Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
File:                     cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json)
Hash identifier:          bu4f78EpviiWhC/5skLrWHIx3JGuS12c4SbK4IYU9KA=
Subject key identifier:   EB:45:5F:07:B0:C9:CD:45:7A:09:BD:74:F4:B4:5E:D7:1A:88:1E:02
Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
Certificate issuer:       /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Certificate serial:       01962F0739C440676A1C368A305A5B3C321B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
Manifest number:          055E
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: SYS9q54CgulRObvGrKyrgsdL98F1JZrRIMwLxuiFaO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:39:c4:40:67:6a:1c:36:8a:30:5a:5b:3c:32:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=eb455f07b0c9cd457a09bd74f4b45ed71a881e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:ac:05:db:30:28:67:74:4d:3e:4e:5d:4e:
                    08:08:89:fc:6a:ca:f2:35:9d:47:b4:9d:02:c5:29:
                    8f:95:6e:d5:4c:a0:08:74:25:9d:8f:ea:ac:89:05:
                    2b:95:8e:3a:fb:16:76:7a:8d:a8:89:41:5d:fa:be:
                    fc:93:f3:82:c3:f9:2e:19:b0:ab:35:c5:67:7c:9c:
                    91:aa:84:5e:03:c7:c0:4a:20:90:36:62:1e:d0:83:
                    d0:69:71:5e:76:14:0b:b8:97:e8:15:ba:48:e1:29:
                    9e:ca:65:61:46:6a:b9:58:a1:23:87:51:0f:00:dc:
                    2f:76:75:cc:54:03:64:c0:97:70:ef:c6:07:37:f8:
                    55:ab:0e:9f:3d:9f:79:f9:00:d1:da:98:42:10:67:
                    2d:c0:34:26:c5:82:b0:63:70:0e:5f:e8:e8:c4:65:
                    02:86:f6:7f:62:2f:d7:29:bc:44:67:4c:20:c8:98:
                    23:6e:eb:c6:56:8f:2c:6d:0f:01:fc:91:44:60:8a:
                    54:78:f4:48:09:2a:16:52:53:5c:a4:da:24:d4:75:
                    fc:f8:f7:00:5e:38:7c:b8:3a:ed:1e:69:b7:7e:c7:
                    ca:5d:9c:78:7e:ee:1c:21:bb:cc:de:ac:b0:ed:1b:
                    03:ee:9a:b9:73:2f:48:84:08:e6:59:65:fb:8d:34:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:5F:07:B0:C9:CD:45:7A:09:BD:74:F4:B4:5E:D7:1A:88:1E:02
            X509v3 Authority Key Identifier:
                keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2c:07:8f:3d:4a:3f:7d:95:47:92:c8:c9:48:c5:72:97:1d:
         a4:80:b0:ee:9a:6e:d0:15:9c:2e:ed:d7:09:c8:3f:3f:00:e3:
         ad:c5:8a:99:52:69:9f:8c:22:53:fa:a0:f3:72:18:ec:cd:b0:
         f2:c0:d8:59:fd:39:4f:14:64:c9:00:1f:c1:a7:0f:27:9a:9c:
         65:c4:e2:68:7f:08:ee:07:3e:40:b3:4e:d1:b9:c2:67:1e:51:
         00:f5:eb:50:69:58:66:11:00:ba:64:b7:60:74:1f:53:d5:e4:
         2b:aa:cd:d2:c6:1d:bd:72:e3:f8:b4:fd:4e:b8:be:1f:1a:fe:
         e4:c8:2c:17:6d:5f:3f:53:b8:db:b1:a1:b9:9f:76:35:e5:1f:
         18:fb:3a:c6:ee:c0:ac:76:10:0c:ee:1c:d1:76:ab:98:6d:dd:
         b5:34:fe:e8:1a:2d:a7:17:e8:58:8d:cc:56:0e:fb:2c:a6:50:
         80:c2:ff:fc:49:cf:64:18:e5:89:a3:9d:25:70:42:c4:fc:27:
         fc:1b:38:1e:b0:c7:b1:7b:1a:d3:59:e8:8b:49:d5:3e:55:9f:
         1c:14:97:b8:ee:84:ea:cc:87:01:40:90:b9:b5:ca:1f:8b:4f:
         b9:62:c9:c3:4e:04:ef:b3:6b:eb:c0:72:25:3d:ce:0c:c4:8e:
         58:fe:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----