Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File:                     738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier:          RuHaaqBqCK6AR4wjCTqlyk8k7s2C9gFwBS+YdGFzIx0=
Subject key identifier:   49:F2:DB:82:A3:65:09:CB:06:A2:E0:15:F7:8E:6B:8B:33:28:E3:A3
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer:       /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial:       01962F3D9F376D8976BE42AD5A75A972A800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: 0_OjcrNhtyr0s5_bJUkD8pGLgnM.roa (hash: X1Jy4DzINB1nWI37uRDEG9JSOWaqgSKmrsD2P/grQ20=)
                          2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: GfVrcz/Dab4YmLeSiOhLHxQ9aP8W082HB990D9xizK4=)
                          3: bA_e5br1PmSxWsqLddr2vRjon7w.roa (hash: K7HaBSLbX+bu7BjrpU1/OOqg8JnIXozOGz2JaJqaEA0=)
                          4: jjt9HI1NN3XupeLRtsqDq6eclfU.roa (hash: 6LBWyMoFnrlnaY8dAxvg8w98D1RRaAabb2BYYMk19Zw=)
                          5: yahFXL8WchvVvLEEaOs9ROPCOuY.roa (hash: QGTni4yC0/AQyam/WFFScLyUqzuHZrT6aTReWZmwEg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9f:37:6d:89:76:be:42:ad:5a:75:a9:72:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=49f2db82a36509cb06a2e015f78e6b8b3328e3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:28:31:ec:32:d6:ed:51:0b:79:fc:7b:ad:
                    ec:35:3f:7e:0a:14:49:8e:e6:bc:f2:63:43:9e:2b:
                    d3:69:65:36:ad:07:84:0d:6f:b2:7c:1c:bd:02:4b:
                    64:43:22:cd:46:c7:01:cc:72:3c:7a:55:c2:f3:f6:
                    1a:90:8d:c2:a9:f2:ee:e6:ca:46:1c:f0:f0:76:cd:
                    e5:c4:b1:5f:5a:e2:fa:bf:52:12:5d:cb:df:48:14:
                    fc:a3:d1:6c:a1:5a:57:47:4a:0d:e1:81:48:a2:bc:
                    b7:c2:52:f6:91:fb:54:09:b8:ee:df:2b:4e:06:36:
                    09:67:3a:7b:15:53:eb:da:07:85:fc:a2:6d:b6:3c:
                    e1:b9:a2:74:5a:df:b5:e8:0f:0d:f3:8d:72:f0:30:
                    00:49:87:4a:bd:87:c3:8b:fe:f3:36:ca:9d:00:7a:
                    35:26:23:2c:e4:a8:da:c2:86:b3:60:fc:d9:ca:16:
                    2c:1e:ce:0f:69:16:33:20:f7:1f:94:fc:e3:89:84:
                    9f:b5:86:7b:34:ce:36:eb:7a:5f:34:a1:db:75:ce:
                    08:65:8c:84:ec:52:4f:f6:4f:c0:40:c6:9d:6e:8c:
                    b2:53:37:4d:76:88:fa:8d:71:23:54:74:4f:7f:4d:
                    d5:1c:36:a8:58:88:f9:6c:db:e1:72:8e:04:7d:8e:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F2:DB:82:A3:65:09:CB:06:A2:E0:15:F7:8E:6B:8B:33:28:E3:A3
            X509v3 Authority Key Identifier:
                keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3a:5b:35:08:02:ed:99:e9:c7:f8:31:f1:5d:96:ea:3d:dc:
         a9:a5:9d:de:bb:1d:53:eb:94:25:2b:fe:59:e9:2b:00:c0:e1:
         fb:11:e8:97:6d:15:28:79:e2:c5:f2:8a:fa:42:a9:ad:73:9c:
         c0:b6:ff:77:de:93:c0:02:b1:80:4e:e6:9a:50:d0:a8:bd:b9:
         b8:a8:71:48:ee:0f:c9:24:ba:8d:94:f2:41:19:7c:07:fd:a7:
         2a:f3:3b:67:81:c3:92:1c:1a:ae:5b:40:91:f4:df:d7:d0:f8:
         cc:b2:14:61:42:25:54:e0:ae:da:c8:d4:86:91:5b:d1:33:b0:
         00:6a:7b:04:45:db:2e:75:18:0b:cb:0e:c7:72:db:3c:73:39:
         39:59:57:97:c5:e5:3d:05:e3:6f:14:64:d2:92:59:bd:83:fd:
         c7:c1:db:02:4e:20:17:b8:89:8f:c0:eb:22:48:06:71:d9:e8:
         ba:7e:1f:c4:80:20:9a:dd:e6:38:85:b9:d4:4e:29:2e:10:86:
         12:13:3e:a3:d3:ad:7f:87:30:ce:ec:37:aa:3b:26:d8:25:a7:
         47:65:30:af:79:af:92:50:38:66:26:ae:a7:8b:b9:37:a8:32:
         e7:3f:c7:42:1a:3e:e0:86:5a:15:f4:22:97:af:a7:c0:fc:ae:
         83:cd:f9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----