:e0:58:bc:3d:42:b7:72:db:54:24:
                    6c:f2:21:de:07:8c:09:e6:1b:60:78:90:39:39:4f:
                    3b:09:91:80:ba:21:a0:42:2b:99:70:8c:70:20:b5:
                    e0:2b:3a:85:62:c2:51:f0:ed:d9:1d:07:c4:52:5a:
                    67:fc:90:57:5f:40:12:a8:04:f8:d0:fb:c7:05:cc:
                    3b:4c:a9:14:21:b9:d2:bb:d0:18:fb:74:4c:00:1f:
                    d0:32:cb:b9:cf:c8:28:6b:e2:32:8e:98:02:21:53:
                    62:da:fc:0c:f6:22:6c:1e:0c:b2:14:8c:c9:57:be:
                    74:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9D:4E:74:A5:03:C6:90:FB:1E:9F:EA:75:CA:3D:F0:EF:CD:12:E6
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:58:00:4f:d6:69:ca:17:23:22:ea:07:8e:23:4d:4d:b0:f8:
         f8:6e:90:82:2b:0c:bc:20:89:fa:1b:94:e8:84:81:18:28:c1:
         7e:e3:1f:ae:9c:51:2d:ec:b6:fc:38:da:ff:1a:d5:4a:94:84:
         95:0a:ae:6d:5f:bf:df:9b:7e:29:23:ae:58:68:13:5a:76:74:
         f0:7a:d1:cf:c4:20:34:71:5f:b0:b8:8e:80:8a:4d:22:fd:5b:
         d5:50:54:b8:42:d1:92:69:a7:fe:17:79:93:30:68:e1:98:f0:
         c6:94:f4:ef:69:7a:d2:a8:4c:7f:2f:aa:32:29:d5:ea:b5:96:
         2d:3b:f9:23:54:2c:35:f0:50:24:76:9f:0d:19:25:4e:13:bb:
         54:12:3d:6b:2c:48:31:bc:58:ed:51:0b:4c:fc:fb:f1:89:b9:
         8d:cb:bf:57:79:92:56:00:79:53:cd:52:60:e6:7b:3e:28:e6:
         92:b9:43:9c:fb:f1:11:64:39:26:e7:68:8b:06:f4:a6:78:48:
         d4:99:6b:79:fe:c0:85:ae:1d:bc:9f:5a:cb:e5:0f:df:9c:6c:
         4d:a9:d8:3b:90:a4:59:99:02:b1:18:81:94:e1:65:bf:d8:1c:
         93:73:2c:73:a3:43:a2:cc:34:31:71:cb:6b:e2:8e:fe:63:ff:
         54:0d:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----