Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File:                     cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier:          a0uwMSfcV4jL7sn+pcq6mDXn0fZpMSMDsIuqHuLXmuo=
Subject key identifier:   AC:EC:CF:57:BD:78:E0:77:15:9C:E0:3E:44:15:33:90:A4:E5:5D:EF
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer:       /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial:       01962F06A15FC08A8D2E058376D3F9ED79FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=)
                          2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: O/VuIxyWNGqhcZsLJ3lWe48V5YfpOEnsD2rB+4OUm1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a1:5f:c0:8a:8d:2e:05:83:76:d3:f9:ed:79:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=aceccf57bd78e077159ce03e44153390a4e55def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:02:df:8e:48:63:b9:72:c3:80:73:27:1c:
                    79:4f:e5:9b:b6:68:2b:c1:4b:92:4e:6f:e7:c2:b8:
                    3f:57:8d:63:1b:01:7c:74:b4:ed:36:af:60:1f:86:
                    58:87:b1:1a:19:29:18:be:9a:f9:bd:0e:2f:05:a8:
                    b9:4a:7b:f8:0d:f0:e2:7d:25:61:d0:9e:65:5d:9b:
                    36:6f:31:23:5d:3a:c2:3c:a3:b1:5a:0d:40:cd:7f:
                    81:35:51:b6:fe:ba:35:ac:1f:f3:ef:02:52:0d:6b:
                    b8:3a:3d:81:33:61:9e:57:50:33:d3:9b:c9:72:14:
                    55:78:bd:76:e5:b9:de:6d:98:0d:d1:83:8f:33:14:
                    2d:44:e5:1b:17:e3:ab:72:98:5e:79:65:da:1f:bd:
                    4b:d7:26:2e:3c:80:fc:73:88:8d:a6:3e:6b:2f:9a:
                    c0:2b:74:96:83:b0:ad:74:f1:86:72:30:9e:8d:4b:
                    e0:b7:d7:7a:0b:99:42:35:3b:c0:da:0a:14:27:53:
                    d5:e1:94:4b:a6:0c:51:08:17:e9:c4:5a:02:4c:45:
                    bb:60:3e:a1:82:e0:42:4f:a2:c4:03:bd:e2:f6:d0:
                    9c:94:49:dc:b5:81:69:1d:29:d3:df:09:f2:c7:46:
                    62:26:33:66:98:24:13:ce:0a:c1:c6:18:25:91:01:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EC:CF:57:BD:78:E0:77:15:9C:E0:3E:44:15:33:90:A4:E5:5D:EF
            X509v3 Authority Key Identifier:
                keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:11:5d:d4:2c:df:ca:29:97:00:f3:55:b9:45:48:54:86:c3:
         b0:23:de:a2:53:01:35:a3:03:f9:e9:74:dd:d2:33:d4:1e:0e:
         c1:bb:fb:ca:d5:31:43:33:44:78:fe:e3:01:02:f4:17:7f:2a:
         cb:6a:eb:c4:4c:42:b5:05:f7:28:b3:29:07:91:94:95:61:60:
         8e:af:74:38:81:69:81:ce:f2:33:d1:80:43:f8:0e:84:df:3d:
         d0:1a:a0:83:63:61:9a:ee:28:18:38:b0:54:63:5f:0b:a5:7c:
         2b:d0:f1:29:78:92:77:66:7e:36:23:29:4b:ba:e6:af:50:ad:
         db:88:e2:28:0c:47:da:6a:32:bf:0d:47:b9:2e:61:01:f1:a7:
         56:ae:b6:a0:ba:98:1f:22:52:44:d8:e6:48:01:5c:38:de:c3:
         4f:d3:47:25:7f:07:11:a5:0c:1d:ec:19:cd:6a:61:fa:a6:26:
         49:cd:1c:47:c1:5a:77:43:c9:e5:23:ee:90:99:c9:9d:48:a2:
         f0:58:c7:65:41:e5:bd:5f:da:58:4f:fa:d7:cb:17:b6:6c:36:
         c0:f0:54:ad:5a:2b:10:df:1e:b7:d7:29:a9:a3:ae:e3:7d:d9:
         0a:71:37:ea:80:26:f1:dd:f4:1b:df:6d:1a:51:43:f1:f1:14:
         73:93:7f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----