Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
File:                     EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft (raw, json)
Hash identifier:          1vehVrsbIuZyxMbgLstc545BDbYrX/L4sEh0rheOIz4=
Subject key identifier:   64:53:C5:DE:73:00:05:C9:7B:AA:4B:B6:FB:98:B6:60:1E:17:A2:06
Authority key identifier: 12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9
Certificate issuer:       /CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
Certificate serial:       01962E99202FB9BDC2E16C7BD27498A17DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl (hash: wv1zV2AosbaXvR7+eytTDAIuDronzkcB0LFMdKj/X1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:20:2f:b9:bd:c2:e1:6c:7b:d2:74:98:a1:7d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=6453c5de730005c97baa4bb6fb98b6601e17a206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f1:f4:c0:8a:dc:dd:b2:08:91:ae:79:4e:bf:
                    55:c5:02:5a:4a:7c:58:e5:62:b4:79:02:79:64:f0:
                    12:48:55:13:d4:88:7f:88:a9:cb:ec:d4:3d:85:ab:
                    1b:20:04:e2:0d:64:0e:68:b5:63:9f:68:54:27:f2:
                    50:d6:98:09:6d:db:92:3b:59:55:6a:6b:e0:36:21:
                    09:5b:75:3c:4f:bf:7f:c8:c2:42:04:dd:b3:10:44:
                    d5:07:fd:d7:13:7d:81:89:c5:90:56:b6:fd:c2:52:
                    88:c1:97:13:67:b6:23:22:d6:a8:03:4c:ab:7f:e2:
                    3c:47:31:33:72:18:8f:56:ee:62:b0:47:2a:f3:a0:
                    a9:72:1f:ed:84:83:c0:c6:90:18:aa:87:66:39:0a:
                    f7:ba:fe:38:75:51:f9:12:65:9e:e5:4b:e7:f2:3e:
                    25:c5:04:c6:f9:09:6c:45:0d:70:50:a1:41:b2:a2:
                    f7:7b:87:1d:ed:d7:e3:e8:51:d9:90:44:57:23:e2:
                    79:f5:3c:c1:c7:f4:b8:4e:da:4d:43:54:0f:4d:60:
                    29:9f:e5:6c:45:ad:b2:c5:25:8a:83:9e:0a:2a:1b:
                    bc:44:59:e2:0b:bc:ac:a5:77:50:f1:f8:2f:71:ab:
                    fc:d8:d0:98:b9:03:d0:3d:b1:8f:8e:22:ed:7d:c0:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:53:C5:DE:73:00:05:C9:7B:AA:4B:B6:FB:98:B6:60:1E:17:A2:06
            X509v3 Authority Key Identifier:
                keyid:12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:37:bc:f2:f0:6f:a8:54:95:30:5c:5a:75:7e:cf:d9:0f:56:
         94:de:74:28:b5:b4:81:a6:60:36:b5:5d:22:d5:c7:ef:44:4e:
         3c:96:9a:68:3e:e6:a0:f5:f4:97:96:46:93:80:ad:37:1d:95:
         b1:60:eb:30:8b:81:3b:18:de:fb:9f:76:96:fa:ab:a7:0d:4e:
         83:ac:07:ad:ea:05:6c:96:ce:21:44:25:b0:88:a0:81:63:5f:
         24:7d:1a:76:c4:a8:ae:a4:ab:60:41:af:b6:2e:7d:eb:86:48:
         6c:ce:e3:07:eb:44:3e:40:b7:9c:c3:d3:9d:99:91:48:b0:ab:
         54:51:85:24:79:3f:42:77:f5:03:96:40:3f:d8:0b:14:89:14:
         58:80:1c:9d:32:b0:cb:cf:12:93:79:d5:97:da:c6:8c:6b:1b:
         68:42:cc:87:18:0f:d1:57:c5:3b:b4:74:8f:03:34:f9:d3:41:
         e6:bf:38:d6:5e:0c:5b:37:f0:6a:f9:e2:27:d8:bc:5d:73:94:
         3a:6c:07:71:05:ce:53:8e:2f:24:4d:31:c8:96:d4:26:4c:de:
         e0:f0:ec:f6:7d:42:ff:b5:59:57:24:56:fb:cd:54:82:6b:1d:
         64:3c:3c:d8:8f:6f:57:92:b6:20:e7:67:65:90:94:b4:79:74:
         8a:12:b5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----