Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
File:                     eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft (raw, json)
Hash identifier:          HZCQZ5dWweXTVXb364CLKvJjFrRzSCJI76dH9LIYcM8=
Subject key identifier:   8A:AC:0D:AB:85:68:3A:8F:DC:00:AC:4F:35:FE:75:EA:75:D6:64:D7
Authority key identifier: 78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
Certificate issuer:       /CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Certificate serial:       01962E9879C0A6D7D61D23B782A45DEECBB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl (hash: yDNDxu9r5M5BSWVZifYzpNOYcLdiFWYGPYveUt6V2cc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:79:c0:a6:d7:d6:1d:23:b7:82:a4:5d:ee:cb:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=8aac0dab85683a8fdc00ac4f35fe75ea75d664d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:6c:0a:2e:bf:56:1b:bf:c1:e1:2c:be:ff:
                    10:3a:81:9d:e5:ba:79:93:c2:4e:f8:b2:27:eb:2b:
                    a4:98:6f:9c:c4:69:3f:55:3c:32:a4:c2:37:e8:f3:
                    e9:bb:5a:d2:25:43:91:c0:f9:a5:3d:f8:06:55:45:
                    22:7e:10:d2:84:96:ec:76:d9:ab:03:91:4d:9d:94:
                    e5:31:b8:34:db:78:29:82:11:40:e9:0d:3a:17:11:
                    96:75:d1:21:27:5b:d7:26:16:fd:e9:4c:de:cd:02:
                    7a:f0:09:b7:08:d5:7f:d0:17:95:cd:f7:e7:af:a9:
                    cc:d3:df:df:67:de:c1:63:ac:73:2c:2c:4f:8b:b8:
                    b7:3b:9e:c1:13:8c:9f:59:b3:cb:da:48:17:fa:56:
                    9f:17:84:d6:91:2f:9e:63:75:9a:1b:29:9f:1f:c6:
                    51:32:cd:ac:f8:3e:3a:1c:b7:50:85:e1:fc:f9:9b:
                    17:9b:57:b2:9a:e1:db:e7:f1:cc:5a:79:b0:f1:25:
                    7c:b8:42:2d:3a:90:60:aa:4b:77:a6:27:e9:6f:45:
                    a5:2e:1f:ee:ae:61:58:00:3c:72:8f:35:bc:90:23:
                    27:98:d5:c5:f1:d0:13:0c:15:18:04:d8:42:a0:51:
                    d5:19:e6:a3:4d:ff:1d:a8:a0:7d:38:91:c4:f4:f9:
                    59:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AC:0D:AB:85:68:3A:8F:DC:00:AC:4F:35:FE:75:EA:75:D6:64:D7
            X509v3 Authority Key Identifier:
                keyid:78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a3:3f:da:e1:09:da:22:a2:e9:c3:bc:6d:36:e3:d0:b9:36:
         5e:78:46:6d:29:ec:db:f2:66:bc:0b:0b:27:a8:23:c0:a4:df:
         e7:5e:8e:d7:81:5f:df:f9:c1:79:53:a7:ed:9e:4b:34:c2:f6:
         85:a1:3e:79:df:0e:5b:cf:06:5d:88:f7:7c:75:17:ae:e4:65:
         c9:f2:7d:65:3b:50:f8:a1:8c:bc:b0:6e:33:aa:74:fc:88:98:
         08:ae:97:6b:87:33:19:42:b9:ca:85:fc:3b:7b:82:4c:f0:85:
         cd:4e:f7:a4:42:72:21:ef:a2:93:00:1f:33:96:5f:32:9b:a5:
         aa:05:da:45:22:e7:ed:1b:22:9e:86:dc:c2:e0:94:a6:95:9c:
         75:0a:2d:b6:e8:2d:12:9a:35:d9:13:0b:26:47:05:06:a9:dd:
         51:ff:a2:a8:8e:90:9b:f2:30:c5:35:db:42:fd:af:a0:59:2e:
         2e:ff:b8:f2:92:a1:85:46:de:43:17:bf:46:ed:99:98:55:6f:
         85:80:3a:57:f1:5f:1c:8e:c6:4d:e5:1c:a6:e6:7b:f4:20:3b:
         6a:95:e2:28:51:05:4e:78:f7:18:a9:c5:bc:2a:0b:ab:e6:b5:
         7f:7d:1b:b3:2c:41:6f:f4:c2:1c:d9:a0:5d:8a:58:9b:58:9d:
         03:37:d7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----