Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File:                     7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier:          nNaBimvW2pGS6bQxYlC9cd0/QpM8ehfrwqxhAQwrNXc=
Subject key identifier:   88:A2:E7:60:66:9F:30:C6:77:83:9B:18:11:27:96:6E:F6:34:A3:E6
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer:       /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial:       01962F0644274D0114CCDE72C4F326CC0D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: CWX2IEx9Yu4GZ0PqImCvi4w0pHcZGbyaUNs27Cfpik8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:44:27:4d:01:14:cc:de:72:c4:f3:26:cc:0d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=88a2e760669f30c677839b181127966ef634a3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:24:bf:43:83:5f:ff:75:5f:37:8f:b7:9c:39:
                    e2:c1:d5:2f:f4:da:0d:b9:4e:87:7d:0e:96:b6:03:
                    d1:f3:27:60:6f:bd:1f:24:3e:b4:03:82:a1:ec:bc:
                    47:55:11:a6:86:41:9b:25:fb:40:b1:4a:8e:ef:a2:
                    29:0c:94:e8:a4:f0:d7:b7:1f:7e:bd:d9:7b:5e:5d:
                    c7:a9:15:86:29:72:09:65:56:62:d1:fd:67:eb:97:
                    6a:11:c3:e4:8a:7e:c3:85:9c:99:91:eb:86:f0:02:
                    bc:6c:65:f7:7d:4e:57:58:1f:b0:43:bd:cc:67:8e:
                    c1:5a:4a:9f:b3:c3:1a:0f:25:a1:bb:a8:1b:f8:8f:
                    fb:20:78:c4:49:c2:03:21:5b:23:7b:7e:49:83:93:
                    a4:89:35:54:e7:b3:36:55:7e:d3:25:50:ea:de:a7:
                    7f:a9:d8:49:0e:28:73:d1:7f:6a:aa:5f:a4:1f:a6:
                    1c:10:7f:d0:07:53:55:88:eb:59:56:0b:f4:47:22:
                    12:a4:de:01:38:66:ac:cf:0b:25:a1:82:5a:47:6b:
                    5a:d9:6f:fa:bf:35:2d:d3:a8:70:ed:ef:97:5b:b6:
                    c1:fb:04:82:2a:83:0f:b8:eb:62:54:ca:cf:50:76:
                    89:13:92:d6:9a:ec:31:91:1a:70:91:78:4c:d7:8d:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A2:E7:60:66:9F:30:C6:77:83:9B:18:11:27:96:6E:F6:34:A3:E6
            X509v3 Authority Key Identifier:
                keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:79:d7:68:75:68:46:dd:82:67:cc:e2:75:4b:2c:3b:8c:e8:
         c5:35:a6:84:82:99:9d:66:bb:7b:d3:fe:8d:63:0b:03:fb:8d:
         5e:c5:95:be:73:cd:5f:ad:f5:f2:65:a4:97:ca:2a:5e:6c:1c:
         e2:ba:67:28:53:5b:d7:7b:8f:c6:33:f3:90:f9:38:b6:8c:98:
         e5:6e:91:04:97:59:b7:43:cf:93:51:63:56:ff:b7:a0:ca:6c:
         b2:c1:f0:a2:2d:7b:cf:6f:ea:51:26:e6:5c:f0:eb:aa:df:4c:
         52:02:a3:65:75:fc:ce:43:00:9d:24:8b:2b:99:4f:ff:b9:0a:
         21:61:62:d5:23:17:89:54:ec:c6:43:d3:48:87:19:6c:b8:3b:
         ea:21:36:66:5e:cf:a7:da:4f:93:65:d2:57:90:c9:6f:5e:e4:
         83:3d:69:2c:c6:dd:37:c7:86:53:74:95:fd:8e:bc:9e:9c:98:
         bb:65:68:84:48:95:27:14:87:ca:5b:48:9e:63:40:3c:b0:78:
         8f:87:82:3c:56:a4:a1:e9:7a:50:66:fd:0d:f1:3f:37:51:76:
         e7:f9:5c:12:98:d2:96:77:f6:69:70:72:37:19:f9:2f:9e:16:
         7b:2a:43:aa:7c:b0:d9:f5:cd:fe:41:2b:ea:b5:f8:19:01:ad:
         ff:e8:ba:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----