Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File:                     e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier:          NoJfdny3HvnItGBo0I1g4atqxBd+LNuldraEi5Cbjik=
Subject key identifier:   D9:F1:5B:E0:2E:97:DC:51:85:C5:06:49:4B:78:E1:0C:07:C1:4B:78
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer:       /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial:       01962F06C85FDF3A961C0E9E8E5D1693417C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: cLYB6l9FZL9zQXyfpqoagDuHdic.roa (hash: bfsqI0s1izdNOdCWZ5Wt/vOuavl9t3l+ssIuSAYSQTY=)
                          2: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: LAB7SEbuZurVHecKp1Q8hALyY1T0Us1wsITzM+ZxK9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c8:5f:df:3a:96:1c:0e:9e:8e:5d:16:93:41:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=d9f15be02e97dc5185c506494b78e10c07c14b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:93:b3:89:76:06:88:5e:67:5b:99:de:b1:
                    ce:dd:34:16:45:da:84:8b:aa:bc:98:aa:28:96:27:
                    e4:c1:c9:1a:fd:56:89:b2:2d:5f:d7:48:c5:be:9b:
                    2b:3b:d1:66:b0:27:83:85:48:c4:42:de:4c:77:9e:
                    9c:6e:61:14:da:08:f3:0e:b2:fa:32:be:91:b9:26:
                    63:1a:cb:3e:3e:8c:a1:48:68:25:a4:a5:5a:11:b5:
                    51:f3:ae:14:bb:ac:6d:0a:ab:5b:d9:e3:64:d5:e6:
                    01:6a:0c:8c:7a:27:8f:a1:6f:14:c9:35:48:8f:35:
                    32:de:d6:fe:d9:d4:76:d4:ea:a7:40:2f:9f:72:8d:
                    65:ba:c7:47:39:98:e3:b6:20:e2:26:8a:80:81:54:
                    63:7b:42:00:ba:97:da:a5:26:55:8f:77:0f:39:06:
                    58:f9:50:04:e3:00:1a:24:ed:08:95:0e:5e:35:99:
                    84:3c:f4:1a:c6:17:8c:d2:a8:c7:99:7e:1f:40:6e:
                    67:72:31:b3:37:9d:91:61:65:cc:78:d3:e9:dd:98:
                    74:e4:51:73:70:70:4d:5b:77:2c:62:c0:24:f9:59:
                    79:d7:ca:79:d4:20:bc:61:aa:48:1e:4b:8b:7f:bd:
                    15:ff:94:ce:96:fd:67:9e:4a:d6:ac:ec:2e:0d:5a:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F1:5B:E0:2E:97:DC:51:85:C5:06:49:4B:78:E1:0C:07:C1:4B:78
            X509v3 Authority Key Identifier:
                keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:1a:89:20:49:ab:6b:6e:e8:5f:46:89:89:ac:86:50:ad:06:
         97:28:35:c1:82:8a:10:a7:81:1f:b1:ed:f4:0d:ea:d8:26:ac:
         ae:16:47:f8:f2:50:6e:da:53:c2:3f:19:c1:3f:61:1d:cf:1e:
         08:6f:3e:f3:50:46:b0:f2:21:ed:2c:5c:90:16:2b:57:ef:9f:
         28:ec:9b:33:d8:a7:91:73:28:f8:d4:a3:56:96:91:db:7a:70:
         7b:6e:95:13:67:af:fc:5a:d0:8d:c8:33:bf:25:be:4b:7b:95:
         df:81:aa:5b:ca:1d:09:72:14:4c:93:ee:1a:37:bc:04:2b:f8:
         bd:1b:ac:23:80:32:04:77:55:c0:ed:14:83:dd:8b:07:a8:1b:
         2d:7c:79:d8:57:92:ee:73:65:99:5e:2f:36:06:1e:ca:67:69:
         2f:eb:83:cd:7a:31:32:18:e8:4b:2c:e5:f7:47:d4:71:20:55:
         15:a9:8b:46:37:36:c3:26:43:e8:54:8c:61:60:11:d6:27:51:
         1a:29:b0:14:a3:42:6b:eb:71:24:0f:bd:1f:f1:1d:2d:6e:67:
         e8:91:0e:26:5a:4a:a0:cb:d9:94:9e:73:b9:ac:05:b3:a3:e9:
         0d:80:8f:67:bf:70:20:2f:41:22:3b:d3:cb:cb:8b:5a:54:36:
         f2:68:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----