Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
File:                     eVBSIUjSaDdshFMMXS2lPjm_Gso.mft (raw, json)
Hash identifier:          ar8WhwumEnXmuGF7bBXsIZQJow1XsrIEN9i6hPNWWXI=
Subject key identifier:   87:DD:59:B1:8C:1C:32:1F:D0:CF:0C:55:D4:AB:1B:8A:FB:A2:AC:82
Authority key identifier: 79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA
Certificate issuer:       /CN=7950522148d268376c84530c5d2da53e39bf1aca
Certificate serial:       01962E98AB5264174E1D136B880F7DD39FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
Manifest number:          03BB
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: eVBSIUjSaDdshFMMXS2lPjm_Gso.crl (hash: xm8vmzAkDNwceXCmWkAIeqazyD78BiU5fZEHzOqqIj0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ab:52:64:17:4e:1d:13:6b:88:0f:7d:d3:9f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7950522148d268376c84530c5d2da53e39bf1aca
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=87dd59b18c1c321fd0cf0c55d4ab1b8afba2ac82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:96:71:c9:85:26:3f:56:10:99:95:a5:7a:
                    5d:36:b8:e7:4d:a5:41:00:9d:38:7c:6c:d1:26:c8:
                    2d:bd:f1:c4:b6:43:80:08:4d:54:df:28:6e:fc:5d:
                    3f:70:bf:ae:48:a7:d8:ef:5d:ad:24:8f:a4:c5:eb:
                    ee:89:32:32:c6:2e:34:72:d5:02:bb:68:c3:6f:6d:
                    e0:9b:33:7d:05:42:9e:82:63:56:7c:67:23:ee:cc:
                    de:f7:97:ea:d3:2c:6e:92:07:70:dd:bd:75:3e:09:
                    a1:e1:7a:79:66:2e:50:1c:d9:14:3d:cf:8e:ca:d6:
                    8e:a9:01:e9:64:75:eb:c2:e1:87:69:f5:2b:f6:b5:
                    9a:ad:da:74:8d:96:87:9e:86:4b:1a:23:46:6c:8b:
                    20:af:54:0a:ce:ba:64:76:4c:6f:2d:2d:b2:19:6c:
                    8a:4f:08:c7:ae:66:78:7e:f3:ed:50:04:b3:51:32:
                    0a:99:26:c0:fb:57:f5:0f:28:ea:21:f9:d5:3f:c2:
                    cf:87:35:83:d9:7f:91:68:44:93:73:08:cb:2e:43:
                    5a:44:8b:87:c2:bf:cf:fe:5f:b6:80:a7:a9:19:57:
                    61:06:ec:ab:ec:e4:6d:e3:03:7e:87:4b:b0:1e:e1:
                    33:84:4c:25:9e:8d:7d:32:90:07:8e:60:96:af:59:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DD:59:B1:8C:1C:32:1F:D0:CF:0C:55:D4:AB:1B:8A:FB:A2:AC:82
            X509v3 Authority Key Identifier:
                keyid:79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:fb:7a:25:b3:26:b2:7c:52:c6:59:09:64:1b:f6:4a:04:
         4f:c4:9e:21:1c:9d:94:bd:6b:a7:49:20:03:3b:12:a3:a5:44:
         c1:1c:4a:f2:76:43:49:3d:b6:fc:1e:e3:84:f6:52:f5:82:1c:
         03:de:13:e1:a6:65:9c:05:61:a9:a8:d9:4c:69:74:5a:c4:6b:
         71:cc:b3:26:c9:ec:ec:1e:1d:4f:a6:a0:e3:1d:c5:68:ec:8f:
         67:2a:e5:ca:2f:c3:09:ff:52:a6:3a:fc:e9:59:da:8c:75:c0:
         39:4f:f8:8a:d0:72:5b:17:54:39:5f:41:a0:04:4d:33:26:30:
         7c:c3:1f:d3:ea:30:a0:fb:bf:8c:53:db:69:33:a0:54:98:4d:
         86:9e:a8:53:47:8e:51:fb:e3:d5:5c:2d:93:58:d5:06:ab:32:
         f1:7c:84:83:0f:af:6b:71:d9:b2:fc:2a:50:df:88:80:2f:a4:
         f4:41:3a:a6:c6:e8:24:e0:7e:d0:a5:03:71:72:ae:36:cc:94:
         54:e3:1a:b7:21:4f:ab:29:40:dd:09:c1:48:ba:3e:30:00:0e:
         a5:3c:8e:78:20:b8:82:ed:56:e4:c8:c3:0c:db:e8:c9:81:31:
         93:ae:4d:84:e3:08:9e:75:43:46:38:48:22:56:11:a4:8a:8e:
         95:8d:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----