Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
File:                     Ejw95hAR3gcQHhTcByc5UXHLA6s.mft (raw, json)
Hash identifier:          z5ZOR4R+V0FL5Kqq1+vrEZlUBBqRsTR4wT981OyY+bo=
Subject key identifier:   EC:C7:E6:8E:1B:95:1A:1A:29:2E:5C:1C:A0:88:BC:4E:DD:D5:D4:4B
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Certificate issuer:       /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial:       01962FAB66E0A5D1C8FBD0BD0F2E1944976A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
Manifest number:          14FE
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: 9e1MUKXIxCIaICqEHe7UTJr8ShE.roa (hash: Btfq5eeDOydIVpZWwotHSouKFShIpZvMwrVNuJGrwJc=)
                          2: Ejw95hAR3gcQHhTcByc5UXHLA6s.crl (hash: 9eDzxdvaPcYw9EHMhsEKEUme2z+nVECUhb9Zu+gquLs=)
                          3: dWFWxAJC3wGlL2EpvGP_MKq469s.roa (hash: MSVcXPatvWpeCXQNpTDNs6InxOOtn9VjdMvIEuKDIVc=)
                          4: dYeZ86Q9eOrX3ruoGqBQbil94fE.roa (hash: ixCQNkESLSOkCqLCMko70j+9MueRd2ujeMGI9hRjox0=)
                          5: lMvd5SqBL_Or0jhVPY7oWSF4yuw.roa (hash: Z0xuaYoH87JP2hkLQ1lEz86Qpg9FfEJCXmemb0LqJF8=)
                          6: mWwZIZi_bVc1h908CjAKkL5Od18.roa (hash: 61r7bPQMg9kj6M2m+bl2SoqT9NucemfdfUzk79Tyxy0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:66:e0:a5:d1:c8:fb:d0:bd:0f:2e:19:44:97:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=ecc7e68e1b951a1a292e5c1ca088bc4eddd5d44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:f3:b8:3e:55:e7:14:61:4c:88:8e:7d:7b:
                    e4:33:3e:c8:f4:3d:b6:56:f9:79:3f:54:cb:9f:e7:
                    04:c1:ff:4a:69:25:8a:a6:ee:1b:bb:d0:92:08:51:
                    fd:e5:a1:f0:54:09:b4:0a:e4:58:04:1a:b1:b2:4c:
                    3f:37:a7:7f:99:20:3c:ae:b8:37:97:55:77:14:b5:
                    97:86:36:dd:58:e0:1c:3d:2f:c0:8a:ac:97:9c:d4:
                    76:88:58:6e:86:e8:15:6a:42:5c:b4:ba:6f:06:78:
                    a3:98:cc:2c:33:c0:8f:52:6c:d5:68:ba:17:ba:3f:
                    9b:b5:12:7e:2d:f9:a3:a3:d3:89:70:53:c1:5a:64:
                    2e:68:54:06:98:40:5e:47:d6:38:40:8d:33:d9:29:
                    ea:8c:95:96:0a:87:5e:88:a2:22:98:02:7a:df:20:
                    a9:ee:15:73:dd:3f:18:4c:56:b0:b7:01:11:7e:1d:
                    44:a3:cb:82:58:8d:a2:2e:7e:7e:5e:54:be:77:cf:
                    c1:44:07:5d:64:9d:ab:51:12:b6:b1:b9:5d:1e:06:
                    19:6c:1c:e2:10:4c:e1:5e:35:b0:8e:4b:3e:ff:fb:
                    50:8c:53:be:3d:b3:0a:76:46:a3:93:fe:dc:b3:7e:
                    9a:fe:bc:20:59:af:44:8b:ca:1b:b8:78:f2:10:7b:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C7:E6:8E:1B:95:1A:1A:29:2E:5C:1C:A0:88:BC:4E:DD:D5:D4:4B
            X509v3 Authority Key Identifier:
                keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:ce:be:f8:a2:e7:2e:a5:5f:40:cb:42:bf:e0:0f:98:2c:04:
         c8:3f:11:9b:56:b5:ed:da:d5:2b:c3:20:2d:99:95:ac:9a:ef:
         27:23:dc:22:27:84:49:71:8b:60:8b:18:c3:e7:7d:61:62:c3:
         cd:ea:7f:a7:c0:3a:99:b6:04:7f:79:55:be:93:a4:d1:63:c0:
         78:fc:ef:a6:c2:d4:2f:f1:78:28:54:f5:2f:e7:59:34:63:fe:
         a0:21:a2:09:5d:79:70:c0:36:fa:fe:61:fc:8d:3a:57:2f:c5:
         9a:f5:c0:3a:92:c4:ba:2a:2e:16:25:4f:28:36:88:05:94:73:
         2f:0c:cc:c9:a6:3a:db:1a:77:37:54:d5:31:64:6c:fd:b5:8f:
         40:42:e7:aa:b5:8f:3c:54:25:e8:42:03:8a:b4:0c:d1:12:92:
         35:32:3d:86:54:7e:7e:cb:ac:e6:a9:a1:e1:c0:09:7c:ce:a4:
         96:29:32:0e:a7:fe:41:b2:63:05:e4:bd:6a:c2:2f:fc:95:2b:
         b6:26:c5:5a:9b:4b:95:16:8e:27:58:7c:ae:95:03:4d:b5:ea:
         67:ce:f0:d6:25:9e:b3:99:de:f7:a4:c3:e0:11:8e:d1:a1:1f:
         1a:bb:d9:97:4c:41:2d:a5:2a:4f:ab:76:87:df:42:5a:88:d5:
         b2:9f:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----