Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
File:                     CeVm4OteXiEQflX8lg-x7iGHRHQ.mft (raw, json)
Hash identifier:          y7mi24nHDXvx76tAowu6SnrE/defZukr/4lYJzH9PGo=
Subject key identifier:   85:07:68:E0:90:57:64:47:F6:10:96:D3:99:3B:3B:ED:A7:BB:08:C8
Authority key identifier: 09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74
Certificate issuer:       /CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
Certificate serial:       01962E98D02C340D546BD03EC28BD69D49DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
Manifest number:          1331
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: CeVm4OteXiEQflX8lg-x7iGHRHQ.crl (hash: RtexJMIROnIb158i94hnt3w3E1bygkTTV1vPTXMGft4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d0:2c:34:0d:54:6b:d0:3e:c2:8b:d6:9d:49:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=850768e090576447f61096d3993b3beda7bb08c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:68:51:22:c1:c6:af:38:e7:1f:51:6a:98:
                    ad:4c:3b:ca:1e:69:ea:07:ca:c2:75:e7:68:90:a5:
                    cf:0b:e7:32:dd:8b:de:48:3f:26:e9:ee:70:85:f7:
                    0a:fc:44:a7:96:ed:ac:37:00:ee:e7:e7:bc:ed:c0:
                    2a:60:4e:d6:da:f6:3f:07:6f:eb:9b:33:75:07:e0:
                    ba:74:8d:f0:5c:d1:a3:80:5b:9f:fa:de:57:03:d6:
                    51:84:df:97:ee:36:c4:66:25:04:39:d4:b3:94:af:
                    b2:03:72:72:7e:0b:aa:a8:f5:d5:95:07:29:07:a7:
                    7c:b5:44:ef:11:42:d9:79:7d:00:0f:f5:5a:e8:bc:
                    bc:fe:b5:df:90:cb:b6:7f:9e:95:bb:15:98:ef:24:
                    01:20:2e:73:96:ec:ed:26:01:46:95:1b:97:e0:c4:
                    ab:d4:2d:0d:5b:09:fc:14:39:43:37:c5:31:09:eb:
                    8f:22:0b:c0:19:99:fc:04:53:68:be:3c:cb:4d:77:
                    66:2b:a8:82:ba:ed:73:a8:29:26:1d:a5:f8:d3:47:
                    bb:36:c1:7b:31:0a:e1:d3:1a:c3:59:ee:10:16:73:
                    95:cc:09:13:5a:6b:d2:4a:78:ca:d4:53:21:4d:61:
                    97:47:1f:26:dc:b1:bf:ba:c7:d6:12:d6:af:3c:9f:
                    2b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:07:68:E0:90:57:64:47:F6:10:96:D3:99:3B:3B:ED:A7:BB:08:C8
            X509v3 Authority Key Identifier:
                keyid:09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b8:0c:3f:95:a6:80:a5:64:7d:b4:cd:e3:3f:34:58:55:70:
         fa:49:c2:3c:04:60:a1:d0:a3:b7:d1:70:99:87:8c:b7:e2:09:
         ff:47:09:6f:55:0b:bf:3f:02:6c:6f:7c:8d:9c:28:e6:82:c2:
         e2:1e:a0:ec:42:3b:d8:1e:bc:8e:05:40:98:8a:02:c0:12:d0:
         f0:7d:62:27:f1:78:db:eb:15:85:a5:73:35:2c:52:21:d7:5b:
         7b:12:01:d5:86:c0:fc:00:ff:f7:b5:18:17:34:c1:bd:2e:0f:
         5e:fd:39:c1:de:21:e1:e9:e5:c6:ca:dd:7c:7e:d7:cf:98:80:
         14:4d:76:02:af:ef:42:08:1c:2b:63:a4:a8:50:7b:c0:fe:c7:
         12:0a:75:c9:1b:5d:10:48:d8:f5:a8:6a:06:7c:47:0f:2c:bf:
         1a:e7:6a:63:fd:38:5d:60:38:ae:a2:ed:06:70:de:e7:0c:03:
         d6:1e:bb:8d:a5:80:be:e0:2a:a0:16:b0:18:00:15:9d:38:02:
         b0:f4:47:24:5a:ed:ca:75:86:dc:b0:d9:7f:dd:5d:52:75:af:
         d3:85:c8:28:be:40:ff:68:31:10:f7:83:18:0b:b2:58:77:ab:
         c4:c9:a1:f1:0c:cf:69:f1:d0:c2:8c:55:1e:6d:2c:b3:ce:9d:
         cc:c8:2d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----