Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
File:                     eY97H9gCs9xqvXpc2nhqYxHh1j0.mft (raw, json)
Hash identifier:          goadPgSzHSwS3QvoNba1qtizLvDRXANNUtSrrmaeZYk=
Subject key identifier:   72:BD:0D:E2:6D:60:D6:CB:11:2B:ED:2F:ED:BA:56:47:42:36:04:EC
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Certificate issuer:       /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial:       01962F748393CD582ACB8734354288B669A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
Manifest number:          0D30
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: eY97H9gCs9xqvXpc2nhqYxHh1j0.crl (hash: C4qbOCjNw0BgL0bczhu41Q032JviUp7zrvivDMp3RWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:83:93:cd:58:2a:cb:87:34:35:42:88:b6:69:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=72bd0de26d60d6cb112bed2fedba5647423604ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f7:45:fe:86:a4:1a:47:52:f5:59:a8:f9:b6:
                    ab:9d:a6:71:0f:28:2c:71:05:80:3e:e0:24:fd:59:
                    81:54:76:fa:2d:d2:db:0f:91:00:e8:25:4f:ce:14:
                    a2:85:29:e6:83:3d:7d:89:5c:6b:7c:0f:93:5c:24:
                    49:ed:03:81:58:97:d1:02:d7:e7:78:6f:43:8c:70:
                    e1:f2:ef:fd:e2:de:94:8b:1e:ec:54:43:8c:dd:90:
                    9b:f7:f0:2b:b3:c2:54:8d:49:b9:ce:6d:29:35:5d:
                    7b:22:07:ff:a6:bc:e5:af:c7:f0:88:2c:79:28:db:
                    8c:6d:1e:67:57:f2:d8:6e:9d:fb:0a:7b:14:0a:89:
                    40:8e:5d:b9:41:4d:27:c4:eb:fd:da:80:a1:00:b1:
                    95:4d:5f:fe:17:6d:17:56:27:10:7b:96:62:d1:b5:
                    94:2d:72:8b:34:80:40:ff:df:45:9e:12:95:46:09:
                    d9:fb:7d:2d:8b:33:ab:56:2b:98:62:27:c3:76:c9:
                    3d:a1:b4:b7:18:34:6b:b3:1c:97:91:53:01:27:cb:
                    74:4d:82:09:c5:21:a6:06:44:18:fe:c4:9b:30:5e:
                    80:6b:ad:a6:bb:bf:0d:91:b2:e8:82:c1:41:ea:b4:
                    7a:bf:20:5a:81:92:c5:5b:d7:25:78:b5:0e:95:6b:
                    e1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BD:0D:E2:6D:60:D6:CB:11:2B:ED:2F:ED:BA:56:47:42:36:04:EC
            X509v3 Authority Key Identifier:
                keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:02:47:f1:31:7d:4a:7e:60:cb:a8:a3:28:2c:a5:24:75:
         00:be:49:a3:2e:2d:97:a2:0b:d7:25:ef:b2:8d:d6:c6:3a:74:
         df:0d:b8:f6:68:e1:3d:a1:f9:c2:72:3b:53:34:a7:16:07:70:
         57:d0:2a:68:39:2a:a7:4b:88:57:e9:8c:33:2a:ef:9b:9e:3b:
         2f:fc:14:2a:5f:67:4c:94:91:a3:6d:7f:7f:58:6a:0a:78:b6:
         1a:11:3a:80:8d:82:2b:33:c2:54:42:8e:e1:63:e9:a2:e4:cc:
         9b:69:d2:f8:f3:fe:06:88:39:54:b3:12:19:34:59:34:ef:25:
         a2:91:c5:15:28:34:86:fb:e7:51:ee:13:33:c6:ce:6c:b8:d6:
         14:c9:a3:b3:e4:a0:b3:30:f8:7c:95:34:f4:3d:74:9e:2d:17:
         80:85:26:a0:39:96:04:f4:c1:56:70:57:66:70:4e:20:ad:b7:
         ca:71:be:87:2e:1e:c6:d3:b3:9a:76:14:f7:e9:b9:79:69:9c:
         9e:27:22:a5:f0:df:f4:20:9c:25:8c:8c:4a:27:9a:7a:1a:4b:
         9b:14:c2:f5:02:9d:32:4b:55:6b:0e:f8:4d:02:96:e7:bd:ff:
         02:a6:ba:98:ac:50:fe:4a:bc:7f:31:8d:0c:65:14:96:ce:67:
         ba:ce:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----