Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
File:                     eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft (raw, json)
Hash identifier:          +fLdBlZXyOTSrbLV8FPyTwqt8JVMNq7Q5ky3f0ZF6BI=
Subject key identifier:   28:65:DC:08:72:37:E6:41:63:70:E3:2E:5F:DC:84:AF:FA:99:40:19
Authority key identifier: 79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
Certificate issuer:       /CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
Certificate serial:       01962F74491FEC450C5BDF374288BAF0BCF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
Manifest number:          136F
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl (hash: 8hpjba1YWdqyylz7Dt6sEooC+70nQg70mUWJvVexfTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:49:1f:ec:45:0c:5b:df:37:42:88:ba:f0:bc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=2865dc087237e6416370e32e5fdc84affa994019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:8a:38:df:4c:e7:60:de:85:3d:91:2a:6d:
                    9a:2c:61:88:5d:42:e4:fd:56:89:8e:e5:06:9d:b8:
                    84:fd:eb:6f:45:7e:f4:23:bb:f8:a3:f8:af:b3:74:
                    2e:1c:38:6b:90:09:21:c9:c7:94:35:e2:56:b5:b3:
                    7a:c5:36:35:dc:62:51:cc:2b:70:d3:e2:0b:29:ab:
                    23:06:87:a5:fd:81:fc:df:7a:26:4d:06:17:4d:8b:
                    9d:9c:fe:e0:1c:ff:b7:1e:62:7d:70:ea:10:a9:7e:
                    35:d8:c3:49:b4:6c:8e:05:b8:df:0f:e9:85:fa:9f:
                    68:0f:af:a5:28:99:ef:21:d5:e1:87:f6:ac:71:7b:
                    4b:bb:fd:3f:a9:ba:84:08:00:c3:21:16:e8:1f:7a:
                    a7:d9:26:2d:bd:10:53:23:d2:57:06:21:16:82:54:
                    9b:28:85:a2:b5:09:b0:30:eb:a3:cd:be:5a:55:5a:
                    df:d3:5d:b5:02:10:45:9b:ee:92:f9:c4:3b:82:6d:
                    cf:34:39:b6:ba:ff:78:4b:03:14:ab:a7:c9:70:ba:
                    2a:60:78:5f:24:c5:e9:f6:6f:79:2a:a3:7e:96:4b:
                    e5:ba:ca:9a:f7:8c:bd:f8:27:e6:22:a6:a8:a3:7a:
                    0e:92:f6:94:77:1c:4b:0e:6f:e0:20:55:8d:36:a3:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:65:DC:08:72:37:E6:41:63:70:E3:2E:5F:DC:84:AF:FA:99:40:19
            X509v3 Authority Key Identifier:
                keyid:79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1a:9c:44:ad:e6:52:13:4a:1a:fc:26:36:61:23:67:56:8c:
         5c:95:e4:d5:85:71:d4:fc:04:48:dd:93:a4:9e:45:9e:73:ff:
         5e:85:5a:db:be:1b:f2:38:67:88:92:d9:82:e6:bd:45:3e:96:
         8a:16:a5:af:57:7f:a9:bc:19:27:a4:a4:d4:06:7c:cd:ad:09:
         70:8a:ea:2d:67:0d:62:5c:ac:62:bf:10:eb:81:ae:ad:af:23:
         ea:d2:6e:5a:11:8c:9e:b4:ac:e7:cb:3b:d5:1b:63:f9:54:91:
         1f:03:b7:53:85:51:b7:8b:3c:9a:93:b3:1d:94:4d:13:65:39:
         fa:a5:d6:eb:b3:3c:7f:f5:d8:2f:6c:2d:73:1d:91:4d:84:59:
         ee:fe:15:d0:42:6d:e1:c4:c3:40:31:31:f1:fa:b7:3d:fa:d7:
         fa:6a:0c:a3:fb:de:61:a8:35:c9:83:bf:db:50:e5:77:de:eb:
         eb:21:13:6f:c1:71:12:6b:48:a6:35:ff:3e:0e:27:22:96:40:
         9d:91:fb:30:ab:b4:f9:fc:bd:4d:5a:dc:64:98:9a:ca:b7:80:
         08:bf:07:10:a2:0d:6c:01:08:5e:00:3c:9d:9e:31:21:e3:43:
         ad:4d:d5:d4:09:42:bb:b5:ad:30:82:7e:b0:52:76:a7:1a:4f:
         04:28:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----