Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File:                     e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier:          Msc7lw4E/OgevlBvqtKCUzL21QHdQDS9qXBFLBGPALY=
Subject key identifier:   B1:02:15:28:B0:30:C0:5F:21:80:4A:7F:44:FE:BB:BE:CA:8F:68:A5
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer:       /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial:       01962E6213C716AF5FF3B781ACF34156ED1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:41 +0000
Files and hashes:         1: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (hash: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=)
                          2: d3-nUmhWPxilxJYRIxnkrR3tjhI.roa (hash: nCRP7GSY9Gpb6j6rYf+Ya74feBJgqnxBiBarST+uqyM=)
                          3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: V58GO6lFa/t0eT5/PU7Y2ovp4nDrNYO5LAQ7OjIlihk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:13:c7:16:af:5f:f3:b7:81:ac:f3:41:56:ed:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
        Validity
            Not Before: Apr 13 09:01:41 2025 GMT
            Not After : Apr 14 09:01:41 2025 GMT
        Subject: CN=b1021528b030c05f21804a7f44febbbeca8f68a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:59:f5:3b:4d:9e:80:10:87:f6:55:79:4a:
                    2b:da:32:60:1b:e1:f0:30:07:87:f4:aa:27:6b:31:
                    ba:9a:53:b9:c4:41:b4:04:34:23:54:52:bd:8d:e9:
                    f1:68:19:d2:fc:a8:0a:c3:19:24:94:d1:d2:3b:4e:
                    9f:cd:1f:53:ce:30:38:d2:3f:7d:bb:e1:df:c9:9f:
                    41:f4:9b:d2:66:9e:52:02:68:92:28:6e:54:54:04:
                    43:99:c8:e5:c3:8b:cb:1d:a6:f7:c7:49:e1:4c:d2:
                    4d:6c:83:5e:be:aa:22:13:2e:68:6b:6d:de:15:af:
                    3b:43:e9:3d:41:97:2c:f3:17:98:69:54:e2:25:94:
                    3d:a6:d2:d8:47:71:4a:39:b8:31:54:08:aa:34:c1:
                    72:a7:12:af:68:75:72:1e:b9:f3:0a:58:89:b1:78:
                    55:c9:b3:78:91:f8:04:17:bb:21:42:dc:a2:28:2d:
                    10:d7:49:70:44:6f:c0:be:2a:c5:a4:b1:ad:4e:d5:
                    5b:6c:75:b6:f5:a5:7e:49:f1:87:c2:ab:29:6b:72:
                    68:72:3f:da:b3:d8:e1:2a:ad:d0:fb:70:ac:a4:a9:
                    97:35:fd:e6:7f:7b:13:46:a6:80:dd:c5:18:f3:f0:
                    57:fd:0f:ed:fe:f6:cb:84:6c:6d:87:a3:c2:bb:f3:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:02:15:28:B0:30:C0:5F:21:80:4A:7F:44:FE:BB:BE:CA:8F:68:A5
            X509v3 Authority Key Identifier:
                keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ba:62:e1:57:19:33:af:14:7b:2a:dd:0c:7d:fd:6e:d5:e8:
         1e:a8:07:23:5b:9f:be:5e:61:6d:0e:f9:71:4b:dd:c0:4c:b4:
         4e:bd:52:f0:80:ec:df:93:55:b8:7e:79:b6:bf:db:f2:be:c8:
         d6:47:16:c1:ec:a7:e9:78:28:c0:5c:d9:a5:28:0a:56:91:ff:
         df:fc:75:6a:54:98:17:82:9c:1a:3b:86:fd:60:3d:4f:33:2c:
         df:ad:a4:b6:65:bc:5c:6a:97:18:35:d3:7d:db:80:d7:ad:95:
         cd:93:40:e4:ff:ad:53:52:4b:29:33:a9:a7:c2:d0:7e:69:54:
         85:3e:5f:ec:58:f1:f2:6b:ff:54:2a:e5:59:47:22:60:97:57:
         bd:1f:0b:c2:c2:51:44:75:16:cc:5f:3c:b6:e2:7e:43:33:17:
         83:ab:a6:f1:e3:eb:0f:5d:e7:85:a4:e1:6c:83:f5:cd:d7:f6:
         d2:82:e6:5f:da:b9:50:ce:46:28:af:ba:db:c4:25:62:0d:03:
         13:7c:c3:37:4c:ba:fe:20:9d:6f:50:62:e7:dc:c9:12:7e:a6:
         c1:e5:21:0d:41:1e:e9:1f:0d:b1:02:5b:16:e7:56:30:bb:e9:
         21:d0:81:2a:a3:86:5e:2e:09:ce:67:fd:63:e3:57:86:44:55:
         2b:e8:92:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----