Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
File:                     gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json)
Hash identifier:          ssHmMgDJ0ctkNUEYHXkAWzwqr1KY39l3xeXMbWvbWbY=
Subject key identifier:   1E:F5:0E:59:C1:0E:90:72:36:E9:2A:78:CE:7D:05:84:8C:CA:12:08
Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
Certificate issuer:       /CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Certificate serial:       01962E98C535D1D7B932E3F84003F4B39E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
Manifest number:          0DAF
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: 5gXb5EQrp0xe8UypBJQ3nIHXSrvTd4l6F4znD5u5rGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c5:35:d1:d7:b9:32:e3:f8:40:03:f4:b3:9e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=1ef50e59c10e907236e92a78ce7d05848cca1208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:22:eb:f9:48:ec:24:c5:82:58:13:89:9c:b9:
                    ce:ef:66:a9:09:d4:e4:d6:7c:ed:4c:20:8c:00:32:
                    cb:85:d2:fe:97:d4:41:c0:5b:12:ea:2a:f6:66:b4:
                    45:29:9c:d8:fa:53:cc:e5:d3:a4:24:91:9a:00:8d:
                    21:30:50:bd:0d:20:1f:6c:2e:54:8c:43:4e:1d:a7:
                    27:71:3f:ae:c9:48:de:23:a2:34:f6:fe:da:af:27:
                    80:37:08:33:64:07:3b:f4:27:80:a3:22:8c:27:03:
                    e5:f5:b7:6f:ff:55:37:5e:7d:d6:60:82:f9:19:2e:
                    a9:d8:bc:de:30:82:11:47:b2:23:82:d9:97:76:d0:
                    8f:2b:f0:e3:f8:d1:47:5f:60:3b:89:29:9c:cc:38:
                    ab:19:77:64:91:23:b5:18:62:de:15:a6:47:3e:a6:
                    db:43:e0:ba:c7:38:dc:e0:d8:d7:4a:a4:20:a1:cf:
                    61:2a:b3:48:1c:4a:dc:44:1b:ff:c0:02:1a:75:6a:
                    25:07:7b:7b:0b:86:88:3d:6a:70:1d:a4:00:ae:aa:
                    52:22:9e:10:29:2e:1e:a0:c3:a4:a1:fe:dc:89:37:
                    58:5a:ce:d7:45:62:b4:d7:39:5c:50:a7:3e:fe:e6:
                    92:1d:da:62:cc:b9:68:8c:ec:fa:9e:72:72:22:41:
                    cc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F5:0E:59:C1:0E:90:72:36:E9:2A:78:CE:7D:05:84:8C:CA:12:08
            X509v3 Authority Key Identifier:
                keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:05:92:79:d1:b8:8e:c4:2b:0e:77:c5:2b:18:10:27:3d:0c:
         1e:40:83:1d:ce:03:d6:85:15:e9:7c:24:7a:49:ea:09:c2:c6:
         63:52:a8:10:dc:9a:98:2a:0c:e8:a7:d8:d8:d6:ed:94:c3:ff:
         b2:84:10:00:df:8d:8b:f7:a0:7a:ec:f0:81:71:6d:09:23:13:
         a2:b7:9b:b5:fe:18:dd:27:d4:07:eb:44:61:bb:08:19:d2:10:
         d3:15:e8:dd:0b:53:6c:a8:5d:49:af:2e:37:4d:90:fe:8f:2f:
         b6:7f:b4:07:42:fc:c7:cd:ef:18:03:b5:da:1a:b4:14:f4:cc:
         9d:d7:02:d1:35:55:bd:f8:88:7b:0e:31:e5:28:bb:6b:e0:2a:
         3d:84:2f:6c:7a:33:d5:cc:c6:ef:1b:36:86:1e:7a:59:f3:a9:
         00:41:7e:68:1d:7e:a2:17:ec:a6:f6:02:7d:67:92:b7:22:85:
         c1:39:7c:56:e6:2f:7e:2f:55:a9:c3:7c:91:7e:f7:44:4e:28:
         f6:6a:1a:49:33:fb:a4:91:7a:75:fe:68:76:b8:2b:a9:81:6f:
         65:0e:57:b9:02:93:26:df:28:49:9c:fc:d1:9d:48:99:24:56:
         77:29:89:bc:5c:29:07:05:2e:64:68:1d:5a:5c:24:63:13:c6:
         87:99:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----