Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File:                     rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier:          uTjpdfRBNI90YvJ2pkW1HddKbsyOEetH9UXOtTfX0ZI=
Subject key identifier:   50:69:08:59:8A:A9:A0:7E:89:53:2D:DE:D9:F7:88:FC:F3:8E:00:DD
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer:       /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial:       01962F74B0B786351A9BE5B6FE745D63BA11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number:          03E4
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: cVydu6lALj/z4iIjuLRfD9LpUH+GI4JWADq+kNNw/yo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b0:b7:86:35:1a:9b:e5:b6:fe:74:5d:63:ba:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=506908598aa9a07e89532dded9f788fcf38e00dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8f:18:fd:64:e4:fd:6f:58:e9:a9:d8:59:15:
                    cd:2f:36:44:99:b0:3d:7e:88:66:06:fd:17:5f:cb:
                    65:38:95:3f:50:3e:4e:18:39:8a:9f:6f:4a:a5:9d:
                    96:ab:93:68:11:b9:a3:78:33:93:b2:09:42:4a:e4:
                    c3:a4:e1:32:57:d3:ad:05:19:d1:83:28:5b:69:92:
                    b7:12:ff:da:79:ff:93:df:66:75:49:5b:20:28:0b:
                    b8:e8:35:eb:21:49:d3:9d:0d:72:6e:79:82:b5:3b:
                    a0:d4:2a:c6:ec:e0:93:2a:ef:18:b1:3b:8e:21:0d:
                    00:da:63:94:9d:5b:31:af:a3:21:3c:d2:1b:27:ca:
                    fa:7c:1a:33:52:33:05:20:09:05:9e:ba:47:6d:26:
                    71:ee:2b:9e:20:c3:e4:e8:99:44:29:8f:db:47:91:
                    07:9f:7e:0f:01:97:c5:b6:9a:a7:c3:a5:68:b8:64:
                    90:33:cc:50:bd:35:0c:0e:46:f3:aa:11:47:e0:12:
                    dd:4d:d4:29:2a:5e:0f:74:24:10:30:54:d0:e2:82:
                    da:8e:3c:f1:70:c0:b1:25:b1:90:fa:71:22:2a:c2:
                    12:44:3d:8d:85:9d:39:f7:c8:df:9a:e7:28:03:aa:
                    b0:1b:90:79:1d:14:f3:f5:73:7b:91:d8:b4:8e:c9:
                    77:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:69:08:59:8A:A9:A0:7E:89:53:2D:DE:D9:F7:88:FC:F3:8E:00:DD
            X509v3 Authority Key Identifier:
                keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:91:41:df:24:e6:8f:37:aa:99:35:b3:4c:66:43:f3:4b:bc:
         72:cc:81:67:59:77:a1:8d:f2:9a:20:92:66:5f:e8:26:98:b8:
         9e:74:c5:2e:06:da:1d:eb:f3:a9:8b:ae:2a:fe:43:b9:7d:3f:
         3c:34:da:ac:dd:0b:fa:58:80:0d:62:f8:79:90:6c:33:ed:32:
         59:47:97:16:d7:80:8f:48:f3:f3:84:92:c1:a2:8c:6a:85:8c:
         1f:82:08:f7:50:b7:29:2e:37:21:01:10:79:42:a0:26:47:d6:
         7e:af:f3:06:e3:2b:52:e4:3a:dc:4a:57:6a:28:0d:eb:8a:43:
         e6:b3:f0:05:ae:d8:ec:2c:83:b8:23:10:a5:d0:7c:f6:f1:3a:
         94:dc:d8:f1:96:b2:03:c3:46:c0:44:d7:36:bd:f5:07:f8:bf:
         5f:3b:fd:30:27:09:2d:54:c6:ca:60:d5:4c:1a:34:0a:11:2c:
         62:cc:cb:ac:40:f0:88:71:88:92:17:8f:43:24:12:b0:79:6b:
         0b:6f:2f:5c:ab:ac:b2:c4:78:98:0d:15:5b:29:69:67:ce:86:
         23:dc:64:6c:8d:44:7e:2d:60:ab:ea:1d:a8:38:a2:0f:f3:04:
         8a:52:40:f3:f3:2c:09:c5:7d:a7:c6:a4:cb:1f:84:42:18:b2:
         51:b9:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----