Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
File:                     e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json)
Hash identifier:          N47kQfTFFSUx6XymhKroBEnadRHd8ocznfHUPBIK2q4=
Subject key identifier:   E6:57:1C:08:8E:77:2B:D6:F5:3C:9C:FD:80:BD:F9:F1:FD:12:9A:D0
Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51
Certificate issuer:       /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
Certificate serial:       01962E996AED14AF2A2E23E8F98A4476A7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: AnFm5AB/GzCFL35kkTDGERrSX1YaX0vFJQcpx/rsfu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6a:ed:14:af:2a:2e:23:e8:f9:8a:44:76:a7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=e6571c088e772bd6f53c9cfd80bdf9f1fd129ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:97:e0:9a:6d:23:a2:89:c3:83:8c:85:9f:
                    f1:e3:4f:4a:f4:db:5f:75:03:e7:33:66:2b:bc:ee:
                    9a:8f:be:cc:48:1f:56:b8:4f:5a:ff:80:a8:b7:f6:
                    31:6b:fc:af:03:39:bd:7e:13:85:cb:79:59:2d:17:
                    ad:08:19:22:e4:45:03:67:77:1d:3e:3d:3a:19:77:
                    e8:99:3c:10:39:26:38:54:e8:79:c3:f6:5b:4c:52:
                    bf:b3:cf:1f:95:8a:01:fe:ff:45:1f:64:f0:be:3a:
                    85:31:28:e4:1f:58:8b:bb:61:78:cf:04:a8:e7:5f:
                    e5:81:ad:f2:01:50:53:26:94:a4:57:3e:1c:7a:a2:
                    96:cb:77:2a:45:03:bd:dd:a4:2b:62:5d:f0:79:06:
                    f4:5e:9b:22:c1:de:1b:b7:bf:0b:4e:9e:da:7f:e9:
                    77:dc:c1:36:68:f1:18:99:7f:72:dc:36:64:4e:f1:
                    96:1a:a4:70:00:2d:33:ff:eb:67:e4:7c:4e:6f:5c:
                    ab:d1:08:61:10:76:c2:cc:b5:d4:e6:81:1b:eb:6a:
                    f6:dd:68:18:36:2d:86:93:7e:0a:0a:8c:e9:5b:54:
                    ba:25:c7:a9:ba:47:c7:d9:df:66:a0:c5:ad:cd:26:
                    97:a7:93:dd:c0:fd:e9:8a:16:c4:77:46:55:c4:20:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:57:1C:08:8E:77:2B:D6:F5:3C:9C:FD:80:BD:F9:F1:FD:12:9A:D0
            X509v3 Authority Key Identifier:
                keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9e:bd:02:08:a9:51:d2:d4:45:03:3a:a5:4c:b7:e5:cb:01:
         70:a3:ab:e3:de:48:15:e6:c2:a8:b5:f9:78:1b:94:24:02:bf:
         f4:43:c1:91:5e:b6:d1:3c:56:4f:e1:ef:81:93:7b:83:1d:ea:
         d5:c3:c5:59:a1:21:1a:10:0b:b6:1c:a8:6c:a5:f5:38:43:7f:
         36:44:d0:f9:fd:11:80:af:b6:53:28:a6:e3:3e:1b:9a:da:b6:
         f5:bb:5e:0d:73:9f:ce:c3:a3:4b:12:ac:18:ff:e2:e1:83:92:
         49:82:a9:34:d3:38:db:fc:3e:b5:53:19:38:1e:04:50:11:76:
         cb:2d:d5:0b:e4:3b:64:0c:f4:71:e9:2e:a2:70:c5:92:82:0a:
         ff:7d:a0:2f:80:b6:d6:61:3f:2e:14:9f:37:b3:18:eb:aa:2c:
         49:06:9f:df:00:a0:23:18:56:29:96:3f:d5:00:13:9e:57:16:
         e3:71:e3:39:2e:f1:3c:b2:2d:e4:b4:61:2b:c8:fa:e8:f2:3a:
         e9:62:e3:0d:94:3d:75:e2:4f:f2:6a:cd:02:51:10:08:54:be:
         66:a7:7f:6b:3b:1c:fd:08:1a:e4:9b:0f:37:ba:e6:9e:ba:61:
         40:08:b1:b6:89:43:bc:91:3a:20:01:4b:20:b9:ef:3e:44:3b:
         77:cc:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----