Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File:                     7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier:          6/aL7tAW89duT7R/D8bJqrdpINWyoJo+uvPaTYcKizA=
Subject key identifier:   1A:4A:0D:00:29:4A:59:41:DD:BC:3B:2E:70:60:A2:9A:30:83:47:94
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer:       /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial:       01962F0711279AA5979F6089BFAE5B8F11ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number:          096C
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: uaG/0Ela61QSrwJ0VxeKvfHeWuodMTG7gHr1zkTMBPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:11:27:9a:a5:97:9f:60:89:bf:ae:5b:8f:11:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=1a4a0d00294a5941ddbc3b2e7060a29a30834794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:a1:7a:58:28:0b:20:68:56:cb:11:c9:3a:
                    bb:c6:4f:c5:c3:d4:04:37:b0:34:d7:c5:4d:3e:4a:
                    21:ae:96:b9:db:62:33:7f:67:e2:0b:1d:42:dc:54:
                    de:90:84:e9:29:b6:c3:4c:5a:bc:cb:d0:70:e0:4d:
                    2b:0f:20:54:18:77:0c:82:6a:87:60:ea:36:d5:5b:
                    be:67:86:29:fe:bc:c1:87:88:5a:ba:fd:bf:2c:27:
                    14:44:5e:f7:5c:1a:e5:6a:9b:c8:c1:ca:a9:2e:95:
                    06:86:d5:69:c1:13:7d:58:57:71:2b:12:d3:3c:99:
                    01:b9:19:fb:dc:23:66:66:cf:0b:16:f9:dc:75:c1:
                    22:d3:c5:1d:38:e5:8f:f7:72:f1:b8:9f:3c:ac:62:
                    32:7d:fb:1f:72:42:d2:a7:48:5a:72:94:dd:6c:98:
                    8d:ec:96:db:af:5c:90:bc:3a:f6:03:2c:10:56:0e:
                    0c:b6:1c:73:ff:9c:54:3b:21:27:e1:9c:fa:b4:26:
                    5b:06:59:a8:8a:46:5a:c2:5d:ac:4b:5e:3a:80:97:
                    ea:fd:cf:0a:11:6f:75:8a:dc:71:b1:6b:90:40:80:
                    e1:05:ce:c0:6c:1b:6e:c7:f6:e2:43:3b:f2:e0:82:
                    5d:8c:9a:8e:08:3a:59:c0:c5:76:27:e3:cc:03:41:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4A:0D:00:29:4A:59:41:DD:BC:3B:2E:70:60:A2:9A:30:83:47:94
            X509v3 Authority Key Identifier:
                keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:36:bc:f5:c3:a0:26:7b:02:82:1c:d8:42:8f:a7:24:f8:20:
         da:aa:83:09:aa:51:a2:ec:6a:68:6b:43:00:45:b0:fb:59:7e:
         b4:76:7d:53:29:af:2f:b4:17:1f:2d:f6:9f:ce:30:8a:5b:db:
         1d:0c:e2:d8:d8:56:76:91:6f:95:4b:95:62:a0:60:fd:eb:d3:
         c9:72:57:6b:96:00:d7:cd:6c:2e:5d:e6:5b:3f:c3:5f:5c:7a:
         92:9c:72:f4:9b:8a:90:59:5c:b6:50:f4:09:c8:a4:86:31:64:
         b9:f8:49:6f:e2:ef:a7:9a:60:8a:9a:08:92:83:96:47:eb:92:
         ad:4b:2f:e3:1f:e6:84:98:7f:41:e6:fa:e8:ca:e9:db:9c:ab:
         5d:a9:84:40:b9:ab:3e:a3:1b:f8:a1:29:9c:12:2c:22:6e:0b:
         31:2e:f7:0d:66:c0:f5:88:db:68:be:d6:60:6c:85:18:36:79:
         c9:0a:1a:ba:c9:ac:65:33:c2:40:23:01:d8:e2:09:3e:ca:5b:
         64:a8:c9:78:66:d6:ac:fc:d4:c5:32:25:0f:be:6e:9b:9e:7a:
         ba:a2:95:bc:d7:cb:a0:ab:47:a4:c2:70:79:fc:5f:8d:c1:8e:
         7e:6b:0f:4d:ae:d3:54:53:ab:23:10:bb:27:67:a9:f4:f7:c3:
         96:a2:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----