Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
File:                     ejvLQKHIyPn3WNzeHCkHk42GhS8.mft (raw, json)
Hash identifier:          +XrKjtJs/daBUAzEkm+s7rUziSv2wrFph76QCuIbkHk=
Subject key identifier:   23:40:70:A3:4A:07:AA:A3:06:3E:93:8B:6B:5F:86:B9:14:57:DB:FE
Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
Certificate issuer:       /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Certificate serial:       01962FAB1CF7E54AE9409E8DF0BB440BF1E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
Manifest number:          0702
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: ejvLQKHIyPn3WNzeHCkHk42GhS8.crl (hash: eZevCYWRkPATcT/lVfYR5rI4E5E2IBvNwkWeUtFsqNo=)
                          2: npO31UQ6MgQb_KXFRuB5cseCGq0.roa (hash: g4JN4BNjztb4rOd5YFRTGak1PKL3E9KOaxMHM6ZlfJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1c:f7:e5:4a:e9:40:9e:8d:f0:bb:44:0b:f1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=234070a34a07aaa3063e938b6b5f86b91457dbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:05:3d:5e:ad:95:d2:6b:ac:7c:cb:bf:4a:
                    8f:2f:a8:d6:9e:24:f0:00:be:2d:63:2c:de:9e:c5:
                    69:7d:41:1e:28:ac:95:30:78:97:3f:02:72:8e:7b:
                    dc:d0:92:66:ec:21:d3:ef:ce:5e:84:ce:e8:0a:59:
                    33:49:bb:c9:d4:4e:a1:96:27:c0:37:77:8e:4b:05:
                    c2:2b:2d:95:7b:5a:36:4d:25:07:32:44:1d:e7:83:
                    0a:10:01:34:1e:69:35:4e:a6:f5:75:f1:ca:11:8c:
                    50:66:6b:98:c3:d4:25:82:e2:e3:c3:c3:39:e7:d9:
                    c0:80:06:14:96:68:ce:7d:f3:a8:3b:28:ee:60:65:
                    01:e7:0b:84:46:09:1f:e0:59:52:96:c1:cd:cc:89:
                    71:e3:41:94:b8:79:b7:25:28:57:fa:dd:56:60:3a:
                    a2:26:16:16:a3:87:1c:f8:1c:78:77:35:cd:dd:95:
                    86:29:11:6c:7a:e3:7c:8b:35:45:71:66:58:c9:5d:
                    bd:8d:e8:8c:41:5d:35:9d:54:9a:64:03:9f:fd:91:
                    19:20:2c:26:d7:98:09:5f:dd:d1:53:de:03:14:21:
                    09:1f:9c:80:36:dd:a4:f1:b0:49:ee:78:0b:c2:6e:
                    a5:c2:cd:54:ef:45:8c:d2:37:74:fa:fc:dd:a8:13:
                    c6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:40:70:A3:4A:07:AA:A3:06:3E:93:8B:6B:5F:86:B9:14:57:DB:FE
            X509v3 Authority Key Identifier:
                keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:4a:d3:11:16:98:23:ed:e6:dd:ce:08:2b:65:a4:92:28:
         aa:b2:54:29:c8:dc:12:1d:f6:cf:7b:f1:98:fb:f5:a5:da:fa:
         8a:2f:90:51:f4:67:ba:4a:68:dc:ea:b7:65:8a:93:2e:ce:65:
         3f:14:a7:a2:fc:3e:b4:d5:a9:01:96:ad:61:f1:22:01:52:cc:
         d7:65:25:a8:84:dc:0f:40:cd:f4:19:e0:51:0e:40:04:63:3f:
         28:51:d4:be:b0:e0:f7:01:03:21:f7:6d:11:20:a2:f2:bd:87:
         3c:36:f4:f2:2f:00:79:ec:b7:d5:bd:08:8f:b8:21:11:cb:0c:
         45:b9:c0:90:01:ca:55:c9:8b:07:96:0d:3d:fd:4a:43:06:87:
         4a:f2:61:3b:50:f7:b1:0e:4c:09:a7:a1:55:d2:3b:7f:b6:e4:
         e3:5e:bf:0b:10:0d:4a:93:5c:17:a8:ce:01:f4:82:33:2b:86:
         75:7e:d7:9f:8d:94:3b:91:19:db:5c:45:58:42:d6:68:57:26:
         bd:0b:b6:a8:27:68:a6:70:b7:02:11:1d:3b:71:ab:62:c1:2f:
         12:76:5f:21:9e:41:8f:cd:cf:fb:03:17:dc:5f:64:16:0e:16:
         a2:5d:ab:18:71:1e:69:84:c6:ed:dc:cd:d6:7f:64:77:32:85:
         ee:56:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----