Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
File:                     evOlFiiU19GsKvgy16vPHb4RCuE.mft (raw, json)
Hash identifier:          vAdbfr4ZpPZjzFbmwE20Z9AWLTBSDWoddYv32SvYtYU=
Subject key identifier:   98:0D:78:65:74:8A:4C:8F:73:E6:DC:6F:12:62:86:04:34:41:83:D4
Authority key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
Certificate issuer:       /CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Certificate serial:       01962F74C1156FFB22BC802B8A4A2180A8A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
Manifest number:          034E
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: evOlFiiU19GsKvgy16vPHb4RCuE.crl (hash: Uwz35lqXVkF/0ZABB/8uqFVtHrud4Ra6O8fvqKZRZVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c1:15:6f:fb:22:bc:80:2b:8a:4a:21:80:a8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=980d7865748a4c8f73e6dc6f12628604344183d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:db:a2:f4:84:64:75:17:9d:c7:b5:c9:c3:
                    62:66:a7:f3:24:40:60:ba:55:06:21:24:eb:9f:7d:
                    f7:82:79:d5:05:15:5b:b4:fd:aa:8a:ca:69:20:5e:
                    31:a6:0c:a1:d2:11:a6:cd:8f:ed:47:e2:42:a6:b4:
                    87:b7:5a:e3:98:f8:f7:bb:f4:e4:55:be:fa:64:96:
                    a3:fa:f2:e1:00:2c:cc:19:74:7f:65:5b:b8:cf:53:
                    29:0b:b9:45:05:a3:0b:0c:eb:b9:c5:86:36:02:7b:
                    61:4f:cb:b1:13:48:87:1d:7a:34:69:9d:e3:14:bd:
                    fb:08:11:e9:48:b0:ec:18:cd:a8:c1:41:71:64:d2:
                    4a:f0:35:c5:05:04:88:ba:7a:a9:8b:2a:80:24:19:
                    a2:ee:c5:a1:22:f6:f9:bd:e7:9e:93:42:47:c0:f4:
                    be:eb:cd:9f:9d:0b:09:6e:4f:ba:6f:25:ec:1a:de:
                    09:8b:95:05:f3:de:ac:01:5d:55:72:49:c5:a3:95:
                    5f:c4:a0:ef:78:51:ec:9e:90:85:44:aa:c4:d6:1a:
                    15:e8:8b:5e:c7:98:b4:e7:3b:95:e0:50:9a:9a:37:
                    f1:cb:7b:0d:71:bd:cb:83:73:de:b9:74:53:13:6a:
                    18:05:20:eb:fd:63:f1:1c:ef:c0:80:73:75:da:39:
                    ba:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0D:78:65:74:8A:4C:8F:73:E6:DC:6F:12:62:86:04:34:41:83:D4
            X509v3 Authority Key Identifier:
                keyid:7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:75:2f:2e:23:2f:24:59:6e:8b:ee:6f:a4:67:20:51:6f:0e:
         03:e1:1f:b3:59:91:4c:63:62:b8:01:f0:14:e3:a0:f4:ca:34:
         e9:1f:d1:4a:ba:07:91:ef:7a:6d:a6:23:25:e2:5a:24:f6:51:
         bf:4d:23:dd:92:c1:b8:03:2f:77:11:99:b4:17:31:6c:49:4b:
         43:7c:d1:62:86:c4:05:b7:e3:6e:82:92:2a:68:0b:9e:63:c7:
         1c:1e:e3:20:38:63:0a:2f:8b:8c:b4:5d:82:85:fe:24:03:a2:
         d2:46:d5:5f:11:51:4d:c8:85:a8:0c:8a:e7:19:8f:a6:8d:18:
         da:0e:23:4b:5b:f1:cb:65:fe:2b:da:8b:f1:29:df:77:bc:71:
         d0:64:ab:c3:f4:ee:56:fa:15:b1:f5:26:a3:ba:86:0a:1b:87:
         04:2f:be:1a:b6:63:1c:1a:8a:0d:19:49:70:49:9b:9e:e7:d1:
         e6:f9:ab:ad:8a:68:fe:fd:3e:74:7d:60:43:e0:ac:27:41:67:
         fb:e1:ef:a2:cb:44:71:7a:10:d4:cb:33:e0:62:bb:1e:07:40:
         7a:d5:c6:57:d6:1d:c6:fd:fc:91:f8:99:8c:3f:ac:58:f7:21:
         a2:07:e3:f4:97:25:04:79:c3:6e:a4:b1:02:39:df:49:af:f7:
         28:5b:fb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----