Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File:                     eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier:          B4mmpR0s7mpqWPNMfnH0e6XCb/mfR2gt8grxdwGaf+8=
Subject key identifier:   A6:44:69:AA:F2:B5:39:E5:CC:40:23:93:64:E3:D5:02:53:43:A2:07
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer:       /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial:       01962FAB13AD71516D8D0889DDC5F5B9F8F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number:          D4
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: 8DCP6eq7C6LrU/Plgcw58gbLmc8IEMDkT4YhPfOcMmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:13:ad:71:51:6d:8d:08:89:dd:c5:f5:b9:f8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=a64469aaf2b539e5cc40239364e3d5025343a207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:45:bc:11:eb:6f:85:c2:b6:da:05:b3:cb:
                    cd:04:4a:f3:c6:e5:69:10:2b:51:6f:a1:18:34:46:
                    af:6e:d3:e1:98:ea:db:f6:68:d7:80:15:b2:c8:08:
                    03:5d:81:9e:ba:25:3c:79:1b:a8:b7:c1:93:25:22:
                    db:e9:0c:b3:2b:72:dc:69:02:79:6f:3f:87:3e:d9:
                    fa:04:57:e4:50:c7:15:f7:82:f6:c6:e4:4d:9a:f2:
                    47:18:e4:77:7b:2b:38:2b:de:2c:26:8d:7a:01:ef:
                    b8:8a:30:e7:29:98:05:d6:9f:84:8f:51:be:29:68:
                    16:4c:fd:77:b7:ca:43:a3:5c:05:b6:54:fb:4b:03:
                    47:dc:f2:76:d0:fa:b8:3d:07:7e:29:ed:df:1d:4a:
                    6d:a2:0e:2c:49:f0:ea:e6:24:e3:95:f4:91:10:42:
                    be:4e:b7:cc:69:95:4e:69:6b:91:87:fb:cf:54:b8:
                    32:1b:cb:45:73:23:08:f2:cb:43:c9:aa:2c:5c:7f:
                    53:3c:c2:da:e6:7d:c9:49:1d:65:bb:a9:1e:d8:0e:
                    b1:5d:5a:23:70:06:50:95:a7:38:fd:c6:82:7f:9e:
                    e2:16:0b:79:a3:d8:ec:ab:7c:4f:62:b1:b3:21:1f:
                    5c:0d:76:62:d5:da:f7:39:08:53:15:be:eb:e2:97:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:44:69:AA:F2:B5:39:E5:CC:40:23:93:64:E3:D5:02:53:43:A2:07
            X509v3 Authority Key Identifier:
                keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3c:35:1e:4c:04:19:0d:31:1e:1d:1d:bf:70:47:ae:47:af:
         69:14:45:6e:9b:c2:0d:ba:34:70:ae:dc:fb:95:39:96:39:5f:
         4c:f6:f2:20:4d:60:3a:00:e8:5d:e7:21:c7:99:46:7a:0f:07:
         f6:12:12:55:c2:55:70:cf:31:15:5c:47:dc:21:54:d1:cf:57:
         a1:bf:e0:e6:2c:54:96:b0:ba:95:52:41:dc:39:07:68:68:d3:
         15:23:1f:37:9d:da:ef:c5:23:d9:80:a7:6e:39:2c:eb:65:55:
         15:84:ec:01:59:6d:93:67:9f:66:5a:fa:e4:34:da:03:a8:b5:
         f0:29:39:36:d0:21:3f:44:61:a7:0b:ca:81:dd:21:db:8b:46:
         83:8d:c3:a5:29:bd:cd:8a:c2:72:0b:33:5b:f4:22:7f:46:ee:
         64:6c:92:26:eb:aa:2a:48:45:1a:cb:3a:57:8c:40:01:c9:a5:
         64:1d:e4:9c:bb:62:0f:5b:da:80:02:38:6c:af:fa:60:40:c0:
         70:98:88:f6:8a:2d:21:fd:44:3f:98:df:f5:74:84:38:7c:a9:
         91:20:40:69:5d:83:c4:e8:de:02:cb:51:40:91:b8:3b:9b:5c:
         01:5d:28:04:eb:c4:71:48:39:b5:a9:f2:fb:75:28:c2:0a:4b:
         8f:9e:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----