Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File:                     68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier:          kyialPWBXJy24GXWsETeJvRsoB+C9FWTrSreFaEvL94=
Subject key identifier:   07:8C:74:5F:72:C3:98:4D:29:A9:91:55:75:9B:DB:10:0B:36:6F:F1
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer:       /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial:       01962E99A533A27008E89C812637BF204501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number:          082E
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: KgdHSXMcYEl4jKWljaKbYszRfQRmnHTBQv50f0t2pFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a5:33:a2:70:08:e8:9c:81:26:37:bf:20:45:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=078c745f72c3984d29a99155759bdb100b366ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:8b:12:a4:b1:73:1c:b8:5a:97:92:65:62:
                    76:c4:bf:80:e5:00:56:d6:39:ec:94:c4:6c:1b:78:
                    0a:24:2a:3b:f0:76:9f:aa:bb:fb:7b:91:6e:6b:80:
                    fa:5e:b2:16:49:4d:dc:23:c3:ae:33:bc:89:db:30:
                    6b:9a:ce:f3:99:70:43:35:c3:3b:00:4c:61:23:82:
                    cb:c6:87:a4:24:c1:35:5c:e7:a6:77:e6:08:9f:c2:
                    4f:b6:83:69:ba:0f:d2:69:2c:c8:d6:30:88:3c:a9:
                    d8:51:be:61:9a:85:7d:80:4c:c7:a6:66:85:dc:d6:
                    ef:54:bc:b5:b4:a4:c7:78:ce:60:f0:61:91:b8:be:
                    e7:f3:1b:3d:bb:3d:8b:40:a1:f9:6b:4b:d7:b1:02:
                    94:77:e9:8e:59:68:c3:38:ad:45:ba:97:1d:dc:a6:
                    1d:c1:b8:69:1c:cd:fe:d4:43:60:73:1a:bf:47:56:
                    8a:db:a1:e1:da:aa:25:d5:14:3d:57:75:5c:6e:02:
                    04:24:56:dd:f5:21:19:8f:9a:ca:97:81:de:8d:44:
                    3d:08:34:05:6b:46:d4:43:f1:f3:a8:56:03:1a:91:
                    c5:ce:d9:25:15:86:f0:a5:93:b4:ff:41:a7:25:dd:
                    2f:c2:1e:d8:19:11:fa:8f:c7:4c:24:12:7e:e8:93:
                    8a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8C:74:5F:72:C3:98:4D:29:A9:91:55:75:9B:DB:10:0B:36:6F:F1
            X509v3 Authority Key Identifier:
                keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d6:c2:50:7c:69:4d:95:e8:ff:94:e6:47:30:5b:aa:8b:89:
         25:38:cb:8c:97:5f:dc:0d:07:0e:61:cb:5f:d4:7c:ae:24:ac:
         eb:6d:a5:09:af:fd:69:59:60:74:85:9c:09:31:cb:3b:6d:e8:
         33:00:a8:4a:3f:c8:38:8b:3c:b1:15:80:0b:38:b8:42:c3:ff:
         34:3a:12:e9:8a:c3:34:8c:f7:39:90:e6:38:61:b0:cd:6e:2e:
         d8:e2:ee:74:88:f0:28:64:44:f7:20:5c:22:53:3a:ba:7b:cf:
         5b:aa:3e:58:4b:26:3f:74:a6:48:38:bc:a8:05:68:20:b7:4d:
         17:c9:3b:d8:9c:8b:bc:61:d0:56:79:c7:cc:9a:d6:86:85:fe:
         cf:81:fe:a7:ae:64:8c:bf:2c:a9:ec:0c:8e:16:e8:e0:6b:d9:
         b1:22:8e:da:e6:28:5b:ef:70:fd:47:df:3b:bb:e5:23:f4:96:
         23:74:a7:ad:f5:cb:87:3b:6e:46:0f:fc:24:a9:97:74:3c:77:
         c8:11:ce:00:6e:80:45:50:80:5e:4a:2b:db:c9:a4:40:bc:e9:
         1b:22:47:80:0b:8a:31:bd:db:ec:69:01:05:a2:d5:fc:3d:4d:
         03:9d:a0:0a:52:10:ab:2d:b5:5e:d4:27:ee:96:72:22:7f:8d:
         84:ad:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----