Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
File:                     eJwCNiZh7UHo-Xohsan6yuU96P4.mft (raw, json)
Hash identifier:          DUUJa6OYd18v1MXz1sVhPNccBRWv9mOzM0knLUYo7H8=
Subject key identifier:   A3:F0:94:01:C7:66:FB:B6:26:8A:BA:02:00:AE:BC:9D:95:35:DC:48
Authority key identifier: 78:9C:02:36:26:61:ED:41:E8:F9:7A:21:B1:A9:FA:CA:E5:3D:E8:FE
Certificate issuer:       /CN=789c02362661ed41e8f97a21b1a9facae53de8fe
Certificate serial:       01962ECF81F9A0D811CE34AED82BC876F9C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJwCNiZh7UHo-Xohsan6yuU96P4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft
Manifest number:          0261
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: eJwCNiZh7UHo-Xohsan6yuU96P4.crl (hash: X9ZgS+dEwn7JsoQROtuJbo6Ju1uAPl3lrmzLJO+oEcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:81:f9:a0:d8:11:ce:34:ae:d8:2b:c8:76:f9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789c02362661ed41e8f97a21b1a9facae53de8fe
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=a3f09401c766fbb6268aba0200aebc9d9535dc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:c8:ba:b3:82:96:ed:b1:65:54:e8:90:6b:
                    52:d4:71:d3:e9:00:a5:5e:db:fd:ab:a4:4a:ad:7c:
                    c1:92:c8:85:bf:15:3d:ce:ce:aa:be:19:c7:4a:e7:
                    1a:45:75:e5:f5:f7:c9:e5:4f:d5:21:73:5b:b3:f2:
                    28:95:b5:00:b5:57:30:94:7a:64:08:4c:fd:1c:0a:
                    5b:35:e7:bc:fc:df:32:dd:6a:96:e9:da:c6:f8:38:
                    92:1a:9e:f9:20:cd:b8:ae:06:66:46:b7:ad:b9:5d:
                    51:ce:55:1e:d4:91:77:3c:f4:d0:6d:46:98:9d:05:
                    53:61:1f:f1:45:ee:43:01:42:02:f3:49:9b:44:56:
                    33:2a:87:53:52:49:72:4a:9e:91:4a:0c:bb:6d:d6:
                    7d:46:29:29:f2:38:0b:50:81:39:8c:f3:ce:2f:88:
                    fb:9b:05:68:59:ac:10:45:f5:bf:2d:11:a2:bf:dd:
                    39:21:16:24:38:1c:b4:88:40:63:70:c2:68:53:20:
                    e5:2f:ef:b8:b0:0e:9b:c8:d9:cb:53:5c:14:7b:d5:
                    74:af:c9:b2:85:ad:63:e4:eb:3f:ec:6e:96:bf:a0:
                    dd:a2:19:c1:fd:b9:bc:dc:3e:14:e8:7a:ca:59:e6:
                    97:c3:5e:00:38:da:10:f1:e8:58:52:38:00:72:4a:
                    c0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F0:94:01:C7:66:FB:B6:26:8A:BA:02:00:AE:BC:9D:95:35:DC:48
            X509v3 Authority Key Identifier:
                keyid:78:9C:02:36:26:61:ED:41:E8:F9:7A:21:B1:A9:FA:CA:E5:3D:E8:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJwCNiZh7UHo-Xohsan6yuU96P4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/eJwCNiZh7UHo-Xohsan6yuU96P4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:63:14:16:df:2c:71:16:38:4e:26:55:a0:17:b2:85:f5:03:
         f2:35:e6:8b:8c:92:ca:c8:91:14:a3:43:45:8b:98:5f:ba:b6:
         3b:b8:b3:00:ab:5a:36:60:5c:46:7d:a5:f6:73:c3:24:67:81:
         42:94:49:d0:0e:ce:1c:67:c7:74:b5:31:2f:31:04:b4:37:27:
         4f:42:3e:30:72:14:53:ef:35:ed:82:de:9e:23:c8:1a:7f:8a:
         b7:96:41:2b:2e:0c:01:4a:73:9c:0f:41:2a:e7:c8:c8:f9:d8:
         84:51:72:dd:38:c6:26:c6:93:22:3f:33:bd:a9:68:b8:91:8d:
         d8:ce:d4:db:20:0a:42:a6:49:65:1e:d8:b7:a3:5e:e2:01:d1:
         57:cf:67:af:03:8a:4e:c8:b3:fd:2d:13:dd:b6:b3:05:56:88:
         97:ef:68:2d:5c:b0:49:9c:09:ae:73:8f:58:a2:8d:8f:3f:51:
         a1:b6:1a:51:25:d2:81:d8:73:0e:80:5d:a9:e2:c7:f1:d3:4d:
         ac:1b:bd:bc:23:e3:4b:f6:66:1b:7d:09:e4:43:ec:39:1a:59:
         43:19:03:7f:ff:1c:21:b5:d4:74:89:26:38:ec:6d:85:80:33:
         d2:17:96:32:6d:2e:f0:25:0a:19:6d:0e:b5:ef:42:de:7b:56:
         60:e3:56:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----