Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
File:                     j7ev7MJi-jz8WRYejpeLYo4_E2E.mft (raw, json)
Hash identifier:          lTR+nmk9KU7LoSbWrWsrbytKSnAN8nhJH9vDowty1Ws=
Subject key identifier:   13:6B:2D:47:D4:B4:0C:49:11:D2:43:60:79:3E:67:B9:64:66:5F:E5
Authority key identifier: 8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
Certificate issuer:       /CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Certificate serial:       01962E990F7FA6672FDD6023C0243088E355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: j7ev7MJi-jz8WRYejpeLYo4_E2E.crl (hash: SV5v6EY6asQ4eiUTCA32IFNWUSe/kZ1zqlu90qiRYpU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0f:7f:a6:67:2f:dd:60:23:c0:24:30:88:e3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=136b2d47d4b40c4911d24360793e67b964665fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:d9:a7:0f:72:46:85:64:c1:01:77:d0:83:
                    45:16:e9:39:ba:3f:42:d8:35:74:bf:df:06:f4:43:
                    6d:a6:71:6d:66:6e:62:e5:83:4d:64:b3:5e:68:44:
                    44:fd:42:96:93:a5:7a:96:b1:ba:58:88:e7:79:a6:
                    8e:a6:b7:41:2d:f5:4b:c7:83:23:50:1b:39:af:a4:
                    54:2d:a4:5b:56:f4:c2:50:e3:2b:03:61:5f:8d:5e:
                    c1:79:84:74:64:d6:e8:a4:39:24:ba:0f:e6:03:b2:
                    14:cb:17:54:49:f8:dd:f7:3b:f4:8c:1b:da:b1:a9:
                    ce:1d:c6:4e:9f:29:f8:7d:55:fd:06:fa:88:99:aa:
                    d9:11:ae:bd:a8:26:89:80:e1:85:9d:84:8a:cd:35:
                    96:86:42:77:9f:50:08:f1:34:45:ee:f4:81:3c:45:
                    3a:88:2f:d7:7c:24:4b:97:9f:22:77:77:7f:32:52:
                    36:e8:9c:48:62:ea:a1:5c:f3:22:3f:68:ad:54:ed:
                    da:7f:6a:37:4e:06:7a:f6:71:7b:ca:5f:ce:c9:d3:
                    34:1e:fd:cd:14:61:7a:79:8f:e9:e6:52:0e:47:0e:
                    90:b2:0d:97:70:15:c0:1a:77:62:6b:5a:09:83:74:
                    09:f3:f1:b8:74:7d:39:17:39:75:85:93:62:2c:4d:
                    22:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6B:2D:47:D4:B4:0C:49:11:D2:43:60:79:3E:67:B9:64:66:5F:E5
            X509v3 Authority Key Identifier:
                keyid:8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:d4:dd:a2:cf:ac:43:e2:fd:e8:2a:1f:b6:b8:a2:54:b6:a6:
         d5:1b:0c:12:fc:6a:1b:21:fa:fc:03:52:61:55:0d:0b:0a:d3:
         7b:9a:24:8e:92:e0:7e:7d:b9:db:df:2f:f1:3c:0e:6f:d4:24:
         34:c9:85:da:19:b5:77:81:f7:2e:08:e7:4f:29:76:a5:fe:16:
         4a:01:20:7e:6e:51:ad:56:36:d0:5e:48:0c:f1:ac:1e:1f:22:
         c1:13:b7:b8:e1:20:39:57:85:63:de:3d:c4:8a:d1:fb:e5:99:
         81:65:60:29:2b:ff:d7:9d:e1:7b:ec:61:bd:25:42:aa:3a:75:
         fe:16:ba:f3:17:23:8d:6a:de:f2:14:c8:e6:0a:db:7c:59:75:
         52:c6:13:ce:ea:c0:0c:be:41:63:cb:f1:3b:14:29:6f:d5:d9:
         55:50:59:76:63:a5:cb:7d:5a:af:48:65:30:91:21:a5:61:84:
         58:cd:85:dc:fa:b2:10:87:1d:dc:5b:5a:7b:83:66:e0:3e:6f:
         ed:98:c2:2f:f2:a4:6b:f2:de:af:11:22:9f:ed:3a:46:cf:54:
         f5:c9:38:1d:aa:97:58:d0:f3:99:71:42:ef:f3:b3:34:99:0a:
         47:b9:02:aa:77:f7:ea:ba:37:6e:96:e6:37:aa:dd:91:51:1b:
         a8:0a:1b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----