Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
File:                     drjsczufmU1ahYxeVVF46K6Kou0.mft (raw, json)
Hash identifier:          OiVIKr/yeOZq2rkCFdhIQUzHGBK8WmSsPrLTDTi+Uok=
Subject key identifier:   BA:E1:D5:63:8E:76:15:56:0C:3C:8D:2D:EB:D2:7D:01:C8:85:57:C3
Authority key identifier: 76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED
Certificate issuer:       /CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
Certificate serial:       01962F06A8DD2DE5C1D87D102F16A742CFC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
Manifest number:          0FB2
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: S4GC9z8T1D4fMhH9pz6xtTzGJy8.roa (hash: oDc/JvXHI28ccd9ZG6/Yr60N+FV54r1lVJyg24riv30=)
                          2: drjsczufmU1ahYxeVVF46K6Kou0.crl (hash: n4AuLvi0t/9DXdJb++jDMIePY0wVLE0hPqKjNR1X61Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a8:dd:2d:e5:c1:d8:7d:10:2f:16:a7:42:cf:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=bae1d5638e7615560c3c8d2debd27d01c88557c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a3:c7:74:b6:29:09:fd:9d:df:00:86:c9:0e:
                    8f:f3:68:4a:5e:6e:14:0d:89:6f:f0:d5:9c:42:7f:
                    c6:ae:f8:b6:b7:09:3b:9c:44:e5:7e:5b:ca:64:60:
                    cc:47:c8:ef:20:d7:c3:c1:9e:f7:b3:5d:aa:4d:65:
                    db:75:95:24:f8:d0:09:1c:3e:03:af:d3:e6:55:92:
                    b3:8e:d4:11:5f:d2:40:46:66:0e:78:33:77:95:81:
                    48:12:e3:b2:ce:e7:eb:b0:63:fc:4b:84:98:5d:84:
                    ca:eb:10:b8:51:b7:a1:60:47:e1:24:2b:95:f2:1b:
                    b2:c2:c8:50:35:78:1d:6e:7c:3f:7e:ff:18:56:d7:
                    20:39:40:73:bf:e5:82:02:89:88:0c:48:0f:5e:3a:
                    99:fb:79:5f:2f:25:06:b6:8c:e7:12:6e:0f:89:58:
                    92:a9:88:a8:43:5d:15:59:f6:5e:52:40:2e:49:c9:
                    d4:37:fd:c6:28:52:73:28:76:d9:0a:11:10:df:02:
                    7b:7a:95:ba:41:5f:9e:4e:46:51:f7:37:f6:2c:2e:
                    7e:87:c8:1c:d0:5a:b9:bc:2a:6d:21:c8:8a:b9:d6:
                    22:8c:be:de:66:17:a6:a6:2b:52:49:fe:5a:21:46:
                    ae:ac:54:83:39:a6:49:49:cb:87:b7:d9:05:90:b5:
                    df:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E1:D5:63:8E:76:15:56:0C:3C:8D:2D:EB:D2:7D:01:C8:85:57:C3
            X509v3 Authority Key Identifier:
                keyid:76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:46:34:c0:ed:07:30:df:4d:55:bc:da:01:87:e0:f7:cf:82:
         09:9c:b4:95:f1:46:ae:eb:93:9a:ca:92:d2:83:6f:6b:fa:23:
         e6:3c:80:ae:f5:3e:ea:91:a5:d6:e2:1c:db:1c:f3:fb:5e:ac:
         ba:8c:cd:97:9e:5f:6f:2a:a8:fe:64:3c:5e:32:70:dd:91:d0:
         82:8b:3c:86:7f:b1:9b:ed:ed:11:a5:25:e5:d4:59:2d:49:23:
         02:1b:53:b2:2d:8e:0c:d9:c1:c6:f7:1f:c6:46:df:b0:8a:20:
         50:d2:ec:ac:8e:ee:f0:6e:ed:b5:be:7d:ab:57:f1:e5:35:e9:
         2b:c1:c3:2b:8c:4f:ee:1c:f0:e4:b5:52:d3:74:14:83:58:86:
         99:3c:f1:3e:8d:b5:1e:a3:8d:05:df:9a:23:e6:07:cd:69:9a:
         80:ec:7f:85:74:64:c0:78:dc:09:c8:18:d1:fb:d1:74:fe:48:
         46:17:db:f7:60:6e:e3:25:8a:f2:4a:fd:ac:fe:e0:70:be:db:
         c5:5c:ac:1b:3a:6c:9f:c6:e0:45:b5:a9:ce:78:b6:e3:bf:3a:
         18:c0:fb:7e:f1:b3:fb:5b:e6:a0:a7:31:09:dc:89:03:2e:ea:
         1f:3c:13:46:42:a9:66:24:ca:c3:0c:6b:c6:7e:2b:e2:8b:54:
         4c:9b:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----