Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File:                     7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier:          bsKQgvek16QGGfVDmu6ZQsABrMvl4KLXm8WZNPkf5xA=
Subject key identifier:   F6:27:EA:0B:DB:81:B1:37:6D:CF:73:53:AC:D7:FE:15:89:FB:D8:04
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer:       /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial:       01962E98D83BB461BBA2BDB62A263F67864B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: 9CbJ6ybEV4U/okJOAmAVXwob7cQ2Y0U+/XAOP0mgnoY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d8:3b:b4:61:bb:a2:bd:b6:2a:26:3f:67:86:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=f627ea0bdb81b1376dcf7353acd7fe1589fbd804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:57:e5:85:80:00:71:de:5e:91:d8:31:26:
                    f0:1d:ee:52:ce:d2:74:5f:4b:7b:a1:7b:a9:4d:6f:
                    cb:60:10:32:2a:d2:7b:bd:b3:0a:40:83:4f:a0:45:
                    ed:51:47:42:47:0b:13:a7:59:c6:f8:37:6d:26:08:
                    f0:81:ad:22:1b:62:17:06:b9:fb:fe:87:55:a6:aa:
                    64:53:2a:35:ca:9a:ae:95:00:43:bc:49:6a:9f:c5:
                    fd:ea:ae:98:1e:30:61:3c:04:81:64:77:34:35:7d:
                    4c:55:b0:28:f0:f9:33:73:9d:f6:86:18:41:7e:77:
                    48:92:66:09:cc:3f:6e:28:65:03:cd:03:d2:70:4c:
                    f6:9d:4f:6e:4b:96:fc:f8:63:a8:08:fd:16:89:d7:
                    54:eb:b6:47:4d:44:82:15:94:32:c6:e5:7b:45:7a:
                    0a:48:e4:d7:ec:08:63:1a:3a:ca:0a:64:3d:d2:b5:
                    2d:dd:57:5e:96:e7:6e:51:7e:b3:f1:ed:d5:27:19:
                    20:41:54:81:45:fb:7a:af:51:0d:80:49:54:15:60:
                    53:67:26:24:00:52:95:11:a9:70:92:14:c4:88:e0:
                    2f:ea:10:f6:44:05:c0:29:ae:ec:eb:f2:95:1a:37:
                    a4:5e:90:77:dd:33:11:7b:37:5b:0e:c4:a3:30:5f:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:27:EA:0B:DB:81:B1:37:6D:CF:73:53:AC:D7:FE:15:89:FB:D8:04
            X509v3 Authority Key Identifier:
                keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:15:c0:03:05:2a:80:e2:14:6b:25:6a:9d:00:ee:cd:61:
         51:2d:46:08:82:bf:73:eb:82:f5:8f:b5:7e:36:4a:88:fb:10:
         8e:fb:ad:ca:1a:4c:6c:2f:b7:9d:8e:1f:45:f5:de:14:7a:03:
         98:aa:66:b1:00:1e:67:64:39:d6:65:d3:58:43:8c:b8:72:34:
         2a:85:c2:63:40:86:03:61:39:f2:67:da:f3:f5:aa:38:9e:08:
         3b:b7:d3:d6:41:58:e0:e9:ba:60:3a:da:ea:2f:16:f9:b7:3b:
         de:38:ff:7f:ed:eb:96:ce:f0:27:8d:78:e1:28:05:8a:a2:26:
         21:64:70:74:ec:e4:3b:4c:77:e6:69:b6:9d:1c:50:fa:5a:cb:
         9b:6f:ce:37:7d:43:5a:0f:7b:cc:c9:59:20:3d:e5:71:65:38:
         23:bf:11:bf:77:eb:d9:05:77:18:3e:6b:4e:9c:46:43:b9:2d:
         61:78:42:bb:91:aa:29:92:bd:b1:b2:8e:d7:d5:1a:24:cb:8e:
         2a:83:26:89:2a:d7:90:97:1e:f8:6e:79:55:52:85:16:77:f1:
         d2:0a:0e:5a:30:a9:45:58:22:18:a4:ba:eb:d1:31:ff:a4:ea:
         44:e7:9a:75:2b:56:23:e3:54:1c:2c:d6:c1:cc:74:03:e1:8d:
         be:54:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----