Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
File:                     Ezm5qJRtJr4tj__mwePCLLk-BIY.mft (raw, json)
Hash identifier:          Ejz1Kx2DnHl2txVNqb9yqSGBqi7TXdLAupsxWaSDpUE=
Subject key identifier:   C5:1F:0B:A3:D8:A5:37:A2:F3:6D:7B:21:1B:3B:1B:51:30:59:11:FB
Authority key identifier: 13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
Certificate issuer:       /CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Certificate serial:       01962F74D0FA0BC3DFDD806DFB3C0C6F4D2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
Manifest number:          0BB3
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: Ezm5qJRtJr4tj__mwePCLLk-BIY.crl (hash: JLC61VfH0tP0sDRblDapmLC52Ah85P3OeevJ34AOYx0=)
                          2: Pd_TRMzeLXmR4l_ISjIRf3kfJG8.roa (hash: eMT9U1JgE9Qp7ruvpzaw9x/RY238h1ceOul754xPuwk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d0:fa:0b:c3:df:dd:80:6d:fb:3c:0c:6f:4d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=c51f0ba3d8a537a2f36d7b211b3b1b51305911fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:33:59:e3:6e:06:78:d7:d3:0c:e3:5e:9d:
                    8c:62:b0:20:b3:48:4b:39:dc:e6:d7:95:43:7c:ca:
                    88:4b:56:93:c0:d7:70:fa:89:66:36:ed:cf:e0:89:
                    67:6a:a7:6b:b0:a1:67:6a:7d:8b:ec:6d:41:26:8c:
                    0c:2d:da:e4:a8:a3:6d:4a:a0:a1:98:8c:8d:16:89:
                    9f:ed:4c:7b:f5:62:96:21:1a:8b:f1:39:f7:d7:31:
                    f7:8c:32:04:54:f6:cb:bf:16:75:22:01:ea:0c:c4:
                    52:17:48:8a:28:7e:46:9a:9c:b3:e9:a1:eb:79:fc:
                    f9:dc:de:43:53:4e:a7:5c:c9:7f:98:ce:17:f0:88:
                    6d:c9:32:22:f3:7c:cb:85:c1:1f:df:fa:12:11:6d:
                    75:02:b6:bf:8b:47:77:a0:4d:a5:a9:0b:8f:d2:fe:
                    2d:85:b8:30:da:b8:96:eb:ff:2b:c9:3d:f9:52:3c:
                    a5:64:98:c1:12:2b:20:dc:08:06:13:8d:a0:7d:75:
                    87:73:e4:32:de:f9:54:cf:07:b1:9d:ff:64:08:59:
                    85:48:38:59:84:c1:43:d2:c4:0a:0f:c5:5d:0a:e0:
                    3d:5a:d1:26:e4:f3:25:d9:74:73:08:73:93:a2:12:
                    e4:59:e7:40:96:31:27:86:97:95:56:84:24:3e:54:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1F:0B:A3:D8:A5:37:A2:F3:6D:7B:21:1B:3B:1B:51:30:59:11:FB
            X509v3 Authority Key Identifier:
                keyid:13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9e:18:20:94:28:11:12:ea:e6:8d:dc:97:2f:d6:70:da:c1:
         c2:77:70:96:a3:f1:ad:9f:16:6e:37:d4:39:d1:65:d7:40:f1:
         ba:09:19:b0:b1:31:5c:52:b3:7b:6a:bb:50:55:41:9d:39:66:
         b2:dc:7c:6e:61:66:2c:95:21:79:15:50:b4:1d:a5:4b:f4:1b:
         7a:a6:a1:6b:92:7b:a7:4b:26:3a:0b:6b:b1:27:fa:c6:bf:7c:
         18:ff:3f:b6:9d:78:f0:54:d0:0f:4b:0d:2c:94:4b:93:37:1e:
         13:07:f1:d7:38:16:c5:60:c3:ff:ba:16:48:b4:83:57:ae:82:
         ff:fd:a5:05:91:6b:01:32:5a:71:12:b5:8c:e3:b9:8c:60:f7:
         44:21:6b:bd:69:15:b4:09:57:a5:05:53:53:84:78:fa:e6:14:
         9f:8f:83:3c:72:0e:c7:80:88:60:1e:0c:8c:06:54:c6:60:df:
         f0:c0:44:a9:8d:45:18:e3:05:d2:4b:a7:97:42:d3:a6:b8:66:
         3e:33:66:42:23:67:66:03:1f:06:fe:34:8c:34:b0:00:89:99:
         78:df:43:ab:8c:9e:d0:b8:04:86:32:c9:b9:34:fb:00:e8:7a:
         3d:fa:1b:36:ba:5c:7a:b9:ef:c3:4d:d8:03:a7:2b:ae:77:34:
         08:c7:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----