Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File:                     EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier:          ZWEGLtIk8lwZDsEU/YAbhHFIDgEufbSsijOC0XKwHh8=
Subject key identifier:   C7:A8:2B:A5:63:B7:DC:6F:2D:3D:1C:E9:E3:61:C9:01:21:57:16:CF
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer:       /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial:       01962E98F617C94E1F313C3083B21D7583D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: Yz5o280k/KdieQNyUErVY0hadPnlE4g0CJDxOhLQA6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f6:17:c9:4e:1f:31:3c:30:83:b2:1d:75:83:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=c7a82ba563b7dc6f2d3d1ce9e361c901215716cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:60:28:92:97:7f:29:96:2d:8e:fe:fb:b4:
                    fc:fd:87:f2:ce:8e:50:41:1c:09:a4:b2:e5:71:bd:
                    1f:b1:15:b7:3f:67:6d:32:8c:d9:cd:34:2c:ae:ab:
                    38:a3:f7:9b:67:4d:1a:42:7d:c0:ce:6d:dc:00:2b:
                    9d:58:fb:42:56:67:83:36:a7:7a:9a:a0:76:a7:9a:
                    41:bf:27:7b:2a:55:56:38:a7:44:f4:01:97:01:e0:
                    55:e2:68:e3:92:d1:bd:a6:f3:58:01:3b:1e:8c:39:
                    fa:ed:04:d4:51:61:af:fc:dc:69:48:8c:c2:54:fc:
                    98:3d:a0:e6:eb:cb:d5:c2:cb:a1:bc:e3:6d:90:14:
                    4e:9c:a4:98:99:92:d2:8f:e4:3a:cb:8b:27:5b:1e:
                    50:12:71:02:a6:4c:56:4c:cc:7f:7b:ef:49:1c:0f:
                    a6:f5:18:5f:4b:15:22:64:8b:5b:36:98:6f:7d:78:
                    d5:07:87:eb:4e:18:b3:84:bb:95:e9:7b:82:77:7c:
                    65:b2:80:99:c6:94:cb:6c:04:1f:cd:04:7b:5f:21:
                    af:1a:5d:53:1c:f5:51:5a:a5:e2:40:45:ac:e6:86:
                    31:97:ed:30:14:e6:5c:a8:0e:49:4c:e9:19:0d:bb:
                    df:9e:0c:16:d3:7f:96:45:90:48:83:d9:99:70:ad:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A8:2B:A5:63:B7:DC:6F:2D:3D:1C:E9:E3:61:C9:01:21:57:16:CF
            X509v3 Authority Key Identifier:
                keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:36:f8:eb:3a:9d:26:1b:0c:65:88:ef:ee:de:52:9e:39:6e:
         e3:fd:98:ac:d7:b1:8f:5d:1d:fb:e5:70:8c:b0:09:62:f3:59:
         26:7e:7d:7b:ec:f7:39:eb:e3:f9:a2:8d:50:6b:68:da:ae:a5:
         50:9c:06:ed:69:56:68:28:71:d5:ac:d1:bd:66:fc:8d:d4:3c:
         66:ee:08:98:61:aa:73:5e:25:17:bb:54:cc:c4:4e:a9:e0:37:
         73:74:2f:49:be:e1:fe:84:13:32:16:69:3c:c5:1b:b6:e8:af:
         5f:22:18:69:e8:90:f7:77:3a:67:f4:45:30:ec:04:1c:a6:90:
         5c:ec:d8:8a:a4:c7:b1:14:6a:88:2c:44:c0:65:b6:75:64:56:
         de:1e:88:45:1d:10:59:62:4e:3a:df:ed:98:45:66:db:09:c5:
         34:1c:18:f6:f3:83:8c:d0:bf:f6:a2:6b:fa:84:15:a0:35:14:
         c8:4d:e0:f8:4d:57:ad:c8:68:e5:f0:85:bf:07:fd:17:d7:0f:
         00:cd:7e:27:ab:31:53:70:a2:a6:9e:67:16:77:d8:f0:e2:4c:
         6d:1f:87:bf:4a:02:df:e4:e0:1d:ea:c8:47:99:20:99:ee:30:
         cb:df:1d:fd:ee:73:0c:e0:6d:35:b5:30:85:86:a4:83:a5:f3:
         2a:76:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----