Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
File:                     eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json)
Hash identifier:          pbSV1QJQbPBa073ngnP2r0LSJsTwxyHKFzQNK9VqMDE=
Subject key identifier:   4F:D4:A6:00:1D:15:04:64:70:A1:7E:0B:34:84:E6:B7:B6:6F:60:B7
Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
Certificate issuer:       /CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Certificate serial:       01962ECF934C0780F8C16B326C43350F2B0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
Manifest number:          01B9
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: FVinIL5SIRQeGwxK/K16ClhVZMqlZjeNN7GeJ+XfER8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:93:4c:07:80:f8:c1:6b:32:6c:43:35:0f:2b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=4fd4a6001d15046470a17e0b3484e6b7b66f60b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:5e:a6:62:f6:b0:fb:a5:fc:f1:0c:fc:33:
                    d4:27:52:91:54:a9:d2:16:e4:11:bf:2b:d9:cb:e4:
                    93:ee:dd:cd:c9:a5:a4:a5:51:1a:a0:df:63:51:8c:
                    da:d1:8a:c0:13:d6:e9:f3:45:e5:d9:ca:44:a5:7b:
                    8a:7b:ce:7b:45:35:d7:c0:e3:7e:67:82:95:5a:97:
                    41:40:36:b0:07:6e:49:ac:ee:8d:c6:6f:30:31:3e:
                    bb:97:e4:c7:bc:bb:f2:69:bd:1c:6d:f3:0a:6b:14:
                    99:ac:1f:95:5b:f5:d1:23:d5:57:f5:64:92:55:e7:
                    6c:b3:c4:70:5b:af:60:6b:ec:16:1b:6d:8b:5b:ab:
                    ec:af:ed:bb:88:3e:2e:d9:b9:e6:dc:f4:9f:f6:8f:
                    26:b0:4d:07:fe:a8:35:a5:da:f7:79:1e:df:53:21:
                    a6:f5:52:0f:09:36:29:d5:7b:d3:62:28:a4:34:fe:
                    1c:1b:94:31:a0:ab:1a:4d:3c:87:ca:9b:8a:f5:fc:
                    2f:ac:38:ef:1a:9e:55:f7:5c:20:e1:8b:26:e6:4c:
                    86:eb:d2:20:69:cc:59:a5:bd:bf:50:3f:24:35:ef:
                    87:75:64:e1:c3:aa:ad:c4:71:53:76:07:00:2a:f8:
                    e6:8d:d9:f5:5b:c7:78:e4:10:d4:1c:cf:0a:95:2d:
                    3b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D4:A6:00:1D:15:04:64:70:A1:7E:0B:34:84:E6:B7:B6:6F:60:B7
            X509v3 Authority Key Identifier:
                keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:13:62:af:b5:8c:5c:24:cb:8d:26:63:cc:e2:18:5d:97:c4:
         6c:50:eb:5e:52:67:80:ce:81:6b:88:5a:75:97:7f:47:67:88:
         7d:f6:21:54:62:e2:5a:3c:6e:f2:a0:40:27:7f:73:ef:6f:d9:
         39:02:1f:23:4c:5c:93:10:a8:ef:44:1e:a1:3d:05:e1:e6:36:
         43:d1:a8:bd:82:38:09:d0:c3:01:7c:a0:74:a4:f6:5b:94:03:
         31:7a:f2:12:8d:2a:66:5c:0b:dc:56:cb:e5:d6:ff:6d:84:c2:
         d6:e7:14:dc:c8:78:14:6b:f0:94:a7:ca:4a:7e:27:c6:8e:10:
         b3:49:a6:8f:4c:99:1a:ab:e5:80:48:07:57:d3:c4:2c:50:84:
         17:ae:d4:8a:5a:4d:32:e1:20:15:1b:76:b1:6d:12:68:4a:9b:
         b1:21:61:75:b9:46:bb:b3:db:0e:26:7e:3d:d3:c5:32:b9:4a:
         15:51:74:1b:65:64:89:ee:1d:8a:c9:c6:1f:2f:3f:61:cf:a6:
         7e:c5:8a:0f:fe:96:2e:3b:d5:9f:fb:1c:8e:f8:cb:63:4a:9d:
         c7:50:f5:a4:6f:99:4e:0d:18:f6:db:e5:70:c0:62:79:60:62:
         cb:99:c6:5b:b2:aa:e0:db:ab:64:2a:bb:7a:a8:53:37:26:c2:
         46:ee:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----