Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File:                     7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier:          tzJn0UL/wUPxWUPX3ynhzjp/0vEnjSgyIbOOP0t5vDo=
Subject key identifier:   AA:A3:FB:30:68:64:7E:05:28:EF:06:10:3A:27:0D:CF:4C:F7:5F:BE
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer:       /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial:       01962E61A5D3315CB38908A33F9CA9C978D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: 7IJsu+fRBWFmguoYCTtywR3Q/VHSZ0c71OxEB/aaYcY=)
                          2: SWG7ULWsbdkT7YnAYLal6aiUNPU.roa (hash: 4R5oEsAspImowOjIwYW5eNE8lcSJazbh0RoaPrdVo18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a5:d3:31:5c:b3:89:08:a3:3f:9c:a9:c9:78:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=aaa3fb3068647e0528ef06103a270dcf4cf75fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2f:5d:10:65:5f:3a:7e:4d:e3:a0:29:47:44:
                    be:31:e5:12:63:55:17:1a:fa:b7:4d:cd:39:b0:c3:
                    7e:b1:5b:a0:04:b4:dc:f9:ea:79:1d:42:80:60:20:
                    41:a0:e7:59:29:49:7f:ab:16:67:c8:f6:91:b3:aa:
                    87:91:42:e5:e0:6c:0e:f2:37:5e:56:e4:55:6b:0c:
                    16:82:06:56:7f:bf:c3:9a:4e:0c:8c:90:94:8c:40:
                    35:0c:dd:04:dd:db:8f:66:ac:d9:c8:ce:99:bd:87:
                    26:bf:2c:eb:8d:6c:32:cb:75:42:ec:f2:e7:cd:b1:
                    65:90:73:de:16:dc:e7:21:c2:d9:7b:24:1c:c4:b7:
                    3e:24:9d:48:75:08:5b:91:91:44:e5:8e:08:87:83:
                    b2:08:8f:49:35:04:cd:35:43:86:47:d2:d3:26:8a:
                    ec:b1:16:2f:53:60:26:4c:4d:4b:e9:c5:d1:62:54:
                    65:0e:db:11:6c:ca:aa:2c:d5:93:9f:01:3e:d2:d4:
                    d8:3c:93:d2:f4:62:0f:f3:b9:d6:d6:d1:11:33:3b:
                    9e:e7:70:90:76:7d:4c:7d:79:18:34:58:78:1b:ef:
                    2f:25:d6:1e:5e:dc:52:e8:89:03:8d:6b:19:15:45:
                    ed:13:95:e6:e2:4a:b2:78:0a:bb:0e:a2:31:73:7a:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A3:FB:30:68:64:7E:05:28:EF:06:10:3A:27:0D:CF:4C:F7:5F:BE
            X509v3 Authority Key Identifier:
                keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e7:34:82:2e:3d:7d:c9:aa:06:28:fd:80:62:ce:21:46:6e:
         0e:a0:75:42:b2:9c:f6:83:0d:90:3e:9d:26:2e:25:b8:e1:55:
         48:ac:5f:94:d1:aa:e2:6e:c5:3b:b6:82:a4:88:37:89:1a:6c:
         03:ae:6d:ee:5a:5c:4d:a1:51:35:06:72:55:96:97:cb:f1:3c:
         12:fa:0b:1b:97:16:ff:6b:1b:3a:2c:9a:e4:36:89:ae:74:54:
         e9:13:1a:e2:55:d9:85:72:88:1d:98:5a:84:76:f5:48:df:7b:
         b0:d3:b9:c5:25:42:48:c6:e4:ea:b5:2d:18:6e:77:f6:86:f2:
         aa:0e:cb:ef:e6:f5:12:04:b9:61:9d:76:10:85:3a:7a:4d:b4:
         af:e0:26:97:07:fc:7f:35:14:87:b0:04:9c:8d:7a:9c:06:1b:
         8d:36:3d:d1:b0:ef:0c:a9:58:2e:6e:4e:aa:bc:35:95:26:83:
         9c:07:59:a5:be:20:c4:cd:fe:c3:fc:5d:06:74:33:41:8b:17:
         ac:7a:ab:0a:6b:4d:7f:f1:65:1b:44:a0:1a:c8:d0:c1:2f:dc:
         9e:4c:c4:65:b5:9a:e1:63:bb:d2:11:e7:d1:fd:b1:8b:bb:78:
         5f:d8:03:f6:8b:06:6f:11:19:7b:2a:dd:74:1a:78:37:14:b2:
         95:57:b7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----