Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
File:                     ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft (raw, json)
Hash identifier:          4huqxYXAlOqukZhzpZl3xDdAfD44kghclLj7KUb5LVM=
Subject key identifier:   46:99:C8:5B:71:30:23:66:B5:C3:A6:3E:FD:71:73:31:9D:D7:B5:2F
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Certificate issuer:       /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial:       01962E9921EAB0C2F23411113776501F9F99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
Manifest number:          1204
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa (hash: hSczRhljFIoa/6OnEWTHUCmzoj5N2dcbKHbecT1X5S0=)
                          2: UThfbWvZb2PXAmFnxUbwmcadIvs.roa (hash: SO7N8NAXEb8d0CKRuGu75MSAjtkwodWQ5MaMjLOJVMY=)
                          3: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl (hash: bOYKHI1ZM6j3qKhcy0JWuiDBVNAZTL5nXt8kSnLpUCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:21:ea:b0:c2:f2:34:11:11:37:76:50:1f:9f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=4699c85b71302366b5c3a63efd7173319dd7b52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:db:04:5a:0f:6a:08:bc:ef:b8:0d:55:5c:
                    a6:a5:ed:e6:31:99:c4:b6:54:ab:f6:77:db:f9:b7:
                    62:c0:ec:22:40:a7:79:13:97:7d:45:3c:fe:80:61:
                    2e:96:02:29:0f:e9:e7:58:8a:c1:b5:2d:aa:9c:18:
                    8d:6c:e2:44:d7:d2:26:4c:0f:31:31:d5:3c:38:09:
                    b8:bf:ec:6c:c1:bd:82:ed:ec:e3:27:cd:b1:44:5f:
                    b9:b6:7b:2b:26:f0:e9:3e:5b:57:af:e8:28:b4:31:
                    c8:d2:dd:33:c9:a6:2b:c1:ce:11:62:2a:3d:48:5d:
                    7b:75:2f:06:8f:a9:0b:4c:05:e9:f1:4e:b1:8e:f2:
                    48:a2:ed:fe:ed:a4:20:21:5a:79:9e:c4:a0:7d:97:
                    25:3a:e1:a2:3a:7d:41:90:db:60:37:08:0f:1e:cb:
                    32:9a:d6:61:bf:ca:e6:0a:42:a8:87:8f:1f:82:1b:
                    20:b1:28:3e:39:9b:19:f1:fd:76:b8:16:ca:c9:2b:
                    7c:30:63:21:f7:02:82:66:d4:9a:3a:8a:8c:e3:20:
                    16:20:b8:2c:1d:90:31:bd:ef:d5:f9:ae:fb:03:34:
                    2b:c1:a8:14:34:e4:20:bf:ab:13:96:b8:23:11:bc:
                    a1:8b:d0:a0:16:e0:c6:da:f9:ed:60:95:c6:8c:91:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:99:C8:5B:71:30:23:66:B5:C3:A6:3E:FD:71:73:31:9D:D7:B5:2F
            X509v3 Authority Key Identifier:
                keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e9:f0:62:e4:5c:b7:ab:0d:7a:c6:fe:e3:48:8b:69:e5:c1:
         31:79:1f:33:5c:ee:1b:80:a2:df:83:e1:ac:83:47:6d:07:5a:
         57:b9:86:1e:0d:e2:65:9b:6e:7a:fb:0d:fe:d1:c9:0d:d6:eb:
         49:6c:51:10:ef:94:a8:37:e5:02:03:33:c1:bd:c3:8a:3a:a0:
         63:89:12:21:1e:94:e6:1d:f0:ad:f5:d4:95:79:39:4b:ab:11:
         4b:9f:3a:0f:57:b1:5a:3b:d7:d6:90:a0:47:85:63:b4:99:27:
         29:2b:af:6c:0d:92:14:8b:32:87:2d:1b:9f:b7:4f:33:0e:81:
         a5:60:d1:77:86:51:9b:db:27:76:93:6d:eb:11:d8:5f:27:eb:
         71:f1:69:84:60:45:71:e5:e5:0d:53:c3:9a:56:28:af:44:84:
         5c:ff:99:c4:e0:b3:a4:ef:40:3c:57:f3:de:2b:d9:9b:47:7c:
         fc:8f:bc:96:60:e1:cb:17:63:35:0c:b4:9b:83:1f:82:b8:df:
         97:2c:93:2e:e4:1e:02:84:11:83:80:f4:a7:b4:35:82:4a:00:
         be:de:25:08:92:13:4c:30:2b:08:cc:49:ac:93:0c:2f:00:a6:
         83:8d:19:0c:4d:79:c2:7b:ab:f7:81:d9:0f:32:8f:d7:2a:ce:
         82:cf:7e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----