Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
File:                     g76BmaF8rKps1S15QSNtpuVuG-o.mft (raw, json)
Hash identifier:          q6yEJPm/l6ZyjkDfVmnHYseIwp7AYJbXUqzVHuhhrR0=
Subject key identifier:   92:81:87:E1:04:E6:63:B6:93:22:95:48:DC:8B:D0:E8:1E:61:43:E5
Authority key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
Certificate issuer:       /CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Certificate serial:       01962E9882A73D5831D1E3C94395BD5E6CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
Manifest number:          086E
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: g76BmaF8rKps1S15QSNtpuVuG-o.crl (hash: P+BU650JhQpm+QjRD8j3xCxiz/6qW53rjm8OZcEYJyw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:82:a7:3d:58:31:d1:e3:c9:43:95:bd:5e:6c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=928187e104e663b693229548dc8bd0e81e6143e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:3d:3e:df:41:26:ce:0f:ef:c7:31:57:9f:
                    a1:e6:91:ff:45:f8:82:cc:88:5f:8a:d8:d5:61:8c:
                    c7:98:7e:03:fb:32:b2:69:27:d0:f2:38:e6:a1:87:
                    fc:83:f1:90:2d:28:80:9a:e6:fd:90:eb:34:c4:14:
                    d5:47:70:b2:fc:5a:e9:75:96:d8:8d:aa:42:97:01:
                    f3:dd:94:f5:fc:8f:3d:af:0e:2d:1d:0a:d3:ad:63:
                    84:34:fe:51:07:27:6e:24:c1:f5:4c:cc:64:3d:db:
                    51:de:10:2d:c9:94:88:da:7e:6f:96:3b:3f:5e:2f:
                    e8:9a:01:33:24:b2:84:ff:e4:32:c6:04:fd:c0:48:
                    6c:a4:35:b5:66:2a:95:10:e7:50:2e:70:72:95:94:
                    32:21:66:11:f4:12:bd:e7:3e:35:6f:ac:40:65:54:
                    9c:e5:96:09:41:1c:1b:a6:94:5b:1a:6b:ca:8a:cc:
                    f9:ec:67:0f:5f:e1:f7:a1:29:96:6c:73:5a:fc:4b:
                    46:e9:61:0a:22:46:7c:56:30:5b:a3:12:f8:fb:f3:
                    d6:35:62:9a:d0:12:fa:d1:3e:d9:6f:2d:72:86:48:
                    37:c5:c5:b8:7d:8c:69:ca:7c:b8:53:3b:cd:5e:43:
                    fc:99:ae:08:bb:96:76:55:60:2d:ae:37:13:74:97:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:81:87:E1:04:E6:63:B6:93:22:95:48:DC:8B:D0:E8:1E:61:43:E5
            X509v3 Authority Key Identifier:
                keyid:83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:7b:31:fd:81:28:b6:0b:e7:99:c7:1b:0b:82:3a:4d:51:
         7c:dd:65:18:0b:0c:b4:2d:f6:a9:c6:e0:6c:28:60:d4:b8:b8:
         ce:1e:da:54:2d:a6:90:43:f6:5f:c6:fb:b7:23:6a:73:39:33:
         6a:88:8a:17:eb:97:dc:39:96:79:db:a1:58:68:52:ad:74:fb:
         58:8c:23:6e:1c:db:9c:f9:85:80:c3:c2:5b:8b:54:26:c3:b4:
         51:4c:8d:b5:fa:93:8e:b8:d3:2a:4c:a4:55:e1:d1:b5:fa:e1:
         3d:4c:38:13:db:57:4c:5d:da:98:0a:b8:da:2f:9c:e1:7f:95:
         5c:53:17:c6:11:ae:93:3e:b4:30:ab:4d:84:9a:f4:d1:30:32:
         12:39:ec:5d:17:c4:3e:10:4c:ba:e1:2b:45:95:df:45:38:83:
         76:03:64:23:69:04:64:66:e4:b3:a1:a8:d8:ab:9d:ff:bf:1c:
         ab:a8:bb:02:9e:ae:c4:14:e1:b4:29:a9:60:3b:1c:43:22:87:
         9a:10:5d:c3:73:b3:c6:db:70:4c:41:04:26:8b:99:3b:4c:e7:
         c0:3c:67:b7:3b:6a:b4:c0:16:b9:b7:42:9c:9e:c5:0b:df:b2:
         0c:85:37:3e:e0:53:af:ac:a9:c7:b3:7e:e8:27:b9:db:25:34:
         b8:d0:fe:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----