Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File:                     8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier:          bcNaIJMT/sKnbzbx85oDOuqNg6qP26xXO7vJynxfBas=
Subject key identifier:   54:9B:F0:D2:96:9C:94:C5:5D:F3:68:12:EB:FF:7D:DD:71:3F:62:60
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer:       /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial:       01962F742548D16B5965CD09EFB4797340BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: +ht8rffFTVN0+mOtTcoTqpsxc8NiLZGTeSJ7rwZez1g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:25:48:d1:6b:59:65:cd:09:ef:b4:79:73:40:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=549bf0d2969c94c55df36812ebff7ddd713f6260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:13:70:ed:15:06:98:6d:61:90:e0:ef:5b:d9:
                    21:30:e4:8f:62:9b:f4:4d:7f:3b:02:59:b9:a0:6a:
                    9f:ab:51:a9:d9:db:2d:c7:6c:9f:c5:f1:d9:54:47:
                    ae:34:97:4e:2b:5d:48:b5:f7:22:70:dc:59:c5:33:
                    08:8f:8e:5d:21:e6:5c:af:9c:40:18:cf:fb:fd:e2:
                    a9:0e:3b:8a:5d:81:c5:57:a5:f7:58:b3:31:ad:23:
                    f7:ed:aa:d3:c0:73:8f:5c:09:11:13:a3:46:b0:35:
                    c9:69:dc:2d:09:0e:9f:a9:9b:e7:05:24:9b:da:e7:
                    40:ff:e3:9e:fa:a9:d0:6c:bc:19:e6:85:3f:bd:4f:
                    24:ea:a9:01:99:9b:22:67:e7:48:82:79:da:fd:9f:
                    be:52:5e:dd:94:8b:46:d4:b1:87:66:54:8f:6a:79:
                    46:3f:3d:68:e1:12:6e:f8:40:2f:ef:d0:68:dc:5f:
                    11:cc:e9:56:af:17:97:1e:36:22:16:91:55:bb:1c:
                    2e:f9:5a:b5:83:e3:6a:0b:c9:c9:f4:0d:bf:e4:1a:
                    0b:b3:5c:6a:0d:4e:92:8d:e9:ce:7d:0a:6e:26:38:
                    60:cf:d7:ac:a6:6a:71:39:10:d1:a8:bc:95:21:f5:
                    7f:83:a8:b3:26:35:5e:a6:cc:e0:86:05:0c:b9:08:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9B:F0:D2:96:9C:94:C5:5D:F3:68:12:EB:FF:7D:DD:71:3F:62:60
            X509v3 Authority Key Identifier:
                keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8f:24:e4:d9:00:ce:ff:91:bc:4d:08:7b:43:c1:58:d6:aa:
         eb:dd:aa:4c:d3:bc:21:89:d7:c3:32:43:9a:9a:1a:6c:18:4a:
         a0:88:ae:50:da:ed:d3:3a:75:13:c2:24:7a:46:d7:cc:84:53:
         97:38:b3:b4:1c:2a:eb:9b:37:22:1f:51:eb:40:8f:6c:f4:55:
         2b:87:46:45:eb:b6:68:4f:90:57:05:be:8c:e8:59:5f:90:07:
         f8:c5:2c:58:77:43:71:9e:93:97:8b:8b:4c:7f:8a:cc:89:a3:
         dd:84:98:d0:31:34:ef:f4:28:af:a3:f1:84:dc:a3:8c:0e:e1:
         72:21:71:43:b5:07:12:8c:cb:fc:3a:da:9f:61:35:9f:c8:1b:
         a6:85:86:fe:1b:bf:f5:ce:a8:6e:ef:c4:f4:11:2e:55:34:a9:
         75:0f:fe:ab:37:97:a2:ea:e2:9a:68:a2:24:c2:af:af:74:64:
         67:e5:3e:7f:85:90:7d:64:09:7a:69:57:31:cc:ef:83:fa:bb:
         e9:a4:65:8b:4e:98:d2:a1:a0:d9:17:0f:83:e0:a0:56:df:6d:
         a0:a4:9f:e2:cc:db:39:90:73:37:76:8d:60:c7:8f:05:ac:0a:
         e3:d6:5c:5b:c5:73:d8:03:6a:7b:e2:d8:5f:00:87:2f:9f:bf:
         2d:be:f8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----