Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
File:                     E2elkhpPFIx4qmwh-E8s_I2I6ck.mft (raw, json)
Hash identifier:          P5mCl0BN7HbWZvjPtUvXrSVRatK4qdqUXoLdYvukHh8=
Subject key identifier:   0A:82:EB:26:2B:4A:81:20:71:E3:C8:BE:C3:F2:38:BF:1D:E4:E6:46
Authority key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Certificate issuer:       /CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Certificate serial:       01962F7483DA1D3BBF6C74307AB4787FE244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: E2elkhpPFIx4qmwh-E8s_I2I6ck.crl (hash: QjVYydYwu3DBmIpYbaM0ZgrkmEkTgWqx7fjX+oaGo8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:83:da:1d:3b:bf:6c:74:30:7a:b4:78:7f:e2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=0a82eb262b4a812071e3c8bec3f238bf1de4e646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b4:c5:09:72:08:b5:8a:ad:41:86:d1:cf:0c:
                    c6:d1:33:0f:7f:7e:3f:86:5d:b1:ae:71:7b:d9:d5:
                    24:16:e3:94:f9:11:51:34:84:8b:a3:ca:fd:75:86:
                    d5:7b:32:f8:05:2d:8e:8c:eb:62:b3:74:60:d6:e1:
                    e6:93:d9:98:ca:b6:33:26:9a:57:20:6e:83:a8:8b:
                    6b:a0:e8:c2:01:b1:c5:ed:2d:9d:6e:91:87:83:44:
                    5c:f0:ea:21:c8:95:e5:21:d1:c3:25:d3:7f:f1:f6:
                    77:47:35:b4:15:f3:25:2a:aa:15:27:e1:e1:07:e2:
                    41:b6:ef:f3:81:6f:7f:12:38:bb:1a:e7:62:55:d6:
                    11:3c:8e:69:ca:f4:df:4d:51:18:c3:70:f0:5d:dc:
                    1e:f3:10:e6:27:5a:a0:c7:58:21:8b:ac:b6:8e:be:
                    a6:21:ea:96:2d:ef:ae:93:1c:2f:6d:da:5f:f1:96:
                    4d:30:0b:36:81:13:5f:6f:72:f6:2a:4a:99:26:0d:
                    1e:70:64:e8:f8:f1:4b:80:d5:b3:5f:74:40:20:0f:
                    be:d2:cd:db:87:26:65:ed:65:89:24:35:48:8f:3a:
                    05:e7:ba:23:16:d5:67:0a:b1:a9:9b:69:de:56:2a:
                    2c:d7:64:90:72:3e:02:b9:25:d2:02:ba:74:be:89:
                    da:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:82:EB:26:2B:4A:81:20:71:E3:C8:BE:C3:F2:38:BF:1D:E4:E6:46
            X509v3 Authority Key Identifier:
                keyid:13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3f:88:85:55:34:0e:47:6c:5b:cb:21:c7:11:58:ce:a4:a0:
         46:39:11:1f:a9:c5:97:a7:29:16:e5:ec:8e:1a:74:4b:53:34:
         84:35:7b:97:19:e6:4d:84:01:51:2f:a4:6b:ac:32:cd:1d:12:
         8a:52:a9:df:f6:68:dd:94:cf:73:13:a1:bd:52:a6:b5:6f:b8:
         f0:2c:86:a4:2e:1d:77:c9:95:47:fc:a7:81:e2:7f:86:6e:f6:
         af:93:06:1b:3f:5a:0a:5b:34:e4:a6:93:1d:0d:09:20:43:74:
         fc:7c:09:41:9b:db:ee:43:f5:b4:90:2b:93:7a:dd:cd:d9:dc:
         62:c6:66:e2:b1:e3:f7:66:08:e8:43:b4:93:24:28:72:91:0e:
         a1:42:12:0b:55:47:27:56:40:60:ee:46:32:19:3d:11:e4:13:
         88:e8:69:8e:f4:dd:a5:fc:0b:85:44:0b:73:d1:5e:b0:0f:cc:
         f7:8b:63:83:89:f2:02:50:16:55:a1:09:87:2f:b1:35:d8:70:
         ad:23:86:35:87:d2:7e:7d:f7:25:52:7a:59:b0:64:ca:29:fd:
         2e:40:b7:72:3e:53:b9:df:b2:12:11:5e:11:ac:e9:3f:87:38:
         f3:bd:d2:65:c6:0a:cf:d4:a5:a2:a2:88:d9:50:f5:56:a6:29:
         d6:dd:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----