Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
File:                     e9kR8fTQvD7mLvgzIwehNUVitSU.mft (raw, json)
Hash identifier:          p/tXznX2P73KVXz87+n3I7wqVBEAg1LihdOaas0oH8o=
Subject key identifier:   A3:B5:3C:B3:10:15:A7:6B:44:91:56:3F:2E:D6:43:76:21:EF:20:C2
Authority key identifier: 7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
Certificate issuer:       /CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Certificate serial:       01962E990C4A26E6012704579B0BE92C0722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
Manifest number:          08EC
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: e9kR8fTQvD7mLvgzIwehNUVitSU.crl (hash: 4W2Zz9/7hek9SjjkQt7DPFUmPGNniIRLAkYenrCX2mM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0c:4a:26:e6:01:27:04:57:9b:0b:e9:2c:07:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=a3b53cb31015a76b4491563f2ed6437621ef20c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:25:18:a3:28:09:de:ee:c9:ae:c6:5b:ef:3a:
                    bf:0e:bf:61:f0:1b:ff:38:2f:2a:58:e9:0e:87:cd:
                    69:00:13:9f:22:38:44:b3:dc:ac:25:03:e4:67:b8:
                    1d:12:e9:27:f0:d8:43:36:2c:26:15:b5:24:73:51:
                    5c:0b:e4:83:43:a2:a7:47:59:1a:b7:1c:ee:4b:e2:
                    de:f7:f3:d6:c6:9c:1f:2e:16:be:78:56:eb:5b:3a:
                    4f:38:f6:ef:8f:64:f2:ac:f3:28:44:8d:8c:80:71:
                    ee:72:16:af:ae:5e:34:63:95:bb:15:fb:8b:68:6a:
                    54:48:8e:62:b0:b3:b2:3a:1f:df:6f:86:54:34:16:
                    77:c2:d9:84:f3:fa:a2:22:01:1b:d5:f4:5e:ca:15:
                    41:62:f0:fa:07:1d:d2:5d:fb:45:b5:e7:21:6f:1a:
                    c7:3f:ee:58:3a:ff:67:2d:25:8e:af:55:68:5a:ee:
                    5a:38:3e:64:66:2b:d0:47:6b:96:0e:f0:cc:15:16:
                    84:4e:b3:c9:7e:30:7a:4f:bb:1c:8b:26:4e:9c:54:
                    77:eb:f4:1f:cf:c0:30:b9:5f:06:49:65:75:8b:bc:
                    0a:a2:81:06:76:69:13:39:cf:17:c0:8f:7b:36:c8:
                    3f:17:21:97:c2:61:57:53:91:c7:5d:4b:15:e5:1e:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B5:3C:B3:10:15:A7:6B:44:91:56:3F:2E:D6:43:76:21:EF:20:C2
            X509v3 Authority Key Identifier:
                keyid:7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b3:36:bc:6a:c6:eb:1b:72:89:1b:e9:7f:3d:97:9f:5f:02:
         83:b4:36:85:98:e3:c9:e7:79:5c:dc:63:86:e5:4c:85:2f:10:
         6c:35:2c:1c:62:c4:a2:b9:0a:f9:8f:01:08:a1:d6:54:a3:d6:
         8e:8c:8b:0f:25:6d:49:34:54:05:65:2e:6f:49:7b:08:f5:45:
         b8:b0:6a:6d:90:95:70:d1:e4:59:63:79:e4:5e:8d:3d:60:37:
         5d:38:49:10:08:86:e3:e7:aa:3b:1c:44:98:3d:51:c4:ac:4d:
         6e:9c:22:a6:cd:be:45:22:8a:4f:4a:22:6f:35:eb:68:d5:4d:
         e7:8a:07:4f:f5:31:bd:73:49:31:f8:63:e3:ff:5e:5c:09:93:
         a0:35:bf:07:ac:7f:9d:4b:aa:d7:d5:20:ed:73:c5:0c:dc:37:
         0b:53:23:86:15:66:5e:c9:07:21:77:54:7f:54:35:24:2a:2b:
         d0:7e:83:14:37:a8:a7:76:c1:58:d4:a7:fb:30:ae:d1:e7:01:
         d1:bc:19:cb:b8:f3:17:bc:24:6d:de:0c:9b:0c:e4:2e:d5:51:
         be:b2:3d:60:09:fd:0d:28:17:f6:67:36:e7:bb:e0:36:50:18:
         5d:e3:f8:b4:74:41:65:4c:00:27:0e:01:8e:f3:4b:ae:14:3a:
         83:70:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----