Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File:                     E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier:          Z7bUtR2na9cvtorJWGi12ukDlRKsbuAkYBIsRq5adf0=
Subject key identifier:   BA:9A:A6:45:43:71:25:1F:D3:21:43:A1:D5:2C:F9:90:97:50:9E:34
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer:       /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial:       01962E99335E3108D3A9C124AEBA8A41DB64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number:          121D
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: S4Im79YzhLnst+l4B+aPnxxPL1W7SF3JO4XFLFiHtiY=)
                          2: jr4b-Rf0xfPafQWq2uvd9nWvLEg.roa (hash: Xv/PqNN2xhkW4QGTc+jzafFg6jr4IL/yGvEj1fBOV08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:33:5e:31:08:d3:a9:c1:24:ae:ba:8a:41:db:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=ba9aa6454371251fd32143a1d52cf99097509e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:7a:01:6e:b5:1d:f5:d0:18:ed:ae:90:4e:
                    a7:b5:3d:37:da:90:5d:2c:22:7e:b7:b3:d8:c6:59:
                    d7:c0:64:d6:fe:8d:17:19:92:6b:ea:25:ad:3c:b9:
                    1f:1a:02:1a:89:95:86:81:1b:dd:67:01:bd:fc:6e:
                    15:4d:4d:e1:ee:fd:de:5c:c7:92:46:ed:c9:33:4c:
                    28:1f:ab:1b:08:bb:af:1d:24:90:1e:da:5d:5a:c4:
                    4b:81:af:7a:f9:fe:95:98:0d:f4:13:dc:56:07:3a:
                    f6:68:a7:75:1a:7d:34:1a:d1:56:68:ba:b9:4d:9e:
                    11:d3:b4:7e:93:55:2a:79:da:1e:36:d4:02:55:ac:
                    cd:8c:66:97:a0:c1:f7:79:ca:d9:a8:ff:14:94:bc:
                    20:43:be:3f:98:d9:81:26:31:e7:cd:ed:d6:ac:dd:
                    74:20:47:ea:36:5d:bf:5d:49:b3:5e:a9:53:e0:06:
                    ab:52:20:51:3d:6f:65:c3:96:3e:28:94:50:ab:59:
                    18:10:84:45:d6:1d:57:a8:c9:44:67:fa:54:3d:30:
                    b5:25:8f:f7:c3:4d:91:b3:81:75:84:fd:e0:60:58:
                    e3:ed:e4:91:1b:f8:c9:70:30:0a:a2:17:39:00:41:
                    65:56:97:80:ea:61:45:a9:33:d0:ed:e9:da:28:6d:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9A:A6:45:43:71:25:1F:D3:21:43:A1:D5:2C:F9:90:97:50:9E:34
            X509v3 Authority Key Identifier:
                keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:19:3a:53:bc:42:e1:fb:29:63:9c:e4:16:cc:2e:f8:5f:5c:
         7d:71:7d:43:b7:0c:2d:47:49:b9:58:df:98:51:85:c0:12:7d:
         ff:a5:04:2a:29:60:cd:48:0b:d4:c2:3a:06:d1:01:12:de:c3:
         95:dd:ae:f5:da:cd:d2:68:97:2f:9e:74:2a:52:c1:28:9a:e0:
         11:03:91:53:7c:a9:d3:de:d9:ca:90:45:ee:c3:3b:89:fd:51:
         ea:05:16:84:9e:1e:a4:df:3f:c2:66:cf:f7:f4:78:fd:06:d2:
         41:43:1d:00:f4:c2:3f:92:94:27:b1:61:10:6c:e6:b1:f8:31:
         c7:9c:98:6b:bb:77:35:cd:57:e2:a0:da:b1:8a:fb:50:6a:21:
         5d:25:c2:81:b7:a6:95:d2:4e:5b:a4:dc:db:46:1b:d4:66:98:
         fc:0e:8b:3b:58:5d:1c:59:90:ab:fb:d7:67:29:56:6f:4d:54:
         40:17:12:49:a7:5a:8a:13:54:1f:77:45:61:50:fa:21:ab:78:
         47:65:3d:57:9e:69:25:b6:f3:71:c4:0a:b9:4f:7b:8f:d4:f1:
         9d:a2:80:bd:eb:40:ec:56:41:bd:64:db:62:68:4a:f9:59:90:
         f1:92:75:ff:fe:9b:ef:cc:e3:7b:59:f4:1e:4c:35:a2:32:2f:
         63:08:75:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----