Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
File:                     eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft (raw, json)
Hash identifier:          GkoFg0Jpae1BYDjgwyMi6KTXCbHcUfbvFMX7PPDhpiE=
Subject key identifier:   2B:EC:73:80:B8:F9:F0:A0:3A:35:59:31:73:E1:6A:6C:E3:BD:D7:7B
Authority key identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
Certificate issuer:       /CN=7968c4d3ffca8e737868a45696a198fde09fd457
Certificate serial:       01962E61D3E0AA61C2E6A92BD29205858781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
Manifest number:          FB
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl (hash: Cj59MeuCgjI/o6SbHieq6EScRjBiYilj2ppUC1rhyqY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d3:e0:aa:61:c2:e6:a9:2b:d2:92:05:85:87:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7968c4d3ffca8e737868a45696a198fde09fd457
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=2bec7380b8f9f0a03a35593173e16a6ce3bdd77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:ff:4a:83:d7:c3:43:ba:18:62:e9:aa:2b:
                    c3:5b:2c:e4:cc:d5:09:dd:f4:6f:77:60:6c:14:84:
                    4b:d8:c7:30:2e:04:37:e7:34:bc:4a:51:47:95:e5:
                    36:75:bc:db:22:f5:d7:bc:33:eb:2e:bc:d1:62:24:
                    f7:3e:2d:2e:4f:dc:49:38:2c:f0:b4:31:63:00:70:
                    02:83:68:dc:61:5e:1d:8b:c8:27:cf:58:31:41:f5:
                    cd:94:3b:c6:3b:78:3b:d9:fa:8c:ac:e3:fe:f3:72:
                    e6:57:05:ce:8b:31:21:3b:5d:14:6e:73:ee:f6:f2:
                    56:29:5d:bd:da:53:46:99:a0:0c:2b:e9:91:8f:91:
                    7e:86:45:d9:38:30:a7:09:32:5a:7b:79:8e:0b:67:
                    2b:1c:b9:b5:e3:38:d7:ce:5c:5f:31:93:48:30:ad:
                    dc:4e:43:c2:80:3d:31:37:c1:fc:7e:db:d4:1d:17:
                    9d:a3:4a:e8:6a:a9:42:60:d8:33:d7:32:2b:c2:18:
                    58:6f:af:8f:67:ab:d8:cf:b3:62:d3:dc:bf:da:52:
                    2b:4d:be:c3:7b:9e:6c:d7:87:d6:c5:f9:6c:4f:45:
                    e8:2c:24:6c:23:07:c7:61:04:87:77:fc:e6:04:d8:
                    b0:c4:c1:3b:8f:84:9d:89:ba:26:1e:8c:8a:b1:62:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EC:73:80:B8:F9:F0:A0:3A:35:59:31:73:E1:6A:6C:E3:BD:D7:7B
            X509v3 Authority Key Identifier:
                keyid:79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:19:7c:f3:69:4d:06:03:e6:28:9d:87:83:cf:b5:47:23:
         99:48:e4:04:22:4f:65:3a:7d:4b:17:2f:7b:ad:ff:ab:b0:bf:
         f4:79:8b:2a:fa:f1:c3:79:dc:35:4a:e6:ca:5d:34:de:90:ea:
         f6:a7:60:e8:f4:e4:a1:f3:c4:a0:5e:a5:4b:29:0a:1e:38:05:
         60:59:04:64:1a:c4:c2:c2:d0:ea:35:10:e9:f4:15:d8:fb:e9:
         bb:a3:70:3f:73:6e:ef:15:f7:d3:c5:e9:12:64:92:a8:25:fb:
         4a:f4:ba:bc:ae:ba:43:d4:fd:5e:c5:4c:d6:41:fc:ee:30:45:
         52:49:1c:7f:97:72:94:b4:38:2e:d5:1e:f7:58:b2:e7:33:37:
         82:77:b9:51:95:4b:52:fe:1e:eb:a0:df:d4:80:ce:15:b1:97:
         34:b1:c9:f7:50:28:19:06:a6:37:5c:48:63:d6:d1:54:69:aa:
         53:23:86:f9:c4:23:d1:99:27:6a:83:19:5e:73:a5:7b:a7:31:
         be:3e:fd:f1:82:94:ca:ec:82:02:78:d4:e2:1c:0a:e6:b5:ef:
         52:4d:60:7e:6a:16:52:36:44:0e:43:2d:d6:d5:8a:0d:5d:39:
         a1:8a:3f:fe:c1:ca:d0:d4:34:81:48:72:de:7c:b3:0d:75:82:
         43:cb:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----