Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
File:                     e2deJTtiz5WANl7XPaod1lnU1mI.mft (raw, json)
Hash identifier:          Xyl21sRrEPZAc4O0CAgjAonN8KifhSHrYIDS7HiPHbQ=
Subject key identifier:   52:49:DE:F1:99:94:73:08:AF:38:CF:7A:AC:7D:C7:6A:12:E1:CF:62
Authority key identifier: 7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62
Certificate issuer:       /CN=7b675e253b62cf9580365ed73daa1dd659d4d662
Certificate serial:       01962F073CA4D9B5DC9D75725603FFBC74D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: e2deJTtiz5WANl7XPaod1lnU1mI.crl (hash: DoCM8z5nuzyI+WJc7xOL2LvlYcsnLlY4KApPwEBtaqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3c:a4:d9:b5:dc:9d:75:72:56:03:ff:bc:74:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b675e253b62cf9580365ed73daa1dd659d4d662
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=5249def199947308af38cf7aac7dc76a12e1cf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:5e:57:c6:6f:26:50:cb:bc:43:c7:56:30:
                    49:2d:72:87:83:76:95:77:51:e8:c4:0c:4e:4f:68:
                    f4:98:51:c2:18:96:2d:98:b6:40:c6:88:8e:2b:f5:
                    1c:89:91:65:6b:2c:51:3a:3c:4c:c2:4d:0c:ec:85:
                    fd:ea:d0:9e:3e:ed:f3:12:80:80:ae:86:fe:5a:27:
                    33:ed:eb:bb:3e:8c:bf:f3:16:49:ed:ec:4d:54:cd:
                    1e:5a:da:0e:2c:e5:5a:fe:f7:48:75:56:c3:b0:0c:
                    28:5d:62:e2:98:c9:9e:3f:fe:e0:f6:56:2f:c1:7c:
                    e6:02:89:d4:50:d4:d5:e3:bd:5e:a5:ec:a6:af:37:
                    cc:1f:1b:60:5f:94:45:be:76:44:fd:94:c4:14:f9:
                    7c:38:14:1b:63:46:25:2d:c3:1f:43:d1:c0:7e:39:
                    e9:b0:b2:91:b8:7e:14:b5:3d:e7:41:25:7a:2b:9e:
                    19:1b:74:18:9c:c7:68:60:28:9f:ba:e4:71:ca:80:
                    87:e4:27:62:01:50:01:9e:ba:45:9a:eb:7f:35:a4:
                    59:c8:ef:94:be:1c:70:f7:40:ac:aa:a4:34:a8:da:
                    3d:98:4c:99:04:67:d4:e1:e3:a4:a6:8c:dd:54:86:
                    9e:7e:fb:8f:ce:9e:f7:d7:fd:d4:11:cd:5d:c6:ca:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:DE:F1:99:94:73:08:AF:38:CF:7A:AC:7D:C7:6A:12:E1:CF:62
            X509v3 Authority Key Identifier:
                keyid:7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:04:6d:3e:ee:73:47:21:5d:d1:7e:2b:ba:57:51:ff:3f:c9:
         5f:85:2f:23:4e:1b:c3:e4:38:5f:fe:18:25:ee:7a:6a:72:11:
         da:4d:1c:7b:c0:ef:14:25:18:6f:c9:56:e3:3a:59:c8:26:ac:
         bf:7a:9a:d6:c6:d2:dd:7b:45:5b:ba:77:fa:25:4a:62:ed:2a:
         fb:75:0d:13:c6:7f:4e:0c:45:0c:1b:6d:40:ab:3e:86:1c:26:
         6d:6c:3b:76:99:f0:0a:00:27:09:61:ed:0b:dc:09:7d:40:6c:
         48:d8:c2:07:73:bd:a7:b4:c1:b6:62:0a:99:f3:a6:3b:64:fe:
         5a:35:5f:9b:be:d5:f0:a3:a2:86:e6:29:49:66:c1:42:05:06:
         d9:00:f9:89:fe:3c:28:52:07:62:6d:b2:c5:aa:9e:13:14:6d:
         73:ef:92:02:77:78:d1:69:88:d3:fc:17:aa:3f:09:f4:bb:a4:
         ed:7e:29:6e:30:a6:d9:34:2c:c7:bd:23:70:4e:20:c8:da:6e:
         6f:60:2f:23:a2:17:10:67:c4:de:73:b9:ba:84:c2:52:88:d1:
         e0:18:36:25:9c:9e:2d:60:b5:20:7f:46:21:55:54:3c:6b:ac:
         97:57:d9:f2:f1:98:99:9a:6c:db:16:1e:4d:89:0f:82:74:b7:
         55:9a:21:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----