Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
File:                     4N6QuLKkhGwldFi_G_tset6TLss.mft (raw, json)
Hash identifier:          rgvUy/5UJ1/lsn9U332Il1Gx3/lsfO95G+7dTC0cP/A=
Subject key identifier:   EC:FC:7C:F4:E4:97:CE:AF:A5:C9:12:68:2B:0F:0B:56:E9:12:FF:7C
Authority key identifier: E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
Certificate issuer:       /CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Certificate serial:       01962E2AF4DF7194B74D23DB10301EB45A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
Manifest number:          01DF
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: 4N6QuLKkhGwldFi_G_tset6TLss.crl (hash: QyJiDXszRpCvWIpYPe5bbnbSuq3dTT6vYPthDpf0UAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f4:df:71:94:b7:4d:23:db:10:30:1e:b4:5a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=ecfc7cf4e497ceafa5c912682b0f0b56e912ff7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:b6:6f:4c:fd:43:1a:c4:d4:10:98:1d:d6:
                    42:c2:8e:c5:a9:9a:1d:56:c7:f7:b1:2e:43:b9:8c:
                    8e:14:38:cc:70:e5:cf:47:e2:c1:d2:a6:91:5a:5b:
                    e5:a8:16:c4:27:c1:1a:04:c9:1e:0a:37:c3:f7:77:
                    1d:18:b6:a1:e3:f6:5b:61:6c:6e:7a:38:f8:cc:18:
                    b3:3f:28:ab:21:a5:97:56:9c:12:66:7e:45:80:99:
                    ff:0d:71:30:a4:1b:6f:68:48:88:47:47:71:f6:61:
                    e4:64:c2:08:5e:15:eb:57:62:8d:18:88:78:61:61:
                    ec:ad:7a:b3:8b:bf:96:37:df:a1:de:e1:e7:72:f4:
                    5d:b1:0f:89:8e:9f:2e:fc:51:a2:dc:ad:0d:c1:93:
                    6f:31:2d:15:8c:28:65:4f:77:3b:16:9d:a8:21:ac:
                    25:ec:bc:fd:ed:ca:75:93:c1:ce:21:5a:b5:16:9d:
                    a3:4a:d5:51:31:7d:66:e7:0b:c8:88:6a:1b:55:24:
                    a1:b0:33:07:ed:84:d7:b9:93:bc:55:3d:27:d2:79:
                    cf:0b:0e:ac:38:2e:73:33:22:36:95:11:95:fe:33:
                    6a:50:fb:f6:25:d0:9e:09:dd:98:19:fc:48:0d:2c:
                    13:42:45:86:4d:6e:96:52:53:39:fc:45:9d:6b:72:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FC:7C:F4:E4:97:CE:AF:A5:C9:12:68:2B:0F:0B:56:E9:12:FF:7C
            X509v3 Authority Key Identifier:
                keyid:E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3d:5d:a0:30:8b:3e:60:56:81:d1:35:da:7c:1c:0e:a2:2a:
         9a:bf:a2:fd:8b:ac:dd:e5:5e:9f:51:71:1a:53:b1:a1:0c:40:
         62:e2:3f:e4:08:2b:06:29:00:16:ec:43:8a:a5:87:a9:e0:3a:
         fa:c4:69:f4:61:2e:af:b9:27:fb:bb:c4:06:42:06:83:d1:bd:
         be:43:82:cc:e2:a0:94:24:8d:5e:df:62:c7:b8:65:1b:15:a5:
         fc:ff:21:8f:83:ad:fe:ed:77:f5:7f:cd:b1:76:ff:48:f5:96:
         95:41:2b:10:9a:68:68:79:2c:e3:00:8b:2c:8b:57:7f:39:b6:
         c6:93:31:fd:dc:e2:f7:5a:b8:b4:0e:ab:af:7f:ae:b4:53:a9:
         96:5d:a8:38:29:7b:2e:33:9c:24:62:16:8e:aa:14:43:62:a6:
         c9:ca:b5:35:83:a4:b7:66:35:7d:9b:58:75:9f:2c:25:93:38:
         ac:d0:dc:ab:02:39:69:de:b5:3e:2b:44:f1:cc:fc:31:6c:50:
         97:dc:12:e0:69:5e:a9:d5:b7:2c:42:78:15:54:59:a6:1d:94:
         88:e2:92:1d:3a:f5:c0:d7:92:c0:33:15:e9:71:51:36:8d:77:
         1a:da:cf:5c:22:85:24:13:03:8e:fb:0c:7e:f0:d4:d5:78:c1:
         18:98:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----