Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File:                     eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier:          pAJAbsgUSms1WtZ2VO+SuYfwLhqjd8W+bGR3O24xSik=
Subject key identifier:   74:19:D1:19:C2:ED:2D:EB:E4:91:E9:AE:66:30:5A:37:3D:0B:7B:65
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer:       /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial:       01962F748BFCE493EEB5177B7FE0F169919A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
                          2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: wAKB8uVXTM3qFCdL/4s8878gqpMXbCOyOQZIqi3AR4o=)
                          3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8b:fc:e4:93:ee:b5:17:7b:7f:e0:f1:69:91:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=7419d119c2ed2debe491e9ae66305a373d0b7b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:bd:b4:0a:00:82:d7:d3:5c:0a:fc:c2:99:
                    60:c0:dd:67:3f:f5:d1:b2:54:ea:8b:16:25:01:20:
                    ca:18:4f:a0:3e:17:86:93:3e:7e:04:37:9a:b9:d8:
                    ce:8d:86:fe:f7:42:f1:38:6e:6e:a8:6e:75:5c:76:
                    1d:9d:e5:55:8c:4c:98:fe:10:08:45:bf:13:7f:01:
                    77:d6:44:b6:89:d1:b1:71:a3:f0:40:0f:d1:47:b9:
                    fb:e2:dd:81:12:e5:cb:9b:e5:0b:29:c5:09:bf:24:
                    b9:87:94:9f:1e:a7:9a:dd:8e:7c:c0:2d:de:37:b3:
                    9a:8b:d4:da:5c:45:ad:a8:df:b1:de:8c:5c:ed:0d:
                    2e:1f:11:f9:59:d5:57:7a:92:a0:da:ab:4d:c8:3c:
                    10:90:a5:70:df:b6:e7:ca:96:39:1e:88:5b:2e:b6:
                    f6:eb:dc:ea:05:fb:29:65:0f:38:7f:84:06:69:a0:
                    fb:66:b8:36:bd:23:39:16:d1:43:ec:c7:f0:7d:47:
                    60:8a:44:7e:17:84:4b:80:d6:68:25:dd:13:a7:cb:
                    8e:a4:b8:32:0d:74:69:c1:e2:f8:1e:ab:50:08:70:
                    ef:de:82:66:54:dd:30:8a:1f:4a:86:53:47:a1:d3:
                    7a:54:b7:0d:b4:d1:6e:97:6a:bd:83:7a:ab:5a:f6:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:19:D1:19:C2:ED:2D:EB:E4:91:E9:AE:66:30:5A:37:3D:0B:7B:65
            X509v3 Authority Key Identifier:
                keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:68:9b:44:59:60:58:41:af:23:28:3f:08:c0:0a:f8:4a:d4:
         3b:f3:53:fa:04:73:73:cc:3e:8e:eb:03:f2:ac:d0:14:0a:9f:
         d9:37:dc:0a:41:01:32:fe:c0:b5:f6:24:66:95:69:38:8e:11:
         96:09:4f:92:e8:e7:f2:91:0c:4a:46:5a:a1:17:b3:61:8c:69:
         9c:dd:4f:95:47:00:3c:02:ca:34:f4:83:73:f6:0a:5a:6e:39:
         72:aa:38:6f:c2:a8:f3:24:8c:b3:da:d7:42:21:11:27:f3:33:
         d3:c8:14:4b:c7:a0:68:a2:b2:82:56:cb:52:51:08:67:9e:19:
         87:38:7a:4c:ff:fd:e0:b8:b8:e3:e9:74:dd:97:b0:d8:e6:0d:
         9d:76:45:8b:af:38:fa:cc:20:3e:37:5d:89:08:0c:74:cd:b4:
         c3:21:96:fc:bf:47:2b:4c:a3:f7:6f:39:dc:9b:51:4e:88:7d:
         1d:07:a7:d4:3e:ce:c4:4d:0f:43:d5:71:2f:a2:a8:ff:89:45:
         dc:79:1c:7a:63:25:e4:b9:2b:f0:62:2f:85:16:9f:83:60:c8:
         a0:51:dc:14:72:48:0b:bb:3b:85:88:53:de:f6:e6:36:7e:ff:
         6a:11:ff:17:53:0b:6c:6c:86:82:08:c5:b5:6c:03:6c:7e:e6:
         26:98:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----