Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File:                     Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier:          1fhvp5CYPo3q9rgygy+cca2Qb9o24+KeRLfX7LRHJtk=
Subject key identifier:   80:2D:D4:EB:CA:E7:E8:30:9A:0F:AD:5F:4A:10:CE:44:C5:AA:AF:37
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer:       /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial:       01962F06FDDB21829CFE2360774E438D8CE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: g0rEEfk01xKNWZh4TPQ/BbehDw6pnM1/Q+4EgXfHELM=)
                          2: ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa (hash: rmdsvK470zI9xYT/Ts/JVvHVmj5J/Tw+y1heTWpL5gU=)
                          3: pzcGKLsYJDgAvVmaLC043N77QRg.roa (hash: YvI3zWVk1s/r/kGix6qKrguJ1csuD/jUAsuyDHU2sFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fd:db:21:82:9c:fe:23:60:77:4e:43:8d:8c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=802dd4ebcae7e8309a0fad5f4a10ce44c5aaaf37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ed:98:e9:b7:2d:cc:41:08:57:cb:e4:bb:f3:
                    3c:bb:98:af:83:b0:5f:b4:cd:fd:f1:38:ca:37:55:
                    ad:2b:c1:81:c2:e3:b0:d2:b2:d3:92:86:d0:23:f9:
                    70:99:ce:de:85:0b:b4:16:80:d1:57:17:5e:e5:12:
                    11:e4:e5:7b:13:fc:01:79:ae:83:e5:92:e4:f7:d9:
                    9a:73:b8:2d:56:69:bd:dc:a8:70:f3:a5:42:24:e4:
                    ac:e3:e9:1a:34:5f:7f:05:9f:45:84:f9:53:0e:f3:
                    4d:34:13:bf:ae:9b:b8:6a:49:df:41:c8:6a:70:60:
                    7c:dc:5f:3d:6b:00:30:18:58:c9:11:b1:67:16:d1:
                    0d:ba:3d:e8:3a:c3:6d:45:63:9d:44:26:eb:54:4b:
                    a6:0b:f5:62:ca:7e:0f:31:c0:7e:f2:0c:10:63:19:
                    6f:2d:42:8e:df:fc:e2:03:1d:93:ce:97:25:39:8a:
                    7b:b9:65:7f:e7:8d:b5:36:77:c7:fd:f8:ca:ac:20:
                    e3:24:d3:5d:75:c9:31:2b:3d:09:14:a8:7d:72:26:
                    4d:b6:b3:f7:ee:53:c2:39:a5:b1:16:51:a0:64:63:
                    c7:b4:09:88:10:55:5e:1c:9f:f2:4e:5e:bd:22:01:
                    50:6a:5d:d5:4b:8b:0b:85:e0:73:67:e5:48:5f:cc:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2D:D4:EB:CA:E7:E8:30:9A:0F:AD:5F:4A:10:CE:44:C5:AA:AF:37
            X509v3 Authority Key Identifier:
                keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1d:fc:12:6e:4f:89:cc:57:49:57:ae:9e:aa:82:b5:da:55:
         8b:11:42:2d:1f:3f:8a:78:93:c7:b8:38:81:f7:16:e5:cb:de:
         7b:fb:96:5c:f3:05:48:8b:7f:f7:2f:9a:b8:f3:c6:88:ad:ae:
         5e:2d:74:be:5d:a9:c1:03:27:eb:ba:e8:2c:5e:2c:ce:25:aa:
         f3:5a:b3:32:26:1b:13:89:84:09:37:d7:3d:10:e2:f1:7c:dc:
         0f:83:93:1f:01:49:59:d0:63:86:b3:14:5c:c4:81:b2:e8:88:
         6f:25:69:7d:4b:12:29:8e:f2:32:90:f1:22:39:46:41:b4:c7:
         46:0f:fd:6c:77:19:b2:41:5d:83:c4:2b:dd:98:cd:ca:f1:b9:
         c4:f3:e4:ca:c6:7c:af:fc:9b:54:98:01:db:c4:9d:77:f2:b3:
         71:61:b8:04:15:d2:f8:37:de:4a:07:d1:97:78:c1:0e:5b:97:
         80:91:f5:63:de:00:f5:80:0f:40:56:68:59:87:5f:15:3e:c4:
         ae:8e:e4:38:e4:f4:32:55:08:15:cf:4f:24:21:ff:7f:10:79:
         5d:f4:22:d3:f3:5a:58:16:07:df:e7:53:07:dc:0d:73:92:69:
         ea:57:a0:50:18:e4:f1:96:a4:81:69:79:07:d5:02:84:08:72:
         01:5f:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----