Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
File:                     R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json)
Hash identifier:          djuZ4E2iSoCDTf66I2eHtRKtzOhpE6jMYtevUrAMxcU=
Subject key identifier:   D8:29:85:A0:1A:9B:2B:24:A8:21:DD:8F:E2:02:62:96:87:E8:6E:5F
Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
Certificate issuer:       /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Certificate serial:       01962E2AD22B01A7ABF8BE8823BBFEF4B56F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
Manifest number:          018E
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: sIPZKlToe2GM0MGi+qRwrzb8L7O4dcsOYin6P00temY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d2:2b:01:a7:ab:f8:be:88:23:bb:fe:f4:b5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=d82985a01a9b2b24a821dd8fe202629687e86e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:1a:dd:30:3a:40:bf:2c:03:6c:50:01:27:
                    56:cd:ce:5e:0b:89:10:26:6f:ca:f0:bf:c3:80:f3:
                    25:5c:c2:6c:f7:66:34:85:5d:50:1f:c1:f9:d3:0a:
                    c5:02:21:68:48:5f:e3:08:32:b1:f6:89:1c:c6:1c:
                    eb:46:6d:c6:d7:a0:7d:09:4b:79:af:74:60:db:61:
                    62:c7:de:3b:4b:b6:d5:4c:87:23:5d:66:e3:a0:c5:
                    23:2c:f0:96:aa:09:00:c9:94:ce:a3:13:b2:e6:49:
                    d6:80:8d:4d:2f:ed:2a:38:78:c1:a4:52:18:2d:de:
                    6d:f0:a5:aa:7b:79:86:97:8d:ce:08:57:8f:c6:8b:
                    aa:99:6f:d9:ce:b8:28:09:ca:44:73:5e:a7:82:2b:
                    38:33:e1:cc:fd:40:5e:c2:2d:3f:c0:eb:33:49:ae:
                    4a:69:5a:31:bd:50:71:52:58:dc:2b:2a:d8:e2:ce:
                    f0:18:c3:b8:b8:89:d5:39:1b:9d:ed:db:7a:9a:d2:
                    dd:b9:e9:ff:31:a1:03:5e:03:ce:2e:4c:ef:71:f0:
                    91:4f:2b:4f:cc:d4:2e:23:61:29:74:0a:dd:de:4b:
                    a8:e4:dd:b9:05:79:8f:8c:74:5d:82:d6:fc:c7:a3:
                    ac:fa:90:31:f0:b1:3f:83:64:7d:74:fb:8a:b1:4e:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:29:85:A0:1A:9B:2B:24:A8:21:DD:8F:E2:02:62:96:87:E8:6E:5F
            X509v3 Authority Key Identifier:
                keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:88:e4:13:c2:6b:0d:ca:52:37:4c:05:81:35:8c:2f:1f:b2:
         da:8b:6c:d8:17:11:8e:da:b8:da:4e:20:95:fd:c0:17:d0:f5:
         a5:ee:c1:37:07:a1:25:80:70:20:5c:e4:8c:c1:fe:12:fc:36:
         4b:74:9f:97:44:3d:ee:97:6a:31:60:50:45:7f:11:22:b9:2e:
         a9:cb:a1:f6:61:88:1c:4f:2f:73:71:58:8f:51:7d:fb:99:f5:
         b1:ce:ea:b3:cb:b0:f6:0a:3b:ec:df:a6:d2:63:77:ce:80:76:
         6e:92:cb:dd:14:07:dd:6a:3b:b1:c4:22:8f:d6:3a:fd:33:c2:
         6e:cf:63:b9:53:97:a6:e3:2b:2e:ba:d8:b4:da:70:8f:2d:fb:
         d8:be:00:b2:7b:87:4d:8c:4b:bb:3a:1e:fb:3a:e4:21:64:eb:
         32:b1:9f:95:06:5e:2d:61:ce:9f:32:99:12:9a:c6:ef:71:1d:
         ca:6a:87:f1:ae:c5:2f:f8:a6:8d:91:cb:de:9b:2b:18:d7:cb:
         bf:79:0d:78:65:18:42:73:d4:a4:35:73:b9:8d:b9:b1:4e:85:
         5f:ec:de:16:e2:3e:85:fe:d0:22:26:6a:fc:f9:0d:b1:e4:e7:
         49:08:7b:62:89:66:88:ed:d2:ef:05:da:85:20:f5:41:22:bc:
         b0:f8:65:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----