Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File:                     EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier:          19QZzD4ne4YRUc4IKBcZmRivbjl1gk/2PWNOEdXEJUI=
Subject key identifier:   A2:5C:CA:B3:44:13:73:60:28:2A:ED:0B:54:D2:B9:97:2F:F9:DD:14
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer:       /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial:       01962FAB374C90EDE92A479E4F4A8E2DCAE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: 4NAyg2EUqU9fYkSEjcNKFQmZk2e/dW/dTJfbt0JAV40=)
                          2: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (hash: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:37:4c:90:ed:e9:2a:47:9e:4f:4a:8e:2d:ca:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=a25ccab344137360282aed0b54d2b9972ff9dd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:02:d0:12:53:4c:a3:cd:7d:55:39:2c:8e:a5:
                    4a:35:c6:5a:e5:73:2d:c0:a3:7c:ee:2f:a4:14:0b:
                    da:a1:72:9c:32:2e:a7:c4:e4:65:04:1d:61:8f:5c:
                    db:23:6e:8e:54:34:21:ff:7f:6f:26:cc:6d:64:d9:
                    1a:3c:11:21:ac:f3:4a:ac:df:21:b8:b1:90:0c:3e:
                    96:db:75:d6:c1:60:b7:bb:f5:a6:23:d3:ab:84:7a:
                    b4:96:28:6b:79:03:49:0c:47:7d:64:c8:21:2b:2f:
                    d6:ab:0d:a5:f5:c3:5b:a1:8c:d1:25:06:3a:1e:13:
                    93:3f:83:77:34:a3:51:63:f6:64:f6:4b:6b:5f:0f:
                    38:b9:dc:fc:ce:a3:86:fe:94:80:5d:fb:08:8c:ac:
                    70:bb:6c:fd:35:9c:93:69:a4:ef:b1:42:22:a6:e8:
                    89:51:3b:79:12:59:fe:a8:f9:ee:29:99:da:18:51:
                    bf:38:02:5d:c2:a5:9a:d5:49:05:f4:d8:94:11:8d:
                    39:69:f4:51:35:9d:e5:97:25:b7:c7:04:0b:42:61:
                    4c:f1:5d:27:8d:13:84:fd:b1:2f:a1:3f:70:0d:37:
                    b4:13:dd:3a:cc:d7:c6:bc:7a:9d:63:f0:b4:1b:b4:
                    46:5e:b1:6b:f6:d8:b9:cb:8a:45:7b:84:93:e6:6f:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5C:CA:B3:44:13:73:60:28:2A:ED:0B:54:D2:B9:97:2F:F9:DD:14
            X509v3 Authority Key Identifier:
                keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1b:87:d8:55:36:c9:f8:66:eb:5e:e5:92:44:9c:12:84:39:
         67:f9:20:90:24:28:c8:aa:c4:74:ec:0f:58:af:c7:3c:fa:91:
         7e:e4:2c:7b:db:13:b2:39:5e:69:26:07:4f:37:47:4c:70:30:
         7d:3a:05:ee:11:cb:5d:89:2c:bd:80:2e:d1:5d:60:52:f9:e1:
         b3:65:58:7d:9a:e9:96:41:7d:e1:7d:0a:62:c7:d2:ee:a1:b2:
         f3:a7:6f:d9:91:12:e3:5e:49:b0:4e:6d:79:15:5c:3f:70:30:
         12:44:84:f1:7a:2a:b7:a4:f6:be:f2:0a:07:b8:fa:50:79:5e:
         c6:4f:dc:9d:87:c6:57:80:fc:ce:88:d1:96:f5:86:56:26:e8:
         7d:64:e2:2a:22:37:38:2e:89:75:1c:85:48:32:fc:7b:40:8c:
         49:d2:ef:05:a4:1f:e0:05:9d:e3:02:f2:29:8b:60:29:2c:51:
         ca:98:fd:8a:11:a3:44:7f:58:09:28:b4:ca:3e:ac:0b:72:11:
         19:e3:4f:26:1e:e0:a2:86:14:14:56:cb:6d:de:e9:62:40:92:
         84:c3:47:01:12:ce:b4:0b:fd:1c:0e:33:62:6f:05:76:4c:b9:
         2b:2f:76:39:14:46:45:82:23:4e:b2:10:b7:06:d5:43:94:8d:
         06:d5:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----