Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
File:                     2l7eZe_t7t-MigSyRaOl32OmnoQ.mft (raw, json)
Hash identifier:          6hgnPXiq61mv5XD2dSbUXPNITtvq8nLSlBRx44dPmfo=
Subject key identifier:   C3:34:74:66:8C:B8:2E:5B:97:ED:F9:82:99:88:96:2C:1A:0B:75:18
Authority key identifier: DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
Certificate issuer:       /CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Certificate serial:       01962E99C3095FFD8C0EB73F60D294332410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: 2l7eZe_t7t-MigSyRaOl32OmnoQ.crl (hash: TLp0vJGmW7YbvIGbKNT1oTibmC1YMSpfJc3Al51tw+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c3:09:5f:fd:8c:0e:b7:3f:60:d2:94:33:24:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=c33474668cb82e5b97edf9829988962c1a0b7518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7d:77:63:6c:37:4d:63:99:d1:7c:fc:ce:f8:
                    32:9a:fa:94:0a:7a:c9:77:f5:b7:4b:29:6e:b2:a7:
                    46:98:d1:67:62:bd:e6:20:ad:91:2c:db:ff:f7:14:
                    9b:7b:ff:c6:12:c7:4d:86:d2:2f:91:2a:4e:62:d6:
                    23:66:dc:7f:5a:b9:34:3c:2e:ad:eb:69:fa:e7:fc:
                    02:41:3e:a7:ba:0e:b3:e1:41:fd:15:41:24:f3:a8:
                    83:81:fc:c4:83:13:86:09:42:6c:0e:cc:7a:55:79:
                    47:87:5d:e7:09:1f:e3:bf:60:c1:f6:44:39:ec:17:
                    52:f9:70:5b:04:75:2f:a4:13:e9:7d:30:a2:23:ac:
                    3d:27:97:90:3f:bf:ff:c5:79:71:c0:ab:d9:25:e0:
                    2a:10:3f:3f:af:a1:5b:0b:e5:87:7c:8f:f4:3f:be:
                    6f:3d:09:93:61:da:50:b5:7e:95:32:84:38:49:58:
                    78:66:64:9d:b6:88:89:31:b4:b0:4c:91:81:24:56:
                    b1:cc:0d:06:33:f7:2d:fd:61:f0:0c:bb:07:ac:8f:
                    a1:13:5c:6b:38:43:cc:93:77:00:ea:6c:fa:d9:c0:
                    f5:3f:66:e0:b7:46:dd:be:bf:36:fe:82:f7:35:3d:
                    78:b2:00:4e:3c:0d:73:bd:6c:de:9e:88:6a:a6:c7:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:34:74:66:8C:B8:2E:5B:97:ED:F9:82:99:88:96:2C:1A:0B:75:18
            X509v3 Authority Key Identifier:
                keyid:DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:50:34:bd:06:5c:db:8a:40:8a:71:c9:ba:30:5a:00:0a:31:
         c2:ca:8c:3d:f1:02:0b:1e:47:a0:5f:d0:d3:3a:3d:ed:24:ee:
         45:ac:c5:db:c4:d9:3d:ef:44:11:80:f8:ce:b7:fa:14:5e:09:
         c6:84:80:e8:dd:17:5d:4e:5b:e2:ab:a0:43:f5:cf:0e:b5:c3:
         ad:ad:b0:25:54:d9:43:6b:8d:e9:79:b5:05:7f:35:d2:d6:c2:
         fd:fe:f8:5a:ad:fb:b7:b4:ac:df:ac:9d:33:35:19:9b:6d:b0:
         7c:1f:52:ef:65:2f:3e:88:0b:65:4e:70:b0:a6:df:5a:ab:36:
         4e:f8:81:a2:5a:fc:61:e2:08:da:32:cc:33:4d:a5:aa:e1:9f:
         96:37:5a:9d:2a:1b:24:e4:df:f3:fd:83:ea:ae:c7:3a:7e:73:
         16:cb:62:d0:d5:81:34:ec:d9:3d:06:c8:22:44:3c:77:34:b5:
         d3:5f:d8:46:bf:13:63:11:a9:9f:dc:d8:33:e5:29:d6:33:89:
         e1:15:c9:fb:aa:a4:c1:de:1d:e8:f8:66:0f:ba:be:e1:73:0a:
         bb:ae:b7:5d:38:d0:32:dc:de:6d:cd:a3:3a:03:b7:d3:a1:8d:
         9c:72:c6:c7:b6:b1:19:69:03:2c:9f:0b:1e:e2:35:f5:13:98:
         75:c0:c2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----