Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
File:                     eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft (raw, json)
Hash identifier:          qYT9WD20LWCvLruh/Z7/26X1AEFh3nImC0BChgcge70=
Subject key identifier:   D8:DC:4E:E3:80:3C:6B:EC:C9:63:BB:0C:0B:B1:24:53:41:3B:F7:CE
Authority key identifier: 7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
Certificate issuer:       /CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Certificate serial:       01962DF42F2F03FF463464B1F8230A7DC895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
Manifest number:          051D
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl (hash: lxki78fG8YWlfKL8JCXEyzm40aSLAAtO+KEKtrj98uk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2f:2f:03:ff:46:34:64:b1:f8:23:0a:7d:c8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=d8dc4ee3803c6becc963bb0c0bb12453413bf7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:a9:75:65:9b:3f:6c:be:7f:6e:8b:03:06:
                    52:67:90:71:6a:62:68:4f:59:e5:69:4c:06:8b:91:
                    ae:c3:25:67:84:43:be:a1:3d:cb:0d:36:08:4a:1c:
                    2c:83:d8:fb:33:db:2b:9f:1b:40:03:ea:eb:13:b2:
                    e4:22:67:d9:35:30:1e:d9:80:07:1b:61:14:4d:ee:
                    82:d2:5d:e3:07:d4:0e:f9:bb:ee:4d:bf:5e:e6:3b:
                    ae:cd:8f:46:d5:60:15:dd:aa:68:9c:07:4e:01:4f:
                    f5:c7:97:8c:74:bf:1e:ad:aa:09:54:48:06:fe:6e:
                    eb:9a:4f:b5:02:8d:e4:83:f6:c6:36:74:04:ee:d9:
                    35:5b:52:db:54:53:53:92:6b:34:de:25:2b:d0:61:
                    28:59:4f:3f:ed:ba:fb:66:44:4f:3d:76:04:2e:fd:
                    3a:65:a3:a1:0f:f9:97:2b:a4:0a:fe:c5:20:1a:43:
                    6e:1f:45:d0:cc:cd:e2:e5:3b:26:3d:99:52:1b:2f:
                    ac:f5:4f:af:71:98:02:23:9b:1e:c8:ce:90:17:48:
                    eb:b4:a1:fa:6a:96:99:ce:d5:da:41:58:d4:a5:31:
                    7d:b4:de:01:3f:7b:12:65:4f:44:37:9d:4b:68:a4:
                    d7:5f:91:de:68:71:90:61:10:b1:5e:fb:37:dc:3d:
                    d7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DC:4E:E3:80:3C:6B:EC:C9:63:BB:0C:0B:B1:24:53:41:3B:F7:CE
            X509v3 Authority Key Identifier:
                keyid:7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:88:07:7e:e7:c5:94:ba:41:9c:f0:9a:95:6d:59:40:1f:36:
         6c:e1:c6:e7:0e:f8:95:0d:00:e2:8a:62:b8:d0:d6:c8:88:e2:
         8d:56:22:04:3e:4a:29:86:8a:98:27:ca:3c:14:17:d6:0c:56:
         c4:b9:98:4b:7e:c5:cb:a0:f6:c2:60:1a:43:66:f5:0c:10:89:
         08:ff:f6:62:b9:ac:0d:42:4a:71:f5:b8:3e:e5:bc:df:c2:1f:
         bd:9b:ec:2a:a9:fd:c0:68:e5:64:e3:09:e4:45:77:dc:c6:e5:
         a5:f2:87:42:04:03:1f:2e:b1:8b:74:db:98:01:27:c6:ab:c8:
         54:61:2f:e5:4f:8c:1a:52:aa:ff:8f:ea:91:3e:76:47:33:30:
         75:78:19:52:93:01:f8:98:e6:90:62:9c:cd:55:15:3f:b6:33:
         4b:51:4f:75:ae:96:97:f8:ac:d7:af:a7:74:6f:bd:c6:1d:9e:
         f8:00:6f:44:08:6b:dc:63:db:a4:95:ce:d7:f5:91:f0:9d:f9:
         5f:1a:d2:a4:57:43:ab:3e:21:f1:da:8c:87:4c:7f:90:f6:cd:
         fa:31:f5:e1:68:94:29:17:d3:54:91:2d:0f:90:dd:01:48:18:
         4e:97:00:8b:07:3d:a8:3f:01:3d:44:02:8b:25:89:e5:fc:5d:
         62:c1:18:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----