Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File:                     k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier:          fF2Yb/DwUAPWCuq5cnvevZiEu9K52WUgefu5aTE83vU=
Subject key identifier:   85:6F:BE:81:37:13:02:92:86:C0:CB:D3:B2:B2:DB:F9:C7:76:5A:23
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       01962F06D883AF13EF4C9F2FE3B3B6CD3249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: BOwhJflLNAZtgz08J2af2gKOVhPt9f2LTQuLb1wN+cg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d8:83:af:13:ef:4c:9f:2f:e3:b3:b6:cd:32:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=856fbe813713029286c0cbd3b2b2dbf9c7765a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:75:ab:3a:57:eb:2d:80:d4:d3:c4:00:e8:
                    6c:d7:d1:1b:fd:54:9c:40:04:25:fb:8c:e4:7e:ae:
                    28:69:af:7d:5d:3a:ad:56:74:6f:1a:d0:e6:41:52:
                    32:a3:3b:21:13:68:17:4b:65:f4:61:52:70:dc:09:
                    82:db:09:cb:71:04:e3:0b:81:f4:f5:c6:d9:8b:ac:
                    b2:2d:67:f1:a0:73:bd:15:60:52:86:d7:51:af:b0:
                    91:f7:4b:ea:da:68:6e:a8:b5:a8:ed:9e:c7:3b:a1:
                    93:d4:62:0c:de:49:ed:b7:03:07:3c:e2:80:15:78:
                    83:4c:e7:6a:90:45:1c:5f:a5:f9:70:f4:a6:b0:46:
                    5a:39:bd:14:01:6e:a7:07:8a:a1:80:99:1e:2a:2a:
                    72:88:4d:fb:7e:14:68:86:0c:51:a2:07:50:74:be:
                    19:5c:84:01:e5:fd:79:8d:e0:cd:fb:4f:10:ce:ec:
                    51:5f:73:14:a8:30:db:af:7d:66:05:08:a5:10:ce:
                    69:5b:f6:b2:00:7b:94:18:59:3f:e9:b4:c3:28:52:
                    dc:16:23:60:3a:d5:9f:65:82:b8:82:23:d8:72:e4:
                    5b:bb:17:b4:f1:62:46:53:5d:ba:da:00:d3:6a:60:
                    b1:68:74:bc:5d:9c:cd:52:d9:72:8c:db:0a:09:16:
                    1f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6F:BE:81:37:13:02:92:86:C0:CB:D3:B2:B2:DB:F9:C7:76:5A:23
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1d:bc:5e:53:bd:92:45:e2:db:89:78:67:33:61:88:00:bc:
         3f:f1:63:82:e5:da:ab:92:80:53:98:bf:c9:44:a0:89:77:be:
         54:47:25:c9:fc:12:7d:7d:aa:b3:fd:a5:e4:11:c5:66:f4:69:
         15:ae:16:41:d2:09:b4:df:69:b4:ad:73:7a:54:73:c1:9b:ca:
         7f:51:35:5c:a0:d0:08:45:cd:dd:5c:71:7d:08:4a:da:f2:93:
         c0:65:98:88:f1:d0:f0:ad:8f:cd:62:2d:85:78:aa:3b:65:bb:
         17:30:45:30:95:8f:02:02:31:f9:68:d9:c8:24:e4:61:ec:14:
         37:6d:7a:22:82:12:62:32:54:03:40:65:78:55:32:4a:4a:f7:
         97:26:1d:2d:3b:b4:34:54:e1:39:17:c1:b8:aa:fe:b5:cb:6d:
         56:e5:b4:c8:81:d2:b7:9c:70:63:d8:8f:01:2e:02:e4:ab:5d:
         75:f0:39:3d:50:2c:52:de:2f:f8:95:8f:12:bc:75:60:b2:9b:
         a3:c9:47:1a:dd:b3:c7:65:94:a5:e3:03:d1:0b:af:48:de:55:
         99:3a:38:db:ef:03:a5:ce:76:c4:9d:db:64:a4:bc:43:8c:3c:
         6c:4a:ee:ea:a7:68:5f:75:e0:56:d0:ab:50:2a:97:4d:9c:08:
         3f:4f:71:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----