Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File:                     eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier:          sRJqYN5G/uavbgSkuVTFiB0bFOtdn+KYclSU0FRvq30=
Subject key identifier:   0B:B8:7B:00:25:EB:51:93:45:90:31:3E:11:5D:3E:1B:3E:11:7B:4D
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       01962E620281C336204F4F22F21BE4A41E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number:          070A
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa (hash: lyg6mL7hgbTWMhjKowvZCwiOw1BkDLdd336Z4BXH0aw=)
                          2: PY2GKalpJxh0rVeN3SNnaDuGcN8.roa (hash: SriQyHP0WB/8fwiUvKAdnNLXQ0snarIjG0cxw/V7C/w=)
                          3: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: mXCFdCy4X3Ceh2Ij/eJTNfAZtl0uj9PbvEuur/wyoKE=)
                          4: numbWnJewpdlWjFsofSPwm7IG3g.roa (hash: 14YqjZz0f+0ogH+Jj76bMz/1yDXbVz5uWlMR4KVjJRU=)
                          5: psQBUc0pobHwdrhlOUZzj_GPEto.roa (hash: qru8ysHHH3C4jCMlszx1z613KVN+O1eNTXPzB5PAv+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:02:81:c3:36:20:4f:4f:22:f2:1b:e4:a4:1e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=0bb87b0025eb51934590313e115d3e1b3e117b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:25:ab:e8:86:0e:76:d8:4b:d2:f7:8a:40:
                    94:65:a2:0e:e2:c2:b9:b1:e9:d7:f8:1d:97:e6:8f:
                    61:a6:93:62:ac:2f:78:dd:cd:b9:5f:ad:28:bc:b9:
                    f5:a0:ef:4f:15:63:b3:8c:c2:9e:22:7f:8a:e8:20:
                    6c:28:ea:03:e3:93:b7:bf:14:2b:b4:79:b5:1f:c5:
                    eb:c9:ab:fa:40:91:17:9a:74:ad:fd:d2:a3:c2:c4:
                    37:7d:38:6f:68:5b:e6:cb:8d:1a:1f:de:e9:2a:69:
                    71:9b:31:86:4a:24:92:07:ba:cc:c2:90:4d:ca:02:
                    aa:55:b9:cf:17:ee:ab:3b:47:33:18:4d:f6:8b:51:
                    26:e5:f6:5b:72:12:d4:7b:ac:aa:37:8f:fb:9d:59:
                    08:b2:16:41:6e:cc:4b:4a:93:1a:62:bc:a4:9d:b8:
                    0c:3f:b8:c8:e4:1c:f8:b3:30:e9:8f:d4:6e:19:b1:
                    8b:cc:8e:b1:9c:7a:8b:66:b4:8d:44:11:f4:f7:37:
                    6f:ca:9c:10:23:47:07:8b:ed:90:b8:ac:8d:90:a7:
                    07:82:9d:bc:0d:a5:29:a8:64:5b:87:81:99:96:16:
                    a6:0c:aa:17:72:d1:9e:52:ec:63:10:a1:c0:be:fb:
                    d1:58:db:ce:dc:3a:18:83:52:a0:4a:0f:31:46:76:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B8:7B:00:25:EB:51:93:45:90:31:3E:11:5D:3E:1B:3E:11:7B:4D
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:fb:e8:a6:85:68:69:b4:d2:63:0a:ce:58:af:28:e8:e8:
         64:b5:43:a6:38:a8:e3:69:67:32:49:68:f9:3d:dd:98:c6:1c:
         29:73:ed:02:48:f4:4c:bc:d3:92:bb:67:2e:15:3b:9b:8f:bb:
         58:06:ac:41:05:3f:cd:a0:d5:df:37:d2:f3:4e:6b:f7:c5:59:
         46:6d:63:8e:ef:41:e9:07:0b:e6:5b:4f:3a:18:33:d9:1c:e4:
         25:96:93:86:fa:31:f1:cd:6c:fb:2f:27:03:1c:1c:07:66:33:
         a1:97:a9:ff:f3:05:95:d2:70:3d:36:b5:63:26:f0:ac:59:40:
         73:3e:ee:12:44:d8:d2:0e:c4:06:3d:34:50:50:16:73:3d:51:
         06:d2:a0:64:4d:2c:78:8d:21:6c:38:c9:a3:16:7e:a5:61:bf:
         7e:e6:48:18:9e:6a:23:2f:78:ef:a9:9d:a6:54:8f:cd:2a:28:
         f4:dd:1f:9f:e1:42:c7:35:7b:a3:bd:26:a6:38:70:d3:39:d4:
         a2:8d:5f:c0:5c:43:0c:56:0a:54:41:c8:9c:bd:16:bf:2f:32:
         a6:62:28:7b:ec:d8:8a:cf:b1:8b:21:24:e4:0a:2a:60:1c:c9:
         cc:2b:cc:9f:52:50:71:b7:9a:c1:92:8e:60:71:17:76:bd:79:
         45:c4:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----