Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
File:                     ElaCoB4i5CM4yoXHJVubP54q6jA.mft (raw, json)
Hash identifier:          1a2dwkjIk7GaB0qWOjk2nlng2MaT1eZw9Kpv98r8/VQ=
Subject key identifier:   E6:D2:F4:39:B2:DA:84:A8:E9:46:C1:48:30:E2:9E:4A:FE:2E:29:22
Authority key identifier: 12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30
Certificate issuer:       /CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
Certificate serial:       01962F071F940D64C42652E96CB4C3A4B586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
Manifest number:          0320
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: ElaCoB4i5CM4yoXHJVubP54q6jA.crl (hash: JJ3Fiv7TwdUcIvO4Qk5qGG0RjRL0mmYRJikqIKwPQhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1f:94:0d:64:c4:26:52:e9:6c:b4:c3:a4:b5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=e6d2f439b2da84a8e946c14830e29e4afe2e2922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:22:8d:61:07:94:b8:49:b7:0d:8e:76:16:
                    7c:b2:32:6e:3f:ab:a4:9d:31:e9:48:b2:9a:10:d8:
                    23:e6:02:65:2d:b9:e4:27:88:b0:ae:73:47:99:52:
                    39:a4:0a:cd:e8:0d:04:81:8b:0c:24:b6:34:64:29:
                    30:30:17:54:14:16:c5:32:88:a9:50:e9:76:0d:f1:
                    8e:20:ef:c5:68:99:56:e8:31:a5:b7:67:25:90:e4:
                    d0:10:3d:6a:36:c7:38:25:56:cd:6d:15:5d:b9:b9:
                    25:e7:ee:fa:3d:e2:4b:9b:b3:c0:52:7d:eb:98:56:
                    9f:84:95:fe:0d:30:5c:b9:33:91:9d:f7:a0:23:12:
                    e7:39:96:f0:92:0d:25:c0:4e:19:88:d7:89:fb:b5:
                    c3:2c:ef:69:4e:b5:e5:8e:23:81:f5:1c:7d:24:10:
                    81:b4:56:61:b8:75:51:a0:8e:6a:aa:7e:e5:13:17:
                    93:86:41:cb:0d:7a:6a:20:3f:94:1a:4b:3a:9b:22:
                    3c:d1:e3:4f:5a:48:63:8e:a1:3c:e4:66:33:8a:04:
                    bb:13:07:d5:f1:b8:6f:5f:bd:e6:00:ee:c6:f3:f0:
                    62:6c:b1:bf:d0:97:39:77:df:67:0c:1a:aa:20:21:
                    3b:46:d5:13:97:5a:32:f1:a0:f5:8f:2a:e6:e1:72:
                    35:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D2:F4:39:B2:DA:84:A8:E9:46:C1:48:30:E2:9E:4A:FE:2E:29:22
            X509v3 Authority Key Identifier:
                keyid:12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:51:8a:af:a5:f0:56:e9:31:f9:2d:cf:8c:c4:89:d6:4c:39:
         ed:5e:f7:28:fb:7f:bf:af:ca:6c:a3:42:52:ea:42:a1:75:15:
         a5:0c:b8:19:25:1c:2e:a5:68:d6:6d:52:98:6a:08:5d:e0:1c:
         7f:b3:bd:6e:71:13:13:01:fc:a1:b5:de:53:94:9b:5c:ac:f8:
         05:af:c1:ab:e7:b5:8a:e8:df:7b:6a:9a:66:80:c0:c5:64:7a:
         0b:fa:b3:58:34:45:ee:65:6c:19:a4:3b:65:5b:85:38:3c:6d:
         31:db:0d:7b:22:b8:03:dd:e2:46:78:57:ed:95:18:56:2f:36:
         a1:d4:6f:56:d3:ce:e3:10:4c:6d:4e:45:3b:a8:d0:36:54:f1:
         8b:4f:df:89:1d:b4:72:a5:d3:cd:81:8e:66:c2:78:69:cc:6e:
         b8:b6:f3:8b:b9:47:ce:b6:fd:0f:9f:d4:e4:27:2d:f8:27:55:
         a7:66:cf:7c:65:6f:a6:92:a4:30:d6:f3:70:b1:f2:cd:fd:d6:
         3b:bb:53:cb:e3:07:5c:c6:5a:46:b2:ce:10:38:7c:63:ec:83:
         69:da:e3:08:c7:df:6a:e7:9c:a0:bf:a9:72:f5:56:ee:3e:28:
         95:6e:ba:5a:dd:28:f5:02:a8:42:49:15:37:ec:67:c2:c2:b9:
         2a:37:aa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----