Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File:                     7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier:          yE6DXq8l+rPgH7vv4ypqG0c2UlAfVQBqIMgeiouNuts=
Subject key identifier:   96:F5:01:34:91:FF:37:59:45:BE:0F:A7:6E:36:9C:3B:5E:99:1F:7B
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer:       /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial:       01962E987B913CBD9DA77553089457107DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number:          0760
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: 0FcBieUVT/z5ar44pKK+bY5XleFHADMbiMKUDYYgVpE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7b:91:3c:bd:9d:a7:75:53:08:94:57:10:7d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=96f5013491ff375945be0fa76e369c3b5e991f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:f9:92:d7:9b:b4:89:18:49:20:a9:65:32:
                    d9:22:92:1f:d6:41:27:59:bb:44:8f:6c:ce:c4:57:
                    73:69:c1:eb:f5:f0:e2:b9:57:73:3a:29:70:f3:d3:
                    48:92:61:2e:4c:a4:ce:27:93:0b:0d:5e:f7:80:74:
                    ae:21:b8:33:ac:dd:11:b3:e7:fe:e7:00:a1:3d:51:
                    c1:db:91:01:70:33:10:d0:d8:5f:54:62:9b:22:bd:
                    e9:b8:9c:2d:89:50:0a:2c:df:f4:2f:62:67:1b:4a:
                    b6:ac:ed:de:43:d5:64:15:bf:04:b7:f6:f5:b6:04:
                    9c:d3:08:42:5d:96:15:25:2c:3b:7f:33:52:d6:1a:
                    23:04:98:93:ea:6d:09:86:ce:04:b9:99:4c:07:08:
                    18:b4:55:9f:9c:cd:9f:70:da:99:a2:43:ee:db:44:
                    c1:ff:de:00:ec:cc:b1:64:5d:68:85:1e:2a:5b:f7:
                    12:fd:61:c0:c3:ca:78:f9:8b:85:46:09:64:71:5e:
                    82:c4:ba:e5:7e:7f:c6:57:df:56:e0:ce:10:f9:cd:
                    83:57:26:ee:0d:ad:db:3b:a4:f2:32:14:34:60:16:
                    3f:40:d0:51:75:17:a1:45:13:b4:c1:57:99:40:ad:
                    05:4f:78:f2:97:68:9e:c9:f1:e3:66:64:16:20:37:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F5:01:34:91:FF:37:59:45:BE:0F:A7:6E:36:9C:3B:5E:99:1F:7B
            X509v3 Authority Key Identifier:
                keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5d:86:69:41:15:66:37:75:87:c2:0e:44:dd:25:09:b9:a0:
         4e:69:5e:65:0d:b3:07:6f:b0:15:06:eb:58:f4:f7:2c:d1:2d:
         29:79:80:e5:97:9e:a5:15:a3:a1:fa:08:21:d6:9a:5b:b0:e0:
         a5:51:61:df:91:54:8e:62:a7:ca:2b:1b:48:2e:b9:e2:dd:6a:
         95:67:e4:33:71:48:14:fe:09:bf:21:5a:ff:4c:ee:b6:75:66:
         7b:c1:5a:d5:fe:8a:20:d6:93:64:c3:1a:12:43:36:a6:d9:84:
         6f:73:5a:b7:fa:01:71:e8:71:c1:0e:00:0c:b4:05:c1:e0:e6:
         c2:fe:06:82:02:63:a7:43:57:52:71:ec:d7:ba:99:8a:ad:24:
         65:d9:ea:8f:7c:64:0a:28:66:10:32:f1:66:bc:6c:1b:2e:35:
         f0:03:40:1f:5f:b9:81:bf:ca:88:11:13:78:1c:d1:89:3f:8e:
         22:0e:2e:c3:57:de:ad:e5:a1:ed:8a:08:84:c7:23:1c:14:f6:
         c7:f4:d0:fe:d2:fe:10:ab:3e:c4:cf:39:3f:d8:e2:60:1b:44:
         0f:b5:43:de:aa:93:1b:94:b2:5d:e7:05:45:44:c2:9d:2b:9e:
         3b:0e:66:4d:80:48:3d:52:49:41:29:3f:75:1d:29:ab:5d:3a:
         a9:62:25:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----