Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
File:                     eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft (raw, json)
Hash identifier:          2rxn49ZZu/fanwSM2/iYABX1c+qJVa2TMrVt5esYxfU=
Subject key identifier:   F6:77:78:C4:31:E1:C2:09:15:10:25:34:3D:00:13:59:B0:17:C5:72
Authority key identifier: 7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A
Certificate issuer:       /CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a
Certificate serial:       01962F3D916B2E32F4D4406960A365EF4DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl (hash: /v8ApPW6IRrQFALT84Cyfu6SpI6AvwbqjZ2akRlq1lI=)
                          2: stNJNaGeal-FHwEwjC3WB-1Iv34.roa (hash: qGHFbDJPeE85BxBcD0txqzFvtVR+ui4dTz0qswD2vsw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:91:6b:2e:32:f4:d4:40:69:60:a3:65:ef:4d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=f67778c431e1c209151025343d001359b017c572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7f:51:2d:45:87:3b:00:1d:80:4d:94:5e:05:
                    a2:0b:e4:97:1a:69:ca:7a:bd:70:e3:d4:b4:da:6b:
                    25:df:5a:ce:2c:7d:ac:b5:d1:a0:b9:e2:e4:a4:1f:
                    de:0b:53:7d:d1:3e:9a:9f:51:33:ea:9b:d8:17:8e:
                    54:56:4b:1f:f3:08:37:90:4d:43:ea:1d:58:ec:0d:
                    96:65:b0:11:f0:3f:3e:09:17:c2:ea:02:2f:a0:8f:
                    e8:e9:43:44:10:de:9b:79:2d:e7:27:45:2c:1c:f2:
                    c3:ef:cc:bd:36:38:14:12:8d:15:1b:e1:c5:4b:a0:
                    3e:1e:92:c0:49:03:27:a6:03:ed:2c:28:97:ba:f3:
                    77:8f:1f:26:f1:dc:f3:30:eb:31:87:17:19:aa:17:
                    0c:c9:1e:83:a8:05:43:dd:32:e1:5c:0e:d1:e5:df:
                    df:59:cb:58:34:7c:dd:61:a9:3d:02:f5:30:5e:7e:
                    3c:59:7d:dd:53:38:24:26:a2:ed:62:2f:38:8c:87:
                    7e:0c:9c:4e:d4:a3:9a:7d:f0:87:86:f8:03:83:4a:
                    0d:cd:a8:7c:0c:b0:8f:76:c4:f7:d1:7e:f6:a5:cc:
                    89:84:f4:5a:1c:43:07:f8:97:95:f1:16:54:14:5a:
                    88:f8:6d:fc:b6:dd:d3:c5:66:17:44:7d:4e:51:ff:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:77:78:C4:31:E1:C2:09:15:10:25:34:3D:00:13:59:B0:17:C5:72
            X509v3 Authority Key Identifier:
                keyid:7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:83:d2:23:5a:6c:3d:4c:cd:a3:1d:fe:5c:5e:2a:b7:7e:c7:
         c1:eb:2d:fb:02:a2:c6:c6:ea:8f:20:a0:46:84:43:93:29:1d:
         99:1c:b0:f2:a5:72:f0:04:69:fc:1b:c1:03:9e:ec:ca:01:a8:
         9f:ee:c9:51:09:cb:5f:5f:81:ec:94:d7:bb:ba:2a:32:25:b7:
         68:0c:7c:a6:af:f4:66:ce:47:47:99:0a:f2:c5:4f:85:55:4e:
         b8:53:08:dd:1d:03:eb:4f:b9:ad:cf:e5:fd:e2:18:b2:12:4a:
         0c:47:2c:77:82:2d:76:16:63:3c:22:0a:fa:96:76:32:ff:ee:
         2a:b0:5c:fe:c4:a5:ff:84:04:62:50:88:50:d8:a8:29:ac:08:
         9e:91:dc:dd:0a:e7:30:0c:71:a5:13:b9:a1:1d:69:a6:fc:16:
         4e:4b:74:3c:fc:9c:c0:1f:83:7c:02:ac:c2:bb:dc:dc:1d:e0:
         9e:8a:39:25:9f:a5:11:3c:42:9f:d2:6f:2e:8d:06:90:7f:d8:
         90:ed:88:09:99:c5:dc:27:97:9e:44:62:e9:d0:bf:13:04:11:
         a2:fb:ef:fe:ee:f3:3c:8c:6a:73:a2:0c:06:9d:da:c1:72:66:
         ca:0f:8f:1e:48:66:ab:d0:3d:15:7f:de:49:48:35:fd:ec:eb:
         fa:b5:89:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----