Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
File:                     B0ejbXdop7MKTuy7aWTIwjfXRAE.mft (raw, json)
Hash identifier:          +zAeMG9Z3S80lcxPs5x2wb+KDkbVQIE2HfwDhhmkBYY=
Subject key identifier:   B8:F2:CD:A8:8A:08:9E:05:6C:48:CB:42:53:E5:25:57:31:80:EE:D3
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Certificate issuer:       /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial:       01962ECF78BA503181FDC083121BA470649C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: 2CIwVa2guH9I9mE05PyNSk_zLJw.roa (hash: 6WMXH3mPe6YH5cQJoRqeEOdgwx8H7f+4sGKrej+Vxnc=)
                          2: B0ejbXdop7MKTuy7aWTIwjfXRAE.crl (hash: 73xPnqurMCCWkbLlUA4g4xJOb8yr1JwUBL/zOrQZhKI=)
                          3: U9ESt7XkFJMxc8hDKsx2ew3J7YE.roa (hash: IAjM9oVyj8oid2QGC8YSaV020xf4N3UKnDXpYd0lkxk=)
                          4: o1r9uGgWSMkBr8TYtqeKLaE5QOE.roa (hash: 7RzPsp3uHfpDYCSJda3tVfo5/SCH0Ae2ssPUnQ5pNnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:78:ba:50:31:81:fd:c0:83:12:1b:a4:70:64:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=b8f2cda88a089e056c48cb4253e525573180eed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7a:76:ee:cb:6a:32:c0:31:ff:98:07:50:dc:
                    56:a6:44:93:4b:4d:05:86:c1:e7:a1:cb:f4:37:a4:
                    1c:d8:c9:ab:e4:1e:b7:d9:1f:30:62:08:3a:bd:3c:
                    b1:14:79:89:dd:a5:02:f3:f4:1e:57:3f:f7:5a:73:
                    87:c4:4f:4e:76:f4:b3:98:ef:df:18:e3:0a:2d:90:
                    92:6b:38:88:03:fd:10:46:6b:18:dc:af:d8:9e:0c:
                    a1:7d:f9:4b:3d:e1:ba:f7:02:9a:50:e5:50:97:0b:
                    b4:4a:85:62:c1:f9:f0:c2:c4:5e:61:e2:83:2d:c2:
                    e3:83:7b:9b:08:68:07:09:f7:84:79:a9:cb:53:f8:
                    91:b4:2e:f3:39:45:3f:f7:64:0a:e6:2e:44:7d:4c:
                    2f:4a:b6:01:0c:d0:57:51:0b:da:3a:3e:68:6c:36:
                    b0:b2:3b:73:fe:d9:72:fd:e1:3d:9b:a8:bf:3d:f1:
                    85:4b:bc:fe:8e:0f:b7:6c:87:e8:d6:a7:9c:f2:0f:
                    7c:a5:ae:76:0a:6d:20:38:8f:d3:4a:00:35:eb:b6:
                    c1:00:3b:08:9e:a9:86:f0:bc:6b:0c:59:44:8f:31:
                    1a:f8:ef:fa:bf:10:22:77:c5:55:49:74:bd:bc:bd:
                    55:06:bb:95:05:eb:f5:ff:7b:d8:d7:eb:2a:03:9b:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F2:CD:A8:8A:08:9E:05:6C:48:CB:42:53:E5:25:57:31:80:EE:D3
            X509v3 Authority Key Identifier:
                keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2c:6d:b2:9d:c7:c1:1c:d5:c5:99:76:d7:06:ec:b4:e5:9c:
         10:17:66:0f:87:06:ae:d9:72:27:ef:f9:a3:02:d5:4f:40:45:
         37:9a:1b:2d:94:c0:35:14:54:75:17:ab:3a:57:97:d1:54:e9:
         b6:d3:78:68:ea:17:fc:30:50:fb:9c:bd:a0:77:1a:a0:ce:8e:
         d7:58:a5:fd:db:41:3d:13:7c:96:9e:eb:f9:ed:ca:83:7e:86:
         e4:e4:c7:c3:42:75:dc:05:04:7e:8b:66:71:4b:6a:9f:39:09:
         37:a8:25:58:45:d0:63:45:0a:ad:83:16:22:d0:21:91:7c:3a:
         0d:f1:a9:b5:9e:2a:93:57:73:fa:0e:2b:f6:02:a5:d4:92:e1:
         f4:ee:70:17:ab:22:0b:c0:32:4d:56:f9:82:51:f1:fe:b1:e0:
         57:a2:34:45:96:64:39:ce:79:02:ad:9b:af:d8:33:01:c6:8c:
         bc:5d:3d:4e:3a:1e:ef:63:31:fa:11:03:54:fb:e1:1f:54:0f:
         d0:8e:7c:ff:09:f6:fc:69:95:69:56:e4:c9:71:08:06:07:9a:
         c7:4b:9d:70:59:34:98:6a:e4:1f:9a:a8:4d:4e:ea:cc:40:b9:
         f5:96:1d:08:17:9d:a5:1e:14:3d:d1:c2:d5:d3:e2:f5:84:f5:
         38:e6:36:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----