Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File:                     ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier:          VOWKDmnZgYe7pvGY9cE0J3roM1HdVSe8cQVTgEkhf9E=
Subject key identifier:   37:70:54:52:C4:A5:62:2C:A6:89:D0:47:C0:81:54:F4:C6:F5:D3:A2
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer:       /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial:       01962ECF4D55125527528F481BCC3C11BC51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 11:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 11:00:59 +0000
Files and hashes:         1: 2JjyX_-1ihqsSblonAIGQ2WI8zE.roa (hash: zFek1n9vUOT2IuGKFpGhKS8yEEOPqAUeFGqimhy7H3I=)
                          2: 2zv-bqUF4ie6dLoJOvbHg-Khzrk.roa (hash: SuQwzPeSaf/HqGV5aFne0AqsUIDLEGL4BEqdCUksZzA=)
                          3: 90IBFTm1n0EdouWYts1bm2C2AV0.roa (hash: ERgPNr6bXt5OGFwKPUno3LLiwFJjlAJ5vniWmV4rL9o=)
                          4: IPDWq2JXklmZilVzAW_qJFHve_M.roa (hash: 8qLID3yci9mCWiyOl1eMby2l1Aaax7OKoB39T8J6xu0=)
                          5: Qhk5DeOzxRoTsaRY5UPu50xo2Q4.roa (hash: SAnzykFF7+yaqNzuYwleeCNNDy8d940iOSnUgG5s+iM=)
                          6: Zu3SmHOhZpwuSSti9wdImp6Ga-Q.roa (hash: 5ZnrCuNHa1wjQpFfQY/Zj6DgGr5ywhEPGA9N3saHG2U=)
                          7: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: vYff7F1Qsdn6clCfem6cA0KU4Aie3jV4kOrnTt97Rr8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4d:55:12:55:27:52:8f:48:1b:cc:3c:11:bc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
        Validity
            Not Before: Apr 13 11:00:59 2025 GMT
            Not After : Apr 14 11:00:59 2025 GMT
        Subject: CN=37705452c4a5622ca689d047c08154f4c6f5d3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:92:b4:ab:a4:68:09:36:51:03:08:14:fa:
                    b8:31:1c:b1:3f:0c:c8:9e:06:31:30:9b:d7:19:ec:
                    be:b2:b2:b7:93:61:14:4c:60:51:f2:1a:23:4e:50:
                    1f:f7:c7:90:a5:9f:3c:b3:6d:32:ee:5c:cf:e6:7d:
                    aa:51:66:d1:74:ac:6d:29:c8:8b:ce:a9:83:cb:9d:
                    b2:bc:89:b7:ba:a1:71:d6:53:75:71:40:b0:9e:49:
                    5d:e9:89:26:54:8b:82:9a:c7:1a:e6:a5:ae:35:e9:
                    0f:dd:fa:07:76:f6:90:b3:2a:cc:17:40:f9:a1:e9:
                    07:0f:2e:e4:3b:0a:bf:fb:72:9d:8b:ac:a3:df:45:
                    17:eb:e3:ff:3f:2c:91:3e:88:b8:c9:07:32:f0:88:
                    af:02:22:fe:30:9b:eb:44:f3:59:c6:de:03:bd:bd:
                    d5:e5:06:8f:7d:78:79:02:ab:86:fb:e9:4d:a7:a4:
                    f7:39:5f:6b:20:5f:03:c0:b2:81:57:a5:22:f8:df:
                    6d:21:91:b0:f7:b6:55:48:b3:d3:5c:19:61:af:04:
                    bd:d1:5f:7f:9d:6d:df:ac:87:79:93:0d:93:8a:9b:
                    73:c4:ed:a0:45:58:09:17:bc:dc:d9:01:ff:36:6f:
                    30:fe:31:50:0f:e8:2a:29:d0:ee:a1:ad:51:43:b8:
                    d0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:70:54:52:C4:A5:62:2C:A6:89:D0:47:C0:81:54:F4:C6:F5:D3:A2
            X509v3 Authority Key Identifier:
                keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:31:55:e4:49:75:c1:0c:51:0a:0e:dc:1a:27:7a:d9:c9:e6:
         1a:5a:30:79:41:d5:44:84:1f:52:db:f1:63:10:fa:c6:06:9b:
         66:3a:ea:fa:51:50:2d:1a:7b:05:5b:b2:9d:56:a6:0f:24:9c:
         23:01:7d:b2:35:bb:cc:d4:b2:9f:bd:c1:ec:25:26:4e:b3:b1:
         94:79:8e:d3:a6:06:f3:70:70:e9:ae:40:cc:b1:5d:46:a0:3e:
         60:05:c1:ee:01:c7:f7:96:2d:35:8d:72:eb:60:6f:10:a3:25:
         1d:ee:f1:e9:08:67:15:b8:66:79:28:be:5f:5d:6a:0d:bb:7a:
         00:c1:62:08:8f:d3:cb:9a:fa:07:1f:84:d1:dc:6b:31:be:c2:
         3d:4f:c4:84:d6:ca:99:9a:29:e2:38:62:06:72:8c:12:2c:82:
         f5:87:a4:45:35:68:db:5d:08:fd:bd:b4:8c:68:be:d3:4b:82:
         dd:d2:5d:fb:78:82:a4:65:0e:4b:67:35:39:2b:ed:5c:31:24:
         3b:1a:c0:f0:ea:ef:19:b3:04:22:5c:48:25:e5:6e:84:31:36:
         a3:15:ca:00:d1:18:0e:8f:1a:dd:92:af:f9:ac:15:f4:e5:e3:
         87:04:d8:a2:4e:9e:df:c1:5c:25:d3:72:8c:ee:cd:71:84:4a:
         95:2d:3f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----