Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
File:                     7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json)
Hash identifier:          s1IkOcxGD8C6wIIppWbiPlIZfGdfbg7XyHbkfsiEe/E=
Subject key identifier:   DA:C6:FA:40:D0:03:5E:EA:91:BB:D7:E2:B4:B4:2A:A4:69:8B:56:FB
Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
Certificate issuer:       /CN=eee59397f5d6afedbc8d9166affebb2800091f94
Certificate serial:       01962E99302D9D8A653E01F9F614C6E625BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
Manifest number:          0F18
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: fE3wgN/tGvDeRlicJdfunQzUl/PcEPdvVpkzvF6F4jI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:30:2d:9d:8a:65:3e:01:f9:f6:14:c6:e6:25:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=dac6fa40d0035eea91bbd7e2b4b42aa4698b56fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:2b:0f:b3:85:0e:67:86:f5:63:94:f7:7f:
                    43:84:ed:8d:8f:b9:85:4f:2d:b1:e9:81:28:8c:7a:
                    c7:84:6e:50:39:4d:60:c8:85:4a:8f:81:fc:34:44:
                    e9:a8:57:b7:6c:7e:1b:61:9a:57:a7:c2:4f:c7:e8:
                    e6:d2:7d:39:57:48:50:b5:5b:fe:e2:56:2e:9e:2c:
                    b0:f5:b8:6d:9e:5d:a8:82:f4:92:d6:51:5d:a5:aa:
                    04:b9:3d:75:de:84:9f:64:86:1b:c7:42:b4:ef:65:
                    84:fd:35:ae:80:5a:cc:50:19:3b:af:42:04:62:ed:
                    db:34:84:f9:35:cb:44:65:a5:2f:12:8f:c5:34:60:
                    0a:04:20:d6:2a:a7:6b:98:4a:07:fb:07:82:e0:f0:
                    b4:bd:e9:31:ce:b1:f1:06:cf:35:ef:5c:c2:38:a0:
                    ea:26:2f:36:01:0f:39:bf:47:01:a5:6c:5d:8c:dd:
                    af:ac:79:04:36:ae:3d:14:1f:ad:c3:be:bd:ed:4e:
                    0a:d8:3c:16:06:eb:a1:6a:bc:cd:2f:0a:34:30:e4:
                    3a:04:c1:e2:b6:5b:e0:64:ba:24:d9:1c:37:34:16:
                    22:0b:03:3a:ba:a3:7e:44:a0:03:69:6c:0d:97:60:
                    de:c0:1e:7d:7c:df:ab:37:e1:85:4d:a0:3e:f4:8d:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C6:FA:40:D0:03:5E:EA:91:BB:D7:E2:B4:B4:2A:A4:69:8B:56:FB
            X509v3 Authority Key Identifier:
                keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:50:70:a8:1c:be:4e:fc:71:2f:25:46:fc:01:18:f4:57:11:
         08:01:e7:e1:97:05:28:14:49:73:2f:be:3f:bb:3d:6c:2b:2e:
         ec:90:19:88:be:9b:e2:37:3c:6f:78:b5:25:01:4d:07:51:83:
         bd:aa:8f:57:ce:29:33:b5:64:54:22:6f:b3:e5:5e:51:40:9b:
         3c:0e:39:34:69:7d:a6:a0:e0:66:99:a1:8b:a5:08:d7:00:85:
         93:1b:5e:d3:52:31:d8:57:fc:97:04:6d:7e:5f:78:c0:67:93:
         46:98:24:a0:2a:9e:da:5d:15:de:fe:00:bc:84:ec:f2:86:c3:
         40:26:fa:0b:19:f4:ec:0b:a4:4c:e8:fc:b3:c6:3a:3f:2e:97:
         a8:54:21:bb:90:56:fa:f1:37:3a:fa:36:3d:59:a7:25:72:8f:
         88:b3:86:99:4a:14:1d:68:ca:1e:24:b0:c2:61:15:fa:35:95:
         5b:44:66:11:b3:93:ae:8f:0e:f8:5a:e3:4f:3e:5d:3c:40:ec:
         e7:59:5f:8a:f7:60:86:eb:a1:b7:7b:d0:9d:09:9c:d5:54:66:
         aa:c8:7b:ee:4e:a5:9f:a3:db:a4:02:3c:80:21:62:8e:c8:d1:
         2b:c9:84:14:7f:e5:16:b6:b2:60:a5:cb:09:f3:82:d5:70:f9:
         e1:36:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----