Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File:                     5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier:          PgIBlHrOSGff4ptDD+lBnuCLU7svkTsN6SWxq/L9+bw=
Subject key identifier:   D0:7B:60:79:28:AF:D6:99:6C:AA:5D:2D:A2:41:E2:51:3F:CB:58:00
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer:       /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial:       01962DF3B849C380DCE1B34D41CC2ACECC02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number:          0899
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: lmadGLmRmAq/Q2KUdBKYPoStmgZPhHZGSLsugZ0zveU=)
                          2: m4ZSJvHCvVAdAoCa8Dy3Jfpj2Po.roa (hash: aprBkCfkVmxisnK2NR7zrUxKt0p0KhHf/uKOAfeW9gI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b8:49:c3:80:dc:e1:b3:4d:41:cc:2a:ce:cc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=d07b607928afd6996caa5d2da241e2513fcb5800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:37:0f:39:33:10:73:5d:0f:ef:de:f4:54:
                    a3:8f:cc:81:f7:9b:5b:72:20:56:2a:89:af:09:70:
                    ec:f7:ff:12:65:47:6b:73:0b:9b:2b:94:69:d4:dc:
                    0c:9a:5d:14:19:08:e8:50:d9:cc:37:ba:a8:7a:12:
                    3f:7d:56:77:9c:1a:80:a0:7a:54:39:04:47:ad:43:
                    05:58:d9:72:1d:c7:81:36:74:1d:75:75:10:7a:63:
                    f3:01:3b:af:a2:37:20:aa:72:e4:96:02:d5:a1:1e:
                    06:9a:fc:8a:65:1e:f2:41:98:19:a8:e5:a9:17:34:
                    b6:12:4a:3d:c3:e7:48:e2:88:c9:ae:04:d2:1b:fd:
                    a7:31:f9:9b:49:a1:bc:20:b0:2c:b5:60:4c:01:04:
                    2d:b5:5e:0a:65:d9:8c:a3:6d:a7:b6:2b:88:4e:c7:
                    1c:1a:76:c3:08:0c:28:e8:3d:bd:98:34:fe:74:db:
                    6d:0e:b1:11:1c:f9:6f:50:df:33:3b:3c:e0:4a:39:
                    bb:03:53:db:2c:f2:fe:6c:f9:a3:25:0d:fc:62:30:
                    7a:74:35:d1:d2:de:dc:3c:81:5c:99:24:54:04:f5:
                    76:22:fc:4f:68:a2:52:dc:c8:b2:f7:79:b2:fd:39:
                    db:5b:41:7f:ec:2d:fe:87:42:6e:6c:03:74:cf:21:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:60:79:28:AF:D6:99:6C:AA:5D:2D:A2:41:E2:51:3F:CB:58:00
            X509v3 Authority Key Identifier:
                keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2f:3b:e0:44:6d:b6:28:9b:53:82:b6:0c:8f:b9:86:23:7c:
         4a:b9:6e:79:aa:04:01:b9:f1:26:a1:70:d4:40:da:d0:82:95:
         c6:4d:b8:e0:07:73:8d:58:1a:6b:95:c6:c0:04:34:8f:35:9e:
         fc:ba:e9:ff:4d:1f:69:18:e3:32:08:9b:b2:93:4f:b6:b8:23:
         98:cc:39:bf:bb:92:3b:f0:7d:5e:14:ae:fb:5c:73:92:09:57:
         48:80:85:59:98:b2:47:b0:b5:9c:f3:eb:02:94:78:5e:e4:79:
         4a:3a:fa:77:f8:d3:b7:51:45:d7:5a:ff:51:ec:0b:9c:44:b3:
         c2:41:bd:5d:ef:f0:e6:3a:17:f1:dd:b1:5d:32:57:d3:57:6f:
         ef:66:68:53:d3:40:70:7c:87:8b:cc:0c:91:41:ab:c2:09:10:
         7f:5d:c5:ab:f8:95:4e:ff:f5:09:2f:58:7a:0f:26:b9:e9:25:
         48:cf:a0:d6:1d:d6:62:7c:e8:86:34:01:3e:90:c7:19:09:8c:
         d3:ce:83:0d:bc:90:af:90:05:3d:72:b7:d8:15:14:7a:1b:fa:
         f9:2d:0e:15:3d:49:70:e3:9c:55:20:29:26:49:3e:24:50:a6:
         96:94:1a:eb:23:46:fa:c0:95:01:7a:11:2e:ce:1d:34:44:61:
         55:0c:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----