Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
File:                     eINdJYNK4Na8nZKPZGEn-8VL0z0.mft (raw, json)
Hash identifier:          5CCTXHu1PUvV/XDZfBv7Zs0aSljShbG+Qe0pYbhrO/w=
Subject key identifier:   B8:73:3C:FF:14:2F:7A:4B:8E:D6:81:E6:F0:D6:2C:28:F9:1A:1B:FE
Authority key identifier: 78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D
Certificate issuer:       /CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
Certificate serial:       01962E99342800DDAA77788D3BF46E7F85B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: eINdJYNK4Na8nZKPZGEn-8VL0z0.crl (hash: 3zKSPDfLD4Ll9CRt5eyNmq8IIystudPPdqXDh248izo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:34:28:00:dd:aa:77:78:8d:3b:f4:6e:7f:85:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=b8733cff142f7a4b8ed681e6f0d62c28f91a1bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:97:7a:5f:70:8f:cc:cc:87:14:d9:8a:c4:6a:
                    e2:f2:9d:57:91:b7:60:72:63:f5:c2:d7:10:d3:90:
                    f5:78:55:80:7e:43:8b:08:b3:e4:ce:36:c2:a0:e8:
                    60:0d:97:e4:67:55:86:f1:7b:36:e7:3c:ea:3a:66:
                    71:68:0d:e9:d6:1a:74:79:2f:83:75:33:d4:3d:24:
                    1f:19:5c:3c:0d:83:63:60:2d:44:6a:fa:2e:d9:f8:
                    b4:a8:e6:c7:66:49:93:69:b8:9b:43:ed:ea:9a:0f:
                    90:07:b7:2f:96:09:a3:38:94:91:82:33:60:bf:f0:
                    17:f1:9e:1b:81:d8:a5:6b:39:8e:fe:47:3a:67:df:
                    6b:1f:4b:d0:ae:6e:c5:21:8f:a4:de:b0:63:ff:6f:
                    bd:af:9b:a6:91:14:91:cf:92:f2:98:78:13:d5:75:
                    2f:40:ad:51:53:6a:c8:44:7e:6d:45:1f:57:a7:d3:
                    09:53:ae:f3:c2:f7:84:68:3a:92:aa:3c:c2:56:ca:
                    70:1d:0e:f8:d0:7d:49:b3:12:58:0d:2b:89:39:6f:
                    fb:58:38:45:6c:d9:a2:65:bf:25:01:56:45:9d:23:
                    19:c4:a8:a2:c8:b6:c9:c4:aa:e2:92:25:19:f4:b1:
                    8e:ae:de:b7:05:5d:8f:2d:a4:8c:87:12:4a:50:2c:
                    8f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:73:3C:FF:14:2F:7A:4B:8E:D6:81:E6:F0:D6:2C:28:F9:1A:1B:FE
            X509v3 Authority Key Identifier:
                keyid:78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:f0:23:3a:9c:f7:84:a9:43:01:32:56:30:f5:ec:da:e5:
         ce:d0:81:91:5c:03:de:42:ea:20:55:14:70:23:a7:bb:9f:97:
         26:ea:88:f2:b9:3d:a0:9b:b7:3f:33:b9:3b:75:82:57:8c:47:
         1f:7b:97:54:4c:8e:fc:c9:b6:fe:3f:f6:a1:2b:0e:d0:ca:98:
         a3:4e:42:31:bc:23:57:f3:10:2d:53:7b:25:2c:ad:df:45:b5:
         a0:8e:d4:bc:2a:b0:dc:2a:30:a9:22:72:77:1b:d2:8e:09:99:
         2f:5b:2b:47:9c:80:b4:ea:ed:7e:2f:11:02:ae:22:19:01:64:
         fd:8d:f9:cf:91:17:aa:f7:e6:3f:d5:be:77:56:10:85:25:f8:
         42:ba:51:0b:5a:07:58:7e:76:4b:d6:ed:20:bf:94:9f:bb:96:
         fb:c3:7e:46:d5:cc:ef:c9:84:37:4c:14:e2:4c:63:29:8c:a0:
         f7:4a:c0:7f:5f:b5:22:82:79:52:c9:d1:d6:3b:43:82:19:51:
         c4:51:6c:04:be:c8:80:e6:b2:74:a3:63:e6:79:06:af:a0:02:
         c1:e8:97:2e:25:7f:b0:ca:33:13:17:b1:04:8b:7a:09:9b:9a:
         39:e2:60:8f:ad:cd:c7:bf:8a:aa:3e:a0:8b:57:5a:bb:2f:39:
         9e:73:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----