Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
File:                     ril1GgrIGmVxkFRupHgM2GFA3J8.mft (raw, json)
Hash identifier:          84t+IQSE8gMLxQa8M/Wq+S0C3BeJidHRtWWDoq3e2jw=
Subject key identifier:   66:85:EF:8D:EE:06:E7:85:5B:A0:F2:7C:D7:FF:E5:47:5D:FF:FC:7D
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Certificate issuer:       /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial:       01962FAB26A9A1FD62173C2070AFEAB5C8B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa (hash: HTtYaWmG4vFsBggg1bZWXxDw9HN8LeHTNamhfWYt0+s=)
                          2: TzCEbM_FX1C8Etsgv1SpL73BfwY.roa (hash: 0+du4/EByKMALnvia/65AUVyk52kmBip6bBqdirNoQM=)
                          3: ril1GgrIGmVxkFRupHgM2GFA3J8.crl (hash: zrdY2N3wPTivp1NzfltU/XxmEVGWUIzNGJULmneJrY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:26:a9:a1:fd:62:17:3c:20:70:af:ea:b5:c8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=6685ef8dee06e7855ba0f27cd7ffe5475dfffc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:db:e7:6a:cd:c2:a4:3b:7e:49:6d:a0:e4:
                    f0:03:ed:9b:cb:3f:b0:6a:93:33:c3:3f:9b:28:33:
                    6a:7b:3f:16:e4:d1:06:a1:a5:87:44:df:c2:a0:7c:
                    b7:6d:9f:1e:b8:03:ae:47:fb:df:3a:29:66:82:c1:
                    5b:ea:9f:3f:54:b2:4a:56:b3:80:ee:cb:2b:a0:20:
                    d8:69:95:49:7f:41:bc:6a:92:2d:d8:60:eb:20:10:
                    ab:70:1c:e6:ea:10:f7:c5:5e:7d:5c:88:1d:88:b6:
                    05:f1:62:43:e2:21:5f:95:47:cd:c1:80:86:2b:f1:
                    18:e3:19:f7:8d:ae:46:4e:55:82:5f:03:68:68:a6:
                    78:ed:ee:46:04:3a:99:65:7c:8e:c8:7b:af:da:69:
                    7f:50:6e:5b:f1:1d:a7:c3:69:b5:3e:7b:c8:74:c3:
                    d6:07:4c:a1:15:0c:80:7b:2e:61:0b:36:c5:b9:94:
                    dd:b7:c0:d7:65:1b:2e:d3:ea:27:44:84:29:3f:24:
                    56:41:8e:15:89:eb:04:02:94:09:90:73:0d:d1:ab:
                    12:08:00:83:f1:5f:78:1e:4f:3f:2e:b3:a0:6e:eb:
                    ba:38:c6:01:25:5e:60:02:a8:95:94:e7:b1:a9:98:
                    35:74:a9:8c:f9:37:a0:d3:1c:6c:4b:3c:dd:69:66:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:85:EF:8D:EE:06:E7:85:5B:A0:F2:7C:D7:FF:E5:47:5D:FF:FC:7D
            X509v3 Authority Key Identifier:
                keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:71:a8:62:3f:59:9c:c1:4a:cd:21:7c:2b:b2:09:44:74:dd:
         d2:ef:30:81:7b:9b:c1:a0:ea:06:55:51:e4:01:af:95:d1:a1:
         83:23:2a:76:37:61:06:50:4c:1e:4d:ec:a3:99:c2:cf:ff:f0:
         4b:ce:67:27:1c:e5:7e:ac:92:62:2f:fe:b0:8f:19:ac:f2:52:
         41:87:62:7a:92:0b:7f:b1:66:1e:22:9d:08:6d:d3:8c:f0:bd:
         0e:9a:0f:93:9f:87:c1:68:1f:21:f6:a5:b9:d8:46:82:5d:ed:
         35:d2:0e:3c:90:11:4e:04:5f:44:dd:90:92:a8:58:89:76:0a:
         52:37:f2:b9:7d:e5:ea:0c:fa:af:f7:50:df:06:e1:55:8e:97:
         19:fc:ca:c3:11:84:95:b0:1e:82:48:02:9c:66:a1:9a:7a:1e:
         91:e9:78:32:84:fa:91:e0:4b:0a:ae:12:54:eb:76:92:ea:f2:
         f0:65:c0:de:92:bd:c1:b3:46:de:6d:37:5a:d0:f1:2c:a8:cf:
         37:3a:02:ed:73:e5:a2:a6:48:0e:82:54:bb:ea:da:89:a6:ad:
         46:dd:9d:53:3e:13:44:d7:63:85:c7:24:50:56:3f:0f:dd:6c:
         26:a1:52:60:5f:fe:0a:51:d6:35:36:76:d4:c4:81:8c:62:8d:
         6e:af:fe:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----