Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
File:                     ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft (raw, json)
Hash identifier:          DswercVasQrB5mpyWEIrgEeuJL531yim8ImDJuZTjlI=
Subject key identifier:   99:D3:29:10:73:60:FA:49:FC:9F:6D:96:30:34:5A:87:58:6B:8B:A6
Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Certificate issuer:       /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Certificate serial:       01962FAB2013F15A81B4A78EF264F654AD9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: PiesOXOJWPwXLYJ2cHTuySunyKs.roa (hash: 4Awv2N2IL2lFOspDb44o4wESpUNC6/dxhK+k94xsPOI=)
                          2: ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl (hash: iB8sVgnsyL+t5LPjGWHXzX6DndNioLcJqASyfvzyLOk=)
                          3: vH0ybQg-4MOg1JIP_NGzzKPVW0A.roa (hash: 33oKapmHx4XlPITzHeNgxD+FtYRNK19YTryf0BIZJ+Y=)
                          4: wjWLj_FDNoLKRo-jWXxTwFjan7M.roa (hash: ztSdcajVdWIcA2EPHQCjpwBh341/H4c/xdNmghfKI0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:20:13:f1:5a:81:b4:a7:8e:f2:64:f6:54:ad:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=99d329107360fa49fc9f6d9630345a87586b8ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4e:e8:f3:ba:41:50:b9:18:03:17:fa:89:34:
                    21:2e:eb:14:49:0c:b6:fd:dc:89:4e:5e:69:89:63:
                    e6:c4:96:72:f6:63:65:f2:ef:12:49:bb:71:5c:ac:
                    c3:4e:8c:89:f1:1b:a3:5a:c8:12:ed:0e:7b:13:ac:
                    15:bd:b0:1e:77:1b:d0:23:f1:a8:00:e8:0c:18:9b:
                    87:7e:56:ec:ff:32:91:43:5a:15:82:65:0c:df:2e:
                    ec:92:67:48:44:ae:b8:45:f2:a9:7f:8a:35:cb:75:
                    c1:d1:5a:a1:66:10:31:2b:6d:b6:63:12:5e:d7:da:
                    57:d1:17:13:df:dc:26:41:4a:8e:57:a3:19:5d:66:
                    61:42:a7:1b:fa:a7:28:bc:e1:f3:a4:e8:79:b6:31:
                    41:c6:a0:d0:26:a7:7d:86:c7:8d:b2:ec:81:67:40:
                    89:d2:c6:91:54:69:58:55:67:c4:46:c3:e4:9d:4f:
                    d9:0a:7f:a4:55:a3:4f:72:65:61:3c:12:22:31:98:
                    11:9c:3f:b0:d6:4e:d4:ed:d8:df:26:5c:58:7a:ac:
                    08:7d:d7:97:1b:ef:46:ad:05:d6:13:f1:75:ca:98:
                    72:ff:ed:3f:37:f9:be:e7:d0:f2:e9:cc:02:a7:a6:
                    a8:fd:51:d1:bc:3f:93:5d:61:23:01:b2:16:fe:60:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D3:29:10:73:60:FA:49:FC:9F:6D:96:30:34:5A:87:58:6B:8B:A6
            X509v3 Authority Key Identifier:
                keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:34:31:4a:c0:29:21:fe:29:d4:39:6b:0d:96:e0:3e:94:10:
         70:b4:00:7d:73:f0:73:79:72:86:9b:51:e7:1a:1a:ea:a0:0f:
         4c:7c:e4:71:d0:f7:ef:ab:60:5e:db:11:e2:57:eb:97:56:d8:
         9c:1b:c1:f5:63:b3:ee:a4:c3:9a:7b:34:44:93:1c:fe:0f:78:
         65:52:a5:bb:68:89:de:77:96:93:24:b6:00:aa:56:7b:74:36:
         9b:c8:b9:b1:ad:1b:73:85:7c:52:d2:8a:82:b4:3c:f3:12:89:
         3c:5f:19:b3:47:47:d6:21:a3:d7:66:e2:3e:e6:1b:51:5d:3e:
         df:57:70:37:4b:55:91:46:f1:2b:ca:67:5f:d2:9b:54:55:8b:
         20:6f:9f:bd:9a:a2:0c:8e:eb:98:70:38:a7:df:1c:99:55:45:
         e0:7d:cd:11:a2:63:a9:46:09:3e:dc:74:3b:66:c2:97:10:bf:
         62:39:cf:58:b0:65:c5:9b:9d:c9:a5:1e:b8:b6:95:43:d9:0f:
         68:63:6d:7f:32:bc:50:c6:c5:54:ed:09:32:23:f9:06:2a:8d:
         c5:5a:d2:c5:47:cb:d1:32:bf:37:00:1f:52:9e:49:ef:2d:92:
         16:fe:0c:9c:59:3a:ce:c6:2a:25:20:98:3d:83:5f:21:59:a1:
         4c:e3:ba:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----