Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File:                     69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier:          NH1pT1BJ9a2RLCCNlgWU8kD/U+Ti6bYrjxCJgTxP4r0=
Subject key identifier:   78:B5:6E:9C:27:C5:52:53:0F:BE:C1:0C:F8:0E:BA:39:ED:3A:BB:A6
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer:       /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial:       01962F06971F6868D3D9FBEC7EF6BC5833CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number:          144B
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: kVCsIW8oxgwSNU9orD2vaAOUb+2VrHkcI9buLaU2wWU=)
                          2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=)
                          3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:97:1f:68:68:d3:d9:fb:ec:7e:f6:bc:58:33:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=78b56e9c27c552530fbec10cf80eba39ed3abba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:a8:96:41:53:7b:0a:5e:b2:ca:9b:4c:69:
                    ba:3d:2b:f1:b4:3d:92:28:a8:65:a7:71:87:a9:84:
                    0e:00:9d:f7:58:41:01:18:f1:32:b9:27:7c:75:76:
                    17:54:40:6c:ca:ad:da:96:de:77:cb:a9:c8:66:33:
                    b4:ee:27:05:27:08:6f:0e:37:e2:6b:4e:52:12:56:
                    c5:99:03:47:4e:b7:77:a2:ee:ce:ec:f5:19:5f:92:
                    e7:fc:e1:20:74:09:29:4c:4c:14:b6:81:ed:67:01:
                    c3:fd:20:36:f2:b4:a6:72:e8:15:42:59:a3:cf:7c:
                    98:6a:c3:4e:bb:0a:e8:d5:cf:e0:f7:dd:84:a7:0c:
                    1e:bb:70:8a:b3:39:ad:10:90:b7:1b:78:13:1a:1e:
                    f4:7d:13:96:64:7a:d4:46:0b:ad:45:f1:e5:d8:eb:
                    38:42:ad:64:1d:a9:0c:18:ed:7b:81:7c:d9:cd:b7:
                    c7:63:ac:6e:1a:a6:1e:92:c2:9b:6e:08:27:75:11:
                    01:1e:48:f1:2f:63:c9:cc:ab:06:2d:fb:83:c2:40:
                    cf:fe:13:d3:a3:07:1f:b1:42:59:30:2f:97:be:90:
                    b8:5f:d5:29:d1:43:11:4c:88:42:b3:f1:ef:0d:c9:
                    f8:11:05:7b:19:61:a9:b8:9a:e2:0b:2b:96:7d:06:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B5:6E:9C:27:C5:52:53:0F:BE:C1:0C:F8:0E:BA:39:ED:3A:BB:A6
            X509v3 Authority Key Identifier:
                keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6f:31:79:95:ab:d6:59:ab:59:b8:60:35:06:34:21:ee:74:
         0a:83:80:21:77:46:4d:8f:c9:71:56:f4:56:4a:e9:62:d0:e7:
         4f:4a:19:7b:69:61:dc:9b:c3:31:60:47:69:b4:fe:ad:9c:6a:
         3b:77:20:3a:6f:67:21:6d:84:49:c4:92:ee:6e:97:3a:1c:79:
         a0:0b:f8:21:9c:97:c8:c7:dd:21:24:83:a0:c2:e2:a2:40:c8:
         6c:7f:93:d5:a4:ec:5a:6f:d6:7b:c6:71:23:d0:b5:63:e0:43:
         8e:6c:d1:b2:01:06:d0:2d:19:02:e8:e2:5b:69:87:11:5d:74:
         4b:5c:de:0e:d0:82:26:62:eb:3e:7a:04:9f:2d:b2:32:2a:7e:
         d6:52:e6:59:92:8c:06:95:60:a5:b0:21:e1:7f:dd:c1:ff:27:
         c9:f6:67:1d:40:ed:cb:90:81:6a:a9:7c:4e:4d:e1:35:fb:95:
         ea:38:b3:57:13:22:cb:65:78:c5:2a:8e:73:12:dd:a4:51:64:
         5f:e8:16:ce:92:29:67:90:4f:83:80:43:c3:99:b1:b1:87:0f:
         4d:65:4e:b6:a1:9d:f9:1f:e4:11:a4:7e:bf:a4:8d:b0:3d:0d:
         3d:82:20:46:5c:ea:55:a8:11:be:ac:cb:47:c1:18:f8:8b:f7:
         5e:f7:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----