Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
File:                     7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json)
Hash identifier:          WciAr1k+WDJ6xKhm00K4DuGontmPA1Vc1DTqy2k3HFM=
Subject key identifier:   E4:CC:46:E8:DE:A1:F6:D8:02:69:B8:CF:19:3E:CA:6B:FF:61:3C:25
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Certificate issuer:       /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial:       01962DF3956CD0F0E2C7921EFE01F00E5D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
Manifest number:          0AC2
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: 3uMeDtxgqX-k3ZAHOS4EeEV9Yc8.roa (hash: jzm5EtMLsz1mcZpTD9DsVPBX2qqL5NIfQpuD7GNpvnQ=)
                          2: 5g85T8wtsU9KQN9mQ3PzcRzIz0g.roa (hash: jk7ABMj+Yqrl8ZCZd+pnYEYqoK3gUBxv5XC/YllO77E=)
                          3: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: 0KHTOZVPC4IKwKlpNltOvPwX6MXGDMXSBc4JoRjzNOA=)
                          4: HgVzqiDMZ8Vc6KB3XJObFOVDRC0.roa (hash: nCuHl6oWRNlw6UG3DaeGiBku6QU554KA1I3WsefsqG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:95:6c:d0:f0:e2:c7:92:1e:fe:01:f0:0e:5d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=e4cc46e8dea1f6d80269b8cf193eca6bff613c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:0d:60:c4:8d:47:9e:d2:a3:a3:50:88:2c:
                    23:61:d9:63:84:72:78:55:d6:31:d8:27:f2:ec:2f:
                    d7:2e:ff:99:d7:c4:4f:93:82:27:61:d0:3b:17:62:
                    9e:60:6c:a1:c8:c5:2f:47:bc:f3:b2:60:fc:06:01:
                    4d:a7:9b:2c:16:52:96:35:01:64:0a:2a:88:e6:3d:
                    94:da:26:5d:78:b6:d6:37:98:83:71:e2:0f:a6:f1:
                    55:a3:74:08:8a:16:13:78:19:e4:2b:30:75:de:5f:
                    d3:18:66:f8:01:d8:b9:8c:e4:23:84:dd:f2:d9:97:
                    94:72:5d:94:9b:dd:dc:d7:b1:09:d3:c1:18:59:de:
                    f9:1b:d3:a6:c9:96:01:10:d7:44:31:76:91:be:77:
                    12:63:3c:72:d7:ed:6d:3a:9f:34:5d:16:f2:4c:d4:
                    96:57:2c:2d:f8:d9:b4:46:d0:e8:73:17:a6:65:6d:
                    36:ea:a8:6c:7b:03:0b:9d:ca:cd:9d:49:3a:51:cc:
                    d2:7a:10:e6:c4:f9:3f:18:e4:b7:95:aa:4b:b0:d5:
                    6f:92:85:66:1c:e4:e9:85:27:f5:96:1f:96:f9:84:
                    b4:8e:54:39:ba:70:1d:47:ae:39:08:36:85:18:8f:
                    11:f4:4f:a8:a7:38:dc:e4:77:50:b2:f2:91:82:55:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CC:46:E8:DE:A1:F6:D8:02:69:B8:CF:19:3E:CA:6B:FF:61:3C:25
            X509v3 Authority Key Identifier:
                keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:67:04:d6:b7:17:3d:16:d2:f6:4a:a4:88:63:c7:a8:f4:a7:
         3c:ba:d7:0f:fd:2a:50:cc:68:ee:2a:8c:6c:04:f1:4c:30:c5:
         1f:26:87:d1:2e:16:76:f5:eb:d4:5f:43:0b:20:09:e3:16:33:
         45:de:04:ba:60:ec:99:91:78:7c:89:c3:77:70:d0:28:b9:46:
         41:1e:1e:01:95:ea:f7:d7:cf:92:65:ab:23:82:50:a1:60:d2:
         d9:b0:89:86:b6:80:e6:b9:ff:3e:d3:1c:0c:8d:20:61:07:79:
         23:74:e2:2f:32:39:a2:72:af:d2:1d:7c:8f:dd:d6:e7:c1:91:
         ca:77:6b:2f:fd:0c:55:23:9e:1f:bc:37:4b:36:b2:d5:42:93:
         d1:89:90:7f:ca:4a:15:50:ac:b7:fc:06:df:93:c4:a6:e5:2e:
         18:a3:93:38:3e:88:54:92:28:fd:ac:01:4d:ed:6e:ba:42:00:
         5c:49:90:c5:2c:5a:98:fc:3e:16:d3:11:2f:f5:86:c0:d5:92:
         c5:13:a7:31:e7:41:b4:c1:9f:19:c1:5f:8a:0d:5b:52:31:a7:
         7a:71:53:28:40:29:32:04:11:d6:5f:0f:f4:aa:bc:fb:3f:14:
         fa:d8:d5:41:6d:0f:02:89:22:d4:32:e5:da:39:75:b8:59:40:
         80:d5:34:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----