Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
File:                     eH0Q8i5f-ksg99W3goxVuVCal1k.mft (raw, json)
Hash identifier:          jP5n0XwR/B4kBsax+2S/ygM+0Yvy6FoULI6EflP0/L8=
Subject key identifier:   5C:62:02:19:53:1A:CF:FB:7A:33:4B:64:3E:76:65:37:1A:F6:ED:A7
Authority key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
Certificate issuer:       /CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Certificate serial:       01962F3DADED4B326FCEB3442D6D3928E6A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: eH0Q8i5f-ksg99W3goxVuVCal1k.crl (hash: gDLl1E1TJkyQoSIi2gbJ9CNS1NIyvGAkLLMqTWl6urI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ad:ed:4b:32:6f:ce:b3:44:2d:6d:39:28:e6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=5c620219531acffb7a334b643e7665371af6eda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:89:6b:85:6b:18:b5:21:77:45:81:6c:ad:
                    11:0c:8e:27:07:53:b1:9d:da:0d:fa:13:5b:1d:cb:
                    84:b9:69:03:e2:f1:7d:ab:3e:c3:6f:f4:78:57:e1:
                    ca:ab:eb:13:aa:a1:f4:96:fd:f8:18:93:06:54:e8:
                    2f:b6:1b:7c:60:2d:9c:74:2d:1a:ac:a3:be:35:53:
                    8e:17:e8:ba:1e:23:36:81:8d:7a:75:a1:60:24:f2:
                    df:66:2e:ac:fd:ca:1d:b0:bc:3b:44:23:9d:19:df:
                    b4:26:0b:8e:61:49:38:1d:f0:7d:73:57:d9:23:9a:
                    f8:be:37:1a:bc:c7:01:85:90:d9:90:0f:9d:d7:3e:
                    e2:95:18:ea:44:cc:cb:74:a0:ba:24:6b:52:20:a3:
                    32:f7:88:60:10:2e:84:58:9c:f8:cb:78:2d:b9:e8:
                    de:3a:a1:dc:cd:a6:45:0d:7f:81:e9:ec:4e:75:de:
                    32:8f:b4:55:63:e0:6d:36:b7:1b:c8:ac:96:a1:8f:
                    da:f5:57:d9:47:79:c2:f6:6c:2d:a2:8f:21:b2:07:
                    77:1a:29:71:3f:c7:01:e1:1f:b0:70:28:f2:96:e1:
                    f1:59:cb:5f:66:37:90:90:c7:4b:b4:a1:4e:1e:5c:
                    2b:9f:61:0d:5c:e6:44:21:d0:47:84:93:80:a4:ea:
                    f7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:62:02:19:53:1A:CF:FB:7A:33:4B:64:3E:76:65:37:1A:F6:ED:A7
            X509v3 Authority Key Identifier:
                keyid:78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6c:a9:8f:c2:d5:1d:73:25:5a:bd:2e:ae:86:5e:df:57:2c:
         16:5b:eb:40:05:35:c4:75:c3:82:ec:49:87:f4:86:02:71:3f:
         04:71:5d:59:86:21:fb:f0:e2:a0:12:f3:8f:38:cb:8c:00:d7:
         2f:1a:17:42:48:86:2c:f4:a2:9e:5d:dc:12:d9:15:5d:4c:92:
         2f:93:2f:36:8d:7f:8a:d5:75:d5:3c:ab:71:53:5f:06:db:15:
         b2:18:65:f8:9e:fe:f1:e4:bc:4a:aa:99:cc:7f:82:fa:b9:af:
         09:41:18:e3:c1:75:79:7b:13:75:24:74:ea:1f:ea:60:eb:46:
         94:9c:c6:18:b1:b7:23:6a:f3:00:4c:42:d1:13:6e:83:32:6a:
         64:53:af:81:a1:94:e6:e2:ec:f5:84:81:81:71:c4:9f:05:28:
         3f:10:c1:ba:91:a8:81:f1:11:fb:be:93:c3:dd:68:b9:5c:3f:
         15:ab:2c:b2:b0:52:84:4a:d8:76:7f:98:23:90:74:44:7a:32:
         ba:08:74:32:8e:53:7b:39:25:e5:1a:66:29:6d:e5:7a:f1:b2:
         58:58:78:16:75:a0:a8:8b:37:51:ae:4c:29:9e:11:1b:5d:57:
         a9:5c:08:53:fa:d8:23:10:42:62:d0:86:ad:e5:fc:a3:80:2f:
         ad:c0:10:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----