Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File:                     Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier:          9u/ENlFjCx2wNRNLH3llrW84DL/ggruUzLWbhCACq4g=
Subject key identifier:   6A:A7:F5:6D:DF:D1:A5:A8:49:F8:77:3B:64:F9:92:E2:6A:03:A5:1F
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer:       /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial:       01962F3DAC4457639829F9F949C1B3C46C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number:          0EB9
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: Bc+UCA2gLNx86eEVA2U0M9Guvq+FSouLeJB6cyTe4BQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ac:44:57:63:98:29:f9:f9:49:c1:b3:c4:6c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=6aa7f56ddfd1a5a849f8773b64f992e26a03a51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:89:44:23:aa:6b:34:b9:97:e4:74:d7:38:
                    21:c4:af:5d:74:1e:c1:50:3f:32:89:c6:e5:08:39:
                    1d:64:4e:82:a6:dd:73:b7:d4:2a:5c:c9:e5:cc:c8:
                    98:d0:a7:d9:17:c8:64:88:d9:28:7c:83:4a:29:72:
                    e3:9a:7e:a7:0a:06:c6:92:d5:e3:13:b5:5c:04:65:
                    8f:12:76:e3:26:86:ac:19:70:61:fa:77:22:6b:8b:
                    fc:b6:45:84:6e:d2:49:5b:84:43:25:1f:08:d2:4f:
                    d8:04:e2:18:08:45:68:4e:84:7b:6e:18:86:86:67:
                    f6:5d:80:71:0f:c1:15:32:35:88:58:85:fb:04:08:
                    20:f5:40:31:d7:8d:63:07:0d:09:06:9b:d9:67:d0:
                    87:e8:48:b3:a8:51:ea:dc:53:0a:f0:ef:7a:41:7a:
                    6f:1a:92:54:76:4b:8f:b5:21:77:05:ea:06:a1:eb:
                    e6:53:c3:a6:4b:d4:e0:f6:82:88:5c:fc:f1:ab:03:
                    c3:2f:f8:5d:5f:b3:2f:4a:06:67:e5:a7:ee:21:e3:
                    82:00:6c:20:7b:8a:b0:03:67:56:d1:3f:a4:4b:7f:
                    35:40:3f:c7:eb:33:d1:fe:50:ff:c0:b0:df:4f:d1:
                    c7:31:1c:a5:c6:98:58:02:77:4d:28:56:e3:5f:d6:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A7:F5:6D:DF:D1:A5:A8:49:F8:77:3B:64:F9:92:E2:6A:03:A5:1F
            X509v3 Authority Key Identifier:
                keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:1a:9a:42:4e:58:0a:a5:5c:c0:ea:03:66:d2:70:f1:0f:
         f4:72:20:48:cd:03:fd:a4:c5:e4:e7:d3:ed:26:b3:cb:3b:77:
         4c:c3:25:31:9c:2d:96:57:09:45:7a:13:ed:9b:b7:8e:31:73:
         01:3e:08:53:f4:b4:61:4e:68:7b:0f:f8:50:18:03:87:0d:21:
         71:a2:21:37:ec:c8:c5:63:33:89:15:ee:27:34:31:f0:95:3b:
         71:17:91:c1:72:9a:3c:71:9f:6b:9e:41:fe:f1:fb:81:14:66:
         d9:02:d1:46:05:7d:cb:e4:a9:fb:79:f0:96:9f:23:9d:19:8a:
         be:d7:71:ee:6a:bd:a8:18:af:77:82:65:02:3b:79:34:f1:f9:
         c3:0a:25:fe:be:53:e6:61:9d:7d:c0:7c:77:bd:1d:24:5d:e6:
         ce:71:86:dd:f6:bb:e8:63:ea:b7:0d:f5:44:5c:05:c1:fb:39:
         c2:a4:83:ec:31:8f:4b:f6:38:e9:92:8b:d0:d1:75:4b:86:d9:
         6b:8c:65:0a:a8:95:06:c3:0e:cb:96:7e:c3:b6:16:48:d5:34:
         5a:4b:18:54:31:29:b0:1a:6b:e9:b1:f9:fd:47:1d:e2:a8:41:
         dc:c1:05:da:2d:e7:52:42:c8:28:e0:f1:c4:2c:dc:79:ea:8d:
         02:78:63:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----