Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
File:                     ewGNKlH-8tdsYmAFVsZtV8t-knA.mft (raw, json)
Hash identifier:          gccTJTgh2Vqh/DMjAp9eSuSB+oVGlBjd1PbvO21vuwg=
Subject key identifier:   24:55:07:A4:BD:37:EE:64:32:B5:DA:01:1F:2A:AD:86:C9:11:79:3F
Authority key identifier: 7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70
Certificate issuer:       /CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
Certificate serial:       01962FAB78E91D0CCF94D85AC1A7C864F5D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft
Manifest number:          050B
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: ewGNKlH-8tdsYmAFVsZtV8t-knA.crl (hash: onM9cTSwuuVbESMSNAoE/1UgLj+Y0jObbz6Cz3SAQvU=)
                          2: rWkvauBEMYRnIGnTGjbge3-FesI.roa (hash: NZqLavHilBq1RJJKbmTkXGJJieLsNjrQomu+4A2D7i0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:78:e9:1d:0c:cf:94:d8:5a:c1:a7:c8:64:f5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b018d2a51fef2d76c62600556c66d57cb7e9270
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=245507a4bd37ee6432b5da011f2aad86c911793f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:cc:ee:63:28:7a:7d:63:48:36:7f:d9:8a:
                    a8:4a:f2:cb:5c:43:6a:9a:9d:38:c4:63:38:15:74:
                    25:f9:8a:08:8c:8a:7e:e3:0c:3c:db:51:e4:0c:73:
                    c6:17:32:42:7b:5a:49:5a:e4:5a:37:b9:60:fc:69:
                    d5:2e:03:6b:84:aa:52:f8:cb:c9:3f:3e:8c:ee:74:
                    3d:00:35:0c:3e:36:64:eb:16:21:73:6f:af:61:e4:
                    f2:a3:58:8d:fd:a8:a9:eb:0d:77:8a:e0:e6:8b:0d:
                    80:84:38:86:dd:97:77:93:79:f0:d7:48:6b:c0:f6:
                    7d:b8:94:87:50:e6:25:ac:a2:90:53:7f:cf:c5:5a:
                    a5:9e:cf:f0:5d:73:39:7c:c5:3e:03:b0:67:c0:1a:
                    93:59:b9:f8:1e:39:03:a4:fa:10:6c:2b:ce:fb:61:
                    8b:bf:54:74:06:20:8d:4a:64:8c:00:8b:a3:5b:ba:
                    7a:e2:de:08:1e:c0:e0:a1:12:95:20:c6:de:dc:b9:
                    45:ee:79:9d:b9:c8:db:80:bb:60:e3:f6:9e:41:6a:
                    ea:b2:78:06:05:0b:1e:f7:ec:22:3f:ea:1c:45:9b:
                    34:8d:ab:b3:0c:0e:95:74:48:1e:30:f7:22:c5:34:
                    6a:02:0c:44:d5:c3:70:6b:66:26:02:fc:5c:ce:3b:
                    cc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:55:07:A4:BD:37:EE:64:32:B5:DA:01:1F:2A:AD:86:C9:11:79:3F
            X509v3 Authority Key Identifier:
                keyid:7B:01:8D:2A:51:FE:F2:D7:6C:62:60:05:56:C6:6D:57:CB:7E:92:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGNKlH-8tdsYmAFVsZtV8t-knA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6fd0d-a02b-49c2-9a2c-4dc2dd56d57f/1/ewGNKlH-8tdsYmAFVsZtV8t-knA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:cf:b1:0f:95:b4:07:f2:97:29:4a:37:ad:c4:67:af:39:8f:
         7a:14:76:a1:ef:54:79:a7:10:06:86:b3:ff:03:87:9b:59:92:
         f3:87:6a:db:12:f4:04:73:b8:d0:78:8f:3f:25:b4:4e:30:7f:
         44:11:d5:39:5b:b7:3a:17:2c:49:cf:3f:dc:c0:28:2e:fc:3f:
         f0:4f:8b:3d:84:18:91:ce:9b:69:ca:6f:1b:a1:b2:85:b8:20:
         ae:50:3c:14:67:c6:6e:2c:ba:b2:eb:ba:b6:02:1d:d9:12:80:
         47:f7:0d:e4:d5:41:26:d8:26:ca:ae:13:d3:a5:e2:23:89:c7:
         ed:84:84:b8:d7:b3:83:60:0d:80:ea:52:d7:38:a5:22:b5:a4:
         47:c2:e8:ce:10:f6:6f:ab:f9:28:57:0e:d8:56:81:33:35:85:
         7f:36:3e:76:2a:c1:4a:bb:64:b7:a6:73:b7:4a:ac:c7:11:6e:
         79:c3:1a:8f:d4:62:4d:4b:d3:1a:9c:b8:ea:05:02:6f:1b:c5:
         12:bd:79:e2:b0:c1:56:dd:57:1b:d5:03:14:d5:d4:0e:71:f0:
         72:bf:a0:d4:7a:d1:b0:ff:cc:bc:89:e7:ea:f1:d9:da:e4:75:
         6e:16:8c:ec:83:15:b7:5e:30:ea:97:3d:6e:87:8f:b6:29:85:
         48:4d:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----