Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File:                     eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier:          FP/NMR9xWqFC84hOgD/7x0deS01ko3SQX2/vAuYxM9c=
Subject key identifier:   49:C9:33:B6:2D:C5:6C:13:FA:EB:81:BF:5E:AB:B5:A0:3E:24:FB:A8
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer:       /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial:       01962E61CF7F9E3EE02B469713E38EB6BF5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number:          0FC2
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: YZzvaiWYTr6hSvbPuniO11qGKM/A4GGeZ6PF5tfXYWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cf:7f:9e:3e:e0:2b:46:97:13:e3:8e:b6:bf:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=49c933b62dc56c13faeb81bf5eabb5a03e24fba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a2:ea:5f:dc:b4:8e:21:10:32:26:e4:db:b1:
                    65:8d:77:17:9b:58:09:dd:e1:91:06:75:7b:c9:0b:
                    2f:4a:a2:d6:ec:5f:ed:e7:5b:68:35:f1:ee:b0:d1:
                    8b:c6:e1:61:7d:04:d0:4f:a7:ee:44:9d:43:d2:fd:
                    e5:54:42:fb:bf:8a:b5:1b:20:bd:a5:91:9a:e5:a6:
                    d3:2a:a3:90:70:04:44:bd:45:08:79:40:c1:41:ec:
                    1b:e5:15:44:6c:b7:12:38:d4:21:84:d3:f2:94:4e:
                    83:8d:2e:18:c8:12:1a:16:ff:7a:43:09:9e:de:4e:
                    f9:74:fa:14:e6:0f:ea:d5:34:ab:5b:a7:ed:0d:15:
                    03:83:58:ef:15:21:8c:1d:c5:5a:9a:60:16:cf:28:
                    87:2d:ff:a8:5b:45:24:22:b4:44:25:97:5f:9d:42:
                    ce:c1:eb:65:d5:74:13:49:89:c3:32:28:f1:4a:3c:
                    24:80:05:3a:f1:5e:6d:be:59:51:11:34:7e:d4:0e:
                    9b:e7:0b:3b:af:db:86:04:81:14:95:d5:b9:9c:73:
                    ed:88:9e:33:f1:37:e2:4b:79:be:ae:f5:7c:61:42:
                    1a:8a:bd:41:b5:64:2a:c8:1d:8d:f1:a2:b8:86:20:
                    cc:b2:74:71:5c:89:df:35:55:c1:66:d3:7c:e6:82:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C9:33:B6:2D:C5:6C:13:FA:EB:81:BF:5E:AB:B5:A0:3E:24:FB:A8
            X509v3 Authority Key Identifier:
                keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:79:6c:48:ae:4c:5a:11:7e:66:5c:d7:12:3d:bc:89:73:25:
         bc:2c:25:70:7b:76:05:50:8c:47:fa:bb:b9:de:ee:09:6e:24:
         05:69:21:af:0f:19:c4:e9:f2:e4:b2:02:26:ef:82:ab:ab:4a:
         d3:17:54:d1:49:56:38:89:29:06:af:39:8b:89:c1:14:cc:4e:
         7b:39:e3:54:d3:92:f5:e0:31:7b:aa:b1:bf:ed:59:a3:83:36:
         fd:15:79:af:18:91:60:ef:17:ca:41:71:09:e5:9f:43:23:66:
         12:08:09:43:ca:3c:c9:14:a9:ee:53:4f:5d:23:59:cf:01:31:
         58:40:59:99:97:9c:44:d8:b3:d0:81:c5:7f:89:be:f3:db:34:
         3e:96:b8:23:88:5f:62:a5:64:7a:da:57:a9:09:52:4c:bf:5c:
         c3:f6:43:07:09:15:13:ca:54:82:78:da:7a:89:b4:e0:23:41:
         a8:bf:66:80:10:a0:95:60:55:63:13:1d:33:b9:8d:a4:45:5c:
         77:d6:53:46:64:f8:a5:2a:2a:cc:fd:fe:3a:d6:44:fc:06:3f:
         97:44:2a:b7:2c:57:d6:77:53:66:cf:90:0b:a4:af:af:0a:49:
         14:c1:6a:08:6f:35:2b:a4:dd:f3:83:60:45:ed:f3:da:2d:74:
         91:6e:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----