Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File:                     EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier:          X1jmqgLv7E8JWBVhLYYcA0zBZCJR9GLUfgdjSAUUzqs=
Subject key identifier:   35:BB:31:5D:F9:4D:77:38:AB:B6:45:85:A9:C6:75:1D:AF:01:D8:8E
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer:       /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial:       01962F742C4DE3DE5A05489F66BD8282325B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: 1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa (hash: ZowUiRFYv0ZOu5pI167992U5kyXST8eznpl9k++Lgik=)
                          2: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: 6F12+Sg/SquQmYL61RoTfe2C9eOAZQ8Lt/davAhIcHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2c:4d:e3:de:5a:05:48:9f:66:bd:82:82:32:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=35bb315df94d7738abb64585a9c6751daf01d88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:f7:10:c3:03:c3:ae:b9:0b:02:12:a9:d2:
                    54:12:c4:83:40:23:af:33:47:38:22:4a:46:7a:4c:
                    a4:c3:c4:3f:88:a1:fa:fc:c9:4b:1a:16:ab:d6:5d:
                    09:12:1c:59:ab:7d:9d:45:41:6a:ca:0e:6b:a0:b9:
                    0c:fa:98:cf:63:43:53:16:16:58:0d:2a:7c:3e:98:
                    28:30:18:a8:c2:dc:73:bd:63:95:27:95:90:86:28:
                    11:da:a2:6a:bb:53:15:f9:6f:cf:bd:08:0c:3f:ff:
                    29:56:d3:1a:5e:6a:fa:64:d6:94:52:07:ee:dd:98:
                    42:8b:d4:58:f3:88:78:4d:22:7f:6b:51:da:24:28:
                    8f:3e:37:90:c5:7c:b7:bf:81:19:fa:f9:8d:34:76:
                    fa:5f:a8:cc:5c:3f:aa:71:ec:f0:5f:41:fe:ac:f2:
                    6a:b3:3d:af:05:9d:d9:c2:24:6d:a0:72:60:80:90:
                    eb:b3:87:f3:4f:ac:0c:0e:5c:66:44:b3:5f:a5:77:
                    14:c5:69:fb:a1:4d:86:86:df:e6:94:86:88:e3:95:
                    32:13:f1:73:d7:ce:7f:68:10:4b:f7:dc:26:16:21:
                    c2:04:66:54:ce:ee:84:cc:0b:90:36:50:3c:23:f1:
                    ef:23:87:ee:1d:ae:3e:fb:5c:da:90:15:01:ee:08:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BB:31:5D:F9:4D:77:38:AB:B6:45:85:A9:C6:75:1D:AF:01:D8:8E
            X509v3 Authority Key Identifier:
                keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:0d:d8:0c:c2:71:ab:56:1f:ed:f9:d9:5c:a0:90:e2:15:
         79:c6:19:00:4f:2d:0b:6c:1c:59:3b:4c:8c:b8:0a:ef:f3:6a:
         41:50:19:1f:02:e7:bf:be:dc:bb:b7:a7:2b:19:9b:09:38:08:
         9c:48:fc:5b:b0:64:44:1f:9d:38:56:c8:d3:80:6c:9f:cd:1a:
         b0:a8:ae:d7:90:56:65:43:4c:b3:79:fd:0e:32:97:b1:f3:eb:
         d8:c5:ad:c8:ff:6f:ee:10:13:0f:8e:5f:4e:76:6d:a9:e1:56:
         c2:ab:84:91:16:2c:39:ce:3c:c3:ff:d6:c3:a7:26:e1:82:23:
         d3:fd:b7:10:52:4a:fe:2a:63:71:af:22:d7:10:b0:af:34:09:
         23:4b:63:29:da:1a:14:43:5e:bb:cb:e5:cc:d4:2c:3b:ea:ce:
         bd:1d:a4:d4:bf:6e:64:96:73:d8:0d:2c:e9:f5:e2:6e:59:01:
         6b:c3:f1:2e:41:74:7f:1f:d4:df:59:f3:bf:9c:1a:90:7a:c2:
         b6:cf:2d:f0:10:6a:23:55:8d:d4:e3:25:f0:71:c0:54:9a:86:
         75:0c:d0:cd:0d:0f:b6:17:30:ba:80:41:b2:e8:65:20:d1:99:
         93:06:3e:96:f3:35:4a:35:6d:9b:10:8a:ff:54:9d:f8:e4:76:
         83:92:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----