Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
File:                     e4J6zGgKop3ayCOInYeGPkFLJBE.mft (raw, json)
Hash identifier:          r/eAyvpW/4AXJv8dAiXzs1tmwZKSxGT/1EIOdDoMdRI=
Subject key identifier:   25:83:69:15:28:07:31:6E:8A:7C:7F:8A:4B:C0:27:1B:97:49:91:77
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Certificate issuer:       /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial:       01962FAB68052A27F59959DB1966070D2056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: e4J6zGgKop3ayCOInYeGPkFLJBE.crl (hash: sMrfG5I8o5jy0GS3JUQchFRN4Uw7E2U//GUJSFbfrsQ=)
                          2: vAUqTPB1ggTD55ydvicj8MOXqzU.roa (hash: ANS6SkWw8/TFy8xaxFG7MJ7RE0vAnysZgfuBquUIKSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:68:05:2a:27:f5:99:59:db:19:66:07:0d:20:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=258369152807316e8a7c7f8a4bc0271b97499177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:03:77:98:5e:d0:9b:54:44:ac:56:63:60:
                    21:b7:ac:4e:14:2c:54:0e:74:d6:7f:a2:94:91:e4:
                    e4:2f:34:41:f4:9f:1c:95:0a:34:32:bc:18:b2:99:
                    f7:08:91:b2:39:e4:36:71:20:3e:48:e3:61:dc:93:
                    2e:69:68:ce:31:96:64:9b:f3:ec:ad:e3:57:80:9f:
                    17:fc:43:82:88:a6:f3:c5:2f:fc:2b:ff:a9:7e:89:
                    34:61:72:4a:27:6a:e6:f9:de:c8:a8:67:b3:de:0c:
                    23:dd:01:e2:55:be:8f:9e:7e:eb:ab:e1:84:d1:68:
                    f9:e4:bf:5b:f8:d7:7f:f7:79:5c:f1:5f:71:e6:37:
                    06:85:19:f2:f6:39:26:a1:c2:1d:90:42:81:da:2f:
                    fa:16:df:82:94:b2:9a:79:fa:55:a2:05:5b:65:de:
                    4e:e8:5c:14:59:23:70:41:ef:f7:a7:60:29:6f:e3:
                    87:12:cd:fb:fa:9e:4e:3d:3e:9a:53:d2:76:55:c4:
                    95:34:df:bc:67:1e:c6:80:fc:e8:c7:00:ca:59:e3:
                    2a:5b:41:90:9d:8c:b0:2b:15:35:21:c9:ac:81:19:
                    d2:f5:85:ef:ac:74:cc:e7:54:7e:e0:a7:13:fc:73:
                    3b:b3:a0:8f:a5:cd:e3:17:ba:5c:3b:13:5b:ee:84:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:83:69:15:28:07:31:6E:8A:7C:7F:8A:4B:C0:27:1B:97:49:91:77
            X509v3 Authority Key Identifier:
                keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ca:58:8a:13:67:33:2d:c2:6d:cd:85:47:33:cf:54:fc:b2:
         99:20:ff:26:5d:1b:32:43:ef:15:4b:b2:cb:c0:fe:1c:23:f9:
         ae:77:45:99:b0:4b:77:d3:62:56:42:fd:98:e1:1f:96:f1:c7:
         d0:ab:a2:31:12:0c:b7:85:b7:81:86:b9:af:c1:5c:64:8d:f5:
         c4:fb:e9:d5:5d:38:14:7d:00:24:95:82:0c:be:af:dd:54:a1:
         11:19:43:49:ce:2f:e3:91:33:ca:cb:92:61:ef:c9:f1:6d:bc:
         cf:ec:7e:7b:81:d4:9d:7c:b4:7b:1e:47:40:3e:ba:de:44:d8:
         15:cc:c5:26:88:94:34:0d:c5:53:03:90:f1:bc:25:3a:6c:c1:
         0b:b7:d5:47:62:38:0d:4b:32:5d:df:da:89:16:75:78:b1:13:
         59:54:5e:26:fa:d1:5e:79:e6:6b:1b:1f:51:26:25:5f:b7:b0:
         3f:4c:35:34:cc:df:47:e1:22:54:89:a8:d6:a7:21:19:db:91:
         24:70:a5:a5:d8:66:25:1e:d6:6e:f6:4a:96:b3:c2:a1:02:e1:
         fc:15:ba:ec:fe:d3:4c:8d:79:17:70:15:3c:7c:d8:fe:00:ae:
         e5:c5:43:60:e5:68:d7:f6:d2:06:6d:b7:2b:0d:7e:24:ad:a9:
         92:b6:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----