Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
File:                     x-0gqk1F1WHiTZJvWbF1J42bAcg.mft (raw, json)
Hash identifier:          anD0jrkok5Em0JJiOuljHQKlvIpgWtAdVE4kiP0dZzs=
Subject key identifier:   EE:60:E4:FA:8A:FB:A0:E1:34:2C:AE:D3:DD:78:F9:33:AE:C5:5F:0B
Authority key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
Certificate issuer:       /CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Certificate serial:       01962DF430225DF319DBD192D943A37A1061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
Manifest number:          1156
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: x-0gqk1F1WHiTZJvWbF1J42bAcg.crl (hash: BJDXxjSJKlcR3rQ6dZKBDZuI6K8W4m9cn0CYU2CuUGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:30:22:5d:f3:19:db:d1:92:d9:43:a3:7a:10:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=ee60e4fa8afba0e1342caed3dd78f933aec55f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:f6:5d:99:ad:d8:cc:6b:48:99:96:96:b2:
                    8a:59:e3:66:0e:e0:43:69:07:73:c9:bb:4a:eb:46:
                    4f:11:18:a7:67:1f:c0:da:85:57:0e:f6:7b:6a:22:
                    56:c4:c0:86:be:c7:af:ab:6c:2b:10:b7:19:f5:33:
                    4f:e0:e2:17:60:69:9c:9d:9d:08:22:9f:c4:30:22:
                    ad:93:76:fa:c3:fe:a2:10:26:06:5c:97:2f:1a:54:
                    d7:42:8b:d9:19:63:3a:c8:39:bd:3e:e2:33:f9:e8:
                    e2:b7:49:48:1a:0f:07:b4:81:64:8a:59:06:1a:86:
                    08:17:2b:62:ed:46:f8:f2:65:65:f4:01:73:23:76:
                    2d:ea:87:c0:60:b7:22:fd:90:ec:49:72:33:5c:4e:
                    2b:ee:ea:f9:42:9a:b9:28:66:ee:d3:6e:2c:bc:31:
                    01:f7:e2:f4:3a:e3:0e:31:72:6d:9a:9a:43:82:16:
                    b7:f9:64:ca:d0:58:ed:7f:95:4e:b9:19:d2:2b:ca:
                    8c:68:e7:8e:9f:0f:76:e9:2e:0a:49:c0:0c:3b:fa:
                    fe:18:f0:e7:4e:1b:c2:d4:1a:4d:a0:44:93:56:9f:
                    44:e9:4b:7a:40:e6:7a:cf:db:6c:ff:54:58:96:31:
                    fe:aa:05:63:1a:c3:32:c6:39:eb:ba:12:5b:f7:44:
                    ee:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:60:E4:FA:8A:FB:A0:E1:34:2C:AE:D3:DD:78:F9:33:AE:C5:5F:0B
            X509v3 Authority Key Identifier:
                keyid:C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e0:58:94:24:63:2c:e7:34:5f:c2:b7:bb:07:23:99:63:3a:
         a3:76:a3:8b:c4:65:a1:16:a9:4a:ba:9f:b2:3f:5a:45:12:62:
         96:3b:22:a4:4f:f8:46:fe:d9:5f:6e:df:63:c5:49:52:dc:96:
         61:61:60:13:4a:fe:cb:09:1c:fa:47:31:a6:13:e2:83:b0:b3:
         03:06:1c:ca:77:b2:4e:3f:63:48:04:97:a7:8d:ee:f0:a2:c5:
         8c:1d:b2:52:c7:6e:31:de:1d:99:79:00:11:da:a0:bf:49:c4:
         8b:3a:0a:78:11:c7:40:e2:ae:a5:1a:4d:a1:22:4f:60:9e:24:
         2b:d0:d4:3d:53:4d:65:15:67:b7:a1:e5:8a:ec:86:c0:77:25:
         fd:4c:87:a5:17:76:8b:bc:4d:57:5f:09:6a:47:fb:df:67:76:
         fd:23:24:74:d7:ef:a6:52:c2:bb:8b:07:de:44:46:ac:f9:41:
         b0:a5:4c:56:d9:e5:44:7c:6d:23:64:78:0d:b0:e6:a6:e4:fc:
         f2:6c:b4:63:dd:c7:fa:2b:05:fb:f8:80:27:07:65:1a:82:84:
         a8:0f:66:ef:7a:ee:1b:d8:67:84:25:41:e6:5f:9c:aa:46:b0:
         d4:dc:1f:88:e0:d4:e1:f1:02:c1:d4:5a:b2:cd:83:c6:f7:b6:
         ef:8a:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----