Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
File:                     ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json)
Hash identifier:          K5uPttc3d17bc5zEOU1L2eLiPcg4MF9CuqmgrwohC+c=
Subject key identifier:   FF:9F:2E:A7:DE:14:5B:79:AA:25:4E:3F:F6:91:3F:40:16:78:EE:35
Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80
Certificate issuer:       /CN=79c20648798bb6536b23a4ebc588045415f96e80
Certificate serial:       01962F06BAA7792140545C1A2515DDCC3660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft
Manifest number:          04A3
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: 6bmILYrJOkzW+Xgx4HpfnumuYyw6YlUftmpk34crSMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ba:a7:79:21:40:54:5c:1a:25:15:dd:cc:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=ff9f2ea7de145b79aa254e3ff6913f401678ee35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:1e:4f:f9:2f:99:ff:cd:8c:51:c8:21:13:
                    d9:bf:4a:e6:d2:1d:47:60:3d:4f:ec:48:60:8c:12:
                    81:60:bf:c3:49:29:24:ad:39:7d:09:cb:6f:16:84:
                    34:28:f3:84:e6:a4:7f:6e:4f:a6:83:8f:4a:61:24:
                    2b:17:fc:73:9c:b9:25:c6:21:44:6a:5c:4e:bd:c8:
                    c6:62:16:1c:47:8b:6d:a7:2b:6d:0a:50:e7:51:e6:
                    bb:70:14:a8:63:bf:e0:54:63:19:09:51:93:0b:8a:
                    9f:f2:1e:27:66:cd:ed:47:7f:71:2e:03:f6:1f:80:
                    c0:2b:25:64:c1:85:2f:dd:ca:49:5b:68:52:99:20:
                    3e:c6:61:6f:f2:a7:e9:f2:8f:de:f3:ea:b2:ed:1b:
                    31:36:36:39:f5:6c:ec:5f:ef:10:f0:92:42:9a:1b:
                    1b:69:75:7b:e3:1c:f5:c0:51:f6:45:af:a7:19:6b:
                    d5:6c:fb:75:92:3d:4b:7b:9a:5e:8d:b9:1f:38:3b:
                    45:b6:26:94:45:d5:f5:07:41:61:5d:62:f9:ad:73:
                    76:31:c0:0c:44:c5:80:a8:f5:8c:b7:83:d6:34:2f:
                    a1:9c:b4:27:6e:a1:c9:17:40:88:86:d2:1d:df:8c:
                    23:c5:a9:7c:66:9c:8c:5a:28:77:ab:6e:55:54:c2:
                    d8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9F:2E:A7:DE:14:5B:79:AA:25:4E:3F:F6:91:3F:40:16:78:EE:35
            X509v3 Authority Key Identifier:
                keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:63:7e:b9:52:1f:bb:e2:ac:bb:51:c0:b4:1b:af:01:21:66:
         bb:bb:ae:90:df:31:5b:6b:05:45:9b:a7:51:c9:60:19:46:9a:
         8d:9a:67:2d:3d:0f:9a:af:2f:11:03:d1:51:0d:4c:78:24:83:
         a2:3d:ac:3a:00:38:2b:eb:33:20:36:0e:5f:2c:14:53:84:ca:
         bd:be:68:51:0f:03:1f:06:ff:b9:e1:d3:d0:7a:3e:47:2a:8c:
         49:ea:ec:45:ed:04:29:f5:bf:2e:e5:2f:24:16:ec:07:31:19:
         76:97:12:ac:18:8a:45:13:f2:e3:4e:52:87:c4:b5:b6:72:db:
         fb:73:68:85:79:25:b8:71:ed:5f:7a:87:c5:20:e6:b1:ef:c5:
         7d:f2:61:14:9f:78:67:74:81:19:cb:81:46:48:8b:56:68:53:
         ff:e3:2e:3f:18:0f:f4:61:f8:bb:87:38:78:12:c9:df:78:57:
         f8:fb:46:fe:9d:8e:0c:5a:bc:f3:5d:83:07:df:c8:2b:a9:07:
         97:1a:0f:23:aa:b2:0e:a3:b6:d9:5e:7e:09:b0:df:9a:ed:2b:
         23:fa:09:6d:4c:d6:fc:f0:35:e2:2e:86:d4:2e:2e:7a:77:67:
         89:1a:9a:ad:fd:99:8a:1a:8a:21:97:f1:af:0e:89:ae:37:22:
         bc:72:bb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----