Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File:                     txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier:          1GYoDGSvxFFGR1NbvfhRdp7fjD+pvDBXFbZ7gWWFb9Q=
Subject key identifier:   9D:99:E6:D2:87:15:7D:04:2E:B1:05:4C:E1:80:8D:86:14:5B:04:7B
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer:       /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial:       01962DF436B9C02343D5A5024F91F9B1B671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: tCEkDa4uj/QAFWT6xVglXhlLAK7UBASZbHBnnPCM2k0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:36:b9:c0:23:43:d5:a5:02:4f:91:f9:b1:b6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=9d99e6d287157d042eb1054ce1808d86145b047b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:86:df:15:e6:48:0b:af:51:17:bb:58:f1:
                    3b:0a:40:24:78:0d:35:d6:5f:ea:4e:fe:5a:a7:54:
                    3d:f8:6d:17:a0:db:75:d1:ff:9a:a7:d7:6b:e7:91:
                    da:13:5c:29:cc:36:2b:29:f6:bd:a5:ac:0e:e3:8f:
                    33:4d:91:69:f9:d4:28:51:4e:37:36:a1:b8:86:6f:
                    aa:10:db:89:33:a3:69:af:68:d8:08:39:8b:20:36:
                    a1:46:8b:dd:74:38:4e:1a:5f:4f:5e:8f:5a:13:73:
                    a1:23:3e:0c:b0:d1:94:65:fd:6b:e5:e2:90:e7:c4:
                    43:7f:a9:70:76:72:04:51:dc:4a:01:b6:81:e7:7b:
                    e2:b6:be:11:23:a1:38:c2:9a:ae:21:70:85:6d:c4:
                    52:54:e8:ce:d8:2a:6f:55:53:f9:a8:2f:0f:13:aa:
                    43:26:35:9c:4f:c1:01:33:e4:6f:63:4a:0d:32:f1:
                    6d:d3:9c:82:ce:b1:fc:28:de:ef:47:e9:13:a4:5f:
                    fd:32:3b:5b:36:fe:9d:c0:1e:70:21:55:d1:04:08:
                    fb:7a:69:79:7a:1b:e9:26:12:82:3d:58:e7:3b:ef:
                    49:d5:4a:39:ad:8b:1b:e9:a6:38:5f:3c:51:4d:59:
                    1b:cd:64:d5:5d:d0:a5:73:d3:c8:55:8f:ad:f2:84:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:99:E6:D2:87:15:7D:04:2E:B1:05:4C:E1:80:8D:86:14:5B:04:7B
            X509v3 Authority Key Identifier:
                keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f2:8f:97:cc:09:ae:fd:aa:81:4a:ae:da:69:c5:af:7c:91:
         ce:69:47:4d:53:af:6b:b5:65:bc:4e:fc:21:98:81:19:c6:be:
         68:78:70:4a:d4:0d:a6:03:eb:52:f5:dd:87:86:51:63:7d:ab:
         a9:43:0f:5c:2a:08:c4:4a:cd:22:26:6c:0b:8c:b4:e2:a4:8b:
         7a:74:47:e9:24:bb:23:f6:01:bd:da:89:2f:03:3d:fd:20:5e:
         b2:8a:b8:aa:72:0b:e1:c7:e6:bd:31:56:78:6a:b1:b0:09:2b:
         a0:ef:7d:12:ea:68:e3:c5:53:bd:95:00:07:08:5d:b0:ea:1d:
         98:5d:b3:e0:fe:c3:3a:02:41:85:14:15:11:7b:4b:de:6f:7f:
         c0:02:38:39:50:17:51:ab:1a:68:06:27:10:0b:cc:b7:99:6b:
         52:6e:92:29:f9:3d:c4:e2:01:a6:05:d8:8a:33:1e:b1:25:56:
         0d:a8:84:bd:64:9b:8e:da:a2:c7:74:6c:83:60:c1:4b:65:58:
         09:a7:13:0d:fe:c0:5f:ab:50:d3:05:c4:2e:c9:ef:6e:a2:07:
         bb:5b:f9:16:47:29:3d:97:84:cc:6d:9a:a6:21:c9:8d:ba:ba:
         ba:7b:ed:ec:a4:ca:d9:e9:56:9c:78:a1:5a:ad:88:17:70:b3:
         6d:2a:77:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----