Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File:                     eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier:          zhLgoEkjBLVTkCsKHHRQZfpu5tVGOgU0PXtJHpeJLrg=
Subject key identifier:   67:5D:3C:85:96:A4:09:0E:90:1E:12:09:DF:89:32:B7:FE:99:FD:35
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer:       /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial:       01962E99185B2ED6482C4159629995BA81CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: 9tYB2SBOdo+rgUs3uOZGcaKtTcKrUfCvQ7Ihq/9efqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:18:5b:2e:d6:48:2c:41:59:62:99:95:ba:81:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=675d3c8596a4090e901e1209df8932b7fe99fd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d7:49:f4:a2:d2:9d:a2:80:90:3b:50:ba:c4:
                    81:e9:18:b1:3b:9a:e5:bd:d2:49:bd:c1:f7:ee:16:
                    3e:c2:3f:8d:1f:9c:52:0b:d8:5e:45:d4:ae:9c:a5:
                    a3:9c:62:a0:b3:3e:cb:0e:42:27:77:2b:a0:a2:33:
                    eb:8b:f6:a6:48:55:d5:4c:cf:8b:20:5e:c8:d3:ee:
                    4e:d8:e6:90:59:2d:79:34:c8:61:e2:33:88:ce:56:
                    40:7a:cf:67:02:4a:ae:4f:a4:4d:11:59:9a:5b:03:
                    01:34:4d:c2:c4:19:6e:ef:0d:7e:6d:ac:0b:b2:99:
                    ca:4f:4c:13:e8:3f:c8:b1:6b:02:08:b0:de:e5:dd:
                    c7:a5:2c:b0:64:9d:46:55:96:c9:2f:8a:fd:f7:24:
                    ac:5f:d6:29:8f:c8:7a:a7:3b:50:70:67:b4:e9:79:
                    eb:a0:1c:33:64:8f:79:85:34:95:ee:48:5a:de:cb:
                    70:00:c3:c2:51:98:63:19:44:80:51:eb:60:1e:12:
                    b6:7e:b2:a1:64:81:61:00:79:b7:05:c5:04:b3:ff:
                    f9:9d:73:8c:fb:c9:4b:8d:7d:f0:3a:1d:fe:c2:b0:
                    5c:7e:8e:5a:dd:d4:db:84:f3:a2:00:98:21:d0:2b:
                    96:9d:35:77:15:0e:57:cb:d1:d0:f5:c8:fe:93:14:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5D:3C:85:96:A4:09:0E:90:1E:12:09:DF:89:32:B7:FE:99:FD:35
            X509v3 Authority Key Identifier:
                keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:3b:ba:6c:0f:4c:cc:27:57:e1:a1:e2:ae:14:bf:da:b7:fa:
         94:17:d6:8c:53:00:fe:3f:7f:8b:92:c2:ab:a8:21:ab:37:5a:
         93:d9:32:ca:c0:d3:90:24:fa:92:fb:c1:be:25:ab:a2:23:64:
         90:4a:99:79:69:f6:94:76:f1:71:0d:9b:5f:b9:78:ae:fd:9a:
         42:58:08:46:ea:e5:7e:d8:10:04:3c:ca:f9:fa:8f:95:57:58:
         e0:13:2f:af:2c:4c:0d:48:6c:ef:69:ca:e9:26:60:91:9f:e0:
         78:24:63:97:c4:0f:92:c3:03:c9:79:f0:47:38:64:39:78:5e:
         32:e7:0c:13:a7:e3:2e:69:ec:6d:e0:b7:64:bd:74:70:c0:dd:
         6f:a3:34:92:cc:88:c3:12:59:58:e7:58:21:a6:8d:21:f8:84:
         8f:16:b8:5e:58:58:64:26:a9:c1:fc:d7:5f:96:6e:30:14:61:
         90:70:e9:7f:c6:22:ea:67:58:3d:f1:e9:d4:53:b6:2c:f0:60:
         d8:c4:50:b4:8a:57:18:fc:fc:81:10:d2:ef:4b:8b:d5:5f:e5:
         eb:1f:46:be:c7:01:9b:dd:e9:db:da:fe:cf:01:d1:82:f4:20:
         81:28:9a:59:ef:84:10:dd:b0:ad:21:f0:a7:07:34:9d:9a:04:
         a1:a6:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----