Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
File:                     7eApTRMFvrr2iUZCv9kv1DmCUQI.mft (raw, json)
Hash identifier:          pV5g0VmV+Z6+FakYAfmLNHxTyM3clHiTEIUogZCP3f8=
Subject key identifier:   B5:C9:D4:51:17:B0:E6:DD:A8:DD:4D:95:0D:6E:EF:0B:E8:ED:E6:3E
Authority key identifier: ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
Certificate issuer:       /CN=ede0294d1305bebaf6894642bfd92fd439825102
Certificate serial:       01962ECFF9BA8011F1F84E4FCCBABD431483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:43 +0000
Files and hashes:         1: 7eApTRMFvrr2iUZCv9kv1DmCUQI.crl (hash: hQftUUIOAP9ADmzKrWTNyjS6tl0sGyZwDsykI1DYbOM=)
                          2: bJ4sh6U6AWn89GmwoeAcocafgE4.roa (hash: Y+U7WWWf4hP7E6R51Ww3VT3Vt2JWiwOghZ095dPcPh8=)
                          3: fNvy3r37_4b6LefWjRGgK8SlrUI.roa (hash: 6A8ADFg9pRpZbe6Cwd0Rb5jshUxYYaxV6Jo4EFTgMJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:f9:ba:80:11:f1:f8:4e:4f:cc:ba:bd:43:14:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede0294d1305bebaf6894642bfd92fd439825102
        Validity
            Not Before: Apr 13 11:01:43 2025 GMT
            Not After : Apr 14 11:01:43 2025 GMT
        Subject: CN=b5c9d45117b0e6dda8dd4d950d6eef0be8ede63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:17:a5:f4:ad:ba:dd:18:18:d0:fc:74:ca:
                    6b:0e:e2:3f:d2:a4:1a:2e:fc:d5:dd:4c:84:a4:e6:
                    ad:ce:f1:57:f1:4d:97:7b:fb:52:7f:d4:cd:d2:bc:
                    23:5b:78:c1:19:2a:3a:0d:ba:f1:5b:3b:e9:93:cd:
                    19:f9:5d:b3:e1:69:92:5a:29:4e:24:34:bc:24:23:
                    19:e1:53:a3:c5:36:a6:3f:76:24:27:8e:39:82:5b:
                    84:4b:39:c8:42:c5:65:4c:71:53:cf:be:0d:b6:28:
                    ca:89:f0:ec:b0:2f:f5:8f:b0:45:d5:e3:af:e7:33:
                    ed:19:0e:de:0d:77:c0:9e:b2:49:27:ac:96:ff:3c:
                    54:32:06:9a:5e:f2:b0:19:2b:bd:5a:36:38:e4:13:
                    6c:cd:b0:17:33:82:74:00:e9:ce:a9:ee:c0:ca:67:
                    88:a0:4c:c5:e4:6e:2c:6d:c8:75:ce:e2:1c:3c:5a:
                    34:23:ae:dd:49:c2:23:0c:a3:2c:f5:a6:26:4e:2d:
                    5f:dc:ad:e8:c9:76:9d:de:bc:1e:dd:91:49:a6:ac:
                    b4:33:7f:f5:35:e7:0c:2c:a7:06:a4:34:c7:e2:8f:
                    89:c3:dd:f4:44:ae:4f:0d:5f:2a:ae:81:2f:42:87:
                    28:3a:4d:6a:fd:8d:4f:6c:96:11:46:8f:8a:58:12:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C9:D4:51:17:B0:E6:DD:A8:DD:4D:95:0D:6E:EF:0B:E8:ED:E6:3E
            X509v3 Authority Key Identifier:
                keyid:ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4b:c6:75:c4:89:10:4a:f0:47:2e:da:8a:de:b1:3f:39:61:
         e1:a7:9a:34:7d:1d:f9:a2:b8:a7:87:93:5a:ba:b6:2e:3c:7a:
         dd:48:96:f0:30:23:28:7d:e2:db:aa:5e:da:55:84:e3:5a:a6:
         02:20:25:dc:89:9f:7b:69:e3:1a:8b:64:15:58:5f:25:9d:0b:
         ba:97:b3:f3:67:f4:65:0b:d0:3d:c6:1b:b4:9e:58:7f:60:a1:
         53:f6:ab:49:e7:74:2b:e7:d6:cf:12:3d:f2:b2:23:9f:24:29:
         a3:a4:93:67:8f:2e:4d:60:d9:7f:db:ab:66:30:0c:92:ba:3e:
         77:8c:18:34:66:e7:5e:d6:1c:ef:fb:38:59:e9:84:b8:b3:ec:
         3e:f2:16:43:8f:91:fe:5a:cd:5e:0b:7b:8e:b6:0e:bd:70:05:
         e1:86:71:22:5b:5d:ae:dd:89:d4:37:29:0a:a6:ce:f6:36:99:
         4c:98:0a:99:a7:4d:88:29:53:ca:e6:13:4c:ce:8a:6f:b2:57:
         ea:bf:89:e7:43:c9:28:95:72:b3:ec:17:11:cd:92:fe:e9:a5:
         21:bb:36:2f:08:2f:9c:ed:d4:51:99:a7:dc:97:d8:23:3b:be:
         58:c4:ac:07:18:06:cc:e4:91:8b:c4:aa:63:16:35:d0:34:4a:
         02:69:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----