Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File:                     SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier:          2JkcHpCq+tfXwgeWnP9y8EbTA7wf5c84ATXfM54Y4js=
Subject key identifier:   54:D2:38:98:BE:6A:5F:AD:96:CC:78:F7:20:D4:0C:BF:CB:60:0C:7A
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer:       /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial:       01962E98B1EBE35264D4A9227713BE68E2BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: Ad7sRIt_14WqsoXSVJnhtt5pR6I.roa (hash: d1H2UkdaZjL8z/VCs5Y8T9oYvq5D7T8CQrV9qDD8uXE=)
                          2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: V8Lh4tkJKarw6PaOxDwJF/U5tcarfRWtOafP4dKAmpo=)
                          3: fbnqy98yfE_Lzn_9R-s84dMZn3s.roa (hash: RB1a5+/ABy4Ucs2InLVoqKGALjdVGmuLcFN8wD1kPqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b1:eb:e3:52:64:d4:a9:22:77:13:be:68:e2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=54d23898be6a5fad96cc78f720d40cbfcb600c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:d4:09:a9:95:d5:32:68:c7:11:21:1c:d5:
                    cd:bb:a3:c4:47:dd:8d:c5:66:9b:df:74:e9:b4:4b:
                    19:1e:8b:30:c2:09:8f:5c:67:53:c9:67:aa:77:43:
                    ec:ac:23:d1:29:a9:22:43:f1:4f:59:3d:fb:09:50:
                    63:61:bd:38:d4:92:8d:d8:2b:5d:28:46:d2:a4:f6:
                    7f:3f:43:b2:a4:31:5e:e6:63:3f:06:7f:73:5f:c6:
                    64:27:f7:25:28:27:f6:04:f8:bf:ec:23:2d:c6:bf:
                    50:e1:71:71:9f:96:4d:50:2b:f4:16:9d:e9:84:db:
                    31:37:65:a2:67:16:cf:1a:8c:62:3f:f1:fe:42:9a:
                    09:77:2d:1f:b0:3e:f8:c0:e8:af:98:c8:a3:9c:47:
                    29:d0:91:92:a1:1a:07:e8:14:1f:e5:58:f5:f4:57:
                    be:6f:52:9a:dd:bb:cb:6a:ea:ab:8c:2c:5a:16:10:
                    1d:53:c9:da:be:3d:e8:58:81:2e:13:ce:fa:04:2e:
                    09:4d:34:b2:8e:ea:03:5d:45:5d:09:14:7f:f8:e5:
                    c4:de:80:98:cd:97:15:5a:90:0f:b2:e6:89:53:a5:
                    41:c7:9f:a8:e7:41:d1:dd:ce:46:2b:11:5c:16:35:
                    54:40:c1:25:c8:ac:9c:ec:bd:51:a0:df:e1:4f:54:
                    9d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D2:38:98:BE:6A:5F:AD:96:CC:78:F7:20:D4:0C:BF:CB:60:0C:7A
            X509v3 Authority Key Identifier:
                keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:5b:24:9e:92:28:a6:04:ed:dd:59:e6:98:ec:70:1a:98:
         d1:84:9c:70:07:75:d5:44:9e:b3:68:e9:2a:ce:c1:67:d5:3c:
         f8:62:42:08:b2:cb:2b:67:a7:31:41:8e:2d:b8:1f:92:e7:37:
         0d:91:a8:78:9b:43:3e:74:0b:81:d5:67:ee:cb:7c:c8:e0:27:
         1f:3e:07:e7:53:b2:c9:23:6c:8e:78:df:a8:24:be:b4:92:66:
         66:8b:f8:b0:77:a6:d7:de:50:24:36:e7:41:90:1c:74:dc:1d:
         3e:16:21:2b:f1:65:80:eb:af:8d:53:35:6e:01:ff:a6:8f:f1:
         e9:88:13:89:bb:d9:03:60:47:40:4b:bd:dd:c5:7f:43:b4:b6:
         07:b6:cf:c4:17:c1:08:88:70:c8:21:5a:d4:09:74:95:4a:f7:
         73:30:03:0e:7f:92:0d:ee:ef:ea:2e:b4:0d:79:bf:63:8a:bc:
         a4:90:26:c9:99:df:08:9f:6b:dc:4d:07:38:9e:51:59:b2:6b:
         a0:d4:b8:6e:a1:77:c5:0e:32:b3:06:bc:33:b5:ec:b7:83:06:
         24:d5:08:84:2d:57:7c:e3:89:89:98:69:20:80:87:49:45:0c:
         2a:75:d4:b0:c9:8b:98:51:7b:05:d2:19:bc:01:8e:ec:bf:0d:
         68:dd:a9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----