Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
File:                     e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft (raw, json)
Hash identifier:          Px1wzxwoUKY0MDK4Hwegt5lTDPIZTkihpznzE0qSOGI=
Subject key identifier:   B2:C0:E2:DA:F6:53:94:BB:3F:77:61:51:1D:19:D2:EB:07:EF:28:C3
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Certificate issuer:       /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial:       01962F745C1E97CE9F624CC793C4D960CE21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: UnCcsT72IxAT_A7pPL3SizxwgN4.roa (hash: c7dhvZVWkHenODhaz4yGW2E9vwoS+Yy4F3XRITR7veQ=)
                          2: e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl (hash: SEiCmzrQy1I7h+y+xgAtxF9uhZ7n3UAO5VAIQZUCto4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5c:1e:97:ce:9f:62:4c:c7:93:c4:d9:60:ce:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=b2c0e2daf65394bb3f7761511d19d2eb07ef28c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:29:6a:1c:6c:d5:9d:d3:77:b3:2d:f9:51:
                    74:99:73:c8:c0:16:71:60:1a:a6:07:ef:9c:80:5d:
                    84:5b:19:92:ba:ba:54:af:6b:5d:00:eb:d2:98:17:
                    26:34:ad:be:4e:b0:fa:70:36:e8:19:8a:f5:eb:28:
                    1a:a2:06:e8:2e:28:53:7e:64:61:88:b6:df:48:b2:
                    5e:1b:1e:48:66:5b:1a:ac:df:7d:e4:06:a8:78:e0:
                    a7:26:ec:da:c6:44:94:2f:f9:8d:ae:ee:e3:1f:0f:
                    42:4e:cf:41:3c:93:5f:49:3e:a2:64:f4:be:6d:76:
                    f9:00:31:7d:9f:55:44:de:06:5e:b9:bf:4a:1d:37:
                    4a:5d:f8:12:94:8d:bc:d7:28:44:69:76:71:47:93:
                    c9:56:92:20:19:c3:dc:cf:d7:d4:87:e3:5d:12:2e:
                    29:4f:45:d3:05:0b:02:1f:b7:e4:ef:1a:82:bf:44:
                    2e:86:f4:c9:b9:86:3f:15:5f:01:89:aa:4f:b2:88:
                    eb:dd:fe:99:b1:01:5f:8f:79:04:3a:13:d5:30:00:
                    60:fa:c1:cf:e2:f3:22:0d:28:8a:38:89:1e:aa:cf:
                    dc:b7:b4:69:04:fc:0f:51:66:9b:94:c6:3d:dd:17:
                    b7:fe:b1:18:60:dd:2a:80:53:62:6d:53:4e:76:8c:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C0:E2:DA:F6:53:94:BB:3F:77:61:51:1D:19:D2:EB:07:EF:28:C3
            X509v3 Authority Key Identifier:
                keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e7:b5:b6:60:45:bc:f9:d3:b5:5d:da:4f:fb:88:5a:2d:77:
         68:09:2c:12:c3:cb:f5:e5:1f:c2:97:2d:3f:5a:6d:0d:80:b7:
         d9:24:da:9a:f1:95:3a:63:6c:4d:81:3e:08:f5:30:60:1a:9f:
         2f:b5:c1:70:ed:e9:b8:7b:54:82:de:9d:24:17:a4:4c:d6:6d:
         ff:8d:38:15:f1:1e:4f:2a:11:7d:6a:9a:5d:eb:d5:0a:d8:59:
         82:32:9a:ec:68:82:ea:66:2b:3e:c4:02:75:52:66:48:63:d5:
         fa:46:b1:cb:1d:00:35:19:f1:30:26:d3:f0:c8:fc:4d:cc:30:
         d8:b2:23:09:22:5e:0d:58:7a:ce:74:d5:f8:8f:96:e4:30:b4:
         cb:47:bd:57:9e:af:cb:68:9b:69:3c:f8:a6:f5:f4:51:b5:5a:
         5d:81:9a:74:86:f6:f8:c7:50:cb:9a:7c:57:8b:e4:5f:7d:9b:
         a2:c1:3c:47:7c:81:0f:31:42:c1:ff:01:f6:b0:67:14:03:d4:
         9c:3f:a1:fa:d6:57:05:22:17:5c:de:5e:c2:d7:f5:5b:2d:fa:
         b8:9d:a3:03:39:b4:2d:bd:f2:c4:06:f1:2a:91:c3:e6:83:a2:
         04:d7:4b:9f:bb:8a:21:85:93:21:1d:2d:1c:3e:62:cc:d0:46:
         0c:b4:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----