Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File:                     E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier:          W91H5RctkSDdwvxhlycYP688nsqSrCNnsTRKJvEACNU=
Subject key identifier:   68:26:A9:77:0E:E3:2B:1D:E4:0B:CD:A8:65:8F:19:A2:A4:18:9C:84
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer:       /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial:       01962F74F03FC2DEF4F91683E3CC859E7078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number:          0C7D
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: 4No-RV70VYPprGbilfZK449S1jE.roa (hash: j/34sFvzUODtw4w1wk5hUpgDpA7ufIGqsXuylXp7/Eo=)
                          2: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: MPUY8fVf0G0hQqh6Obq14E7mi2cC+rJ9QwTcqYR9CTI=)
                          3: s2c2SxTi-Q_8OKeRjqXMrgRto9g.roa (hash: hpDU3rXSA01+9nbpttUv0vXTSKJESULWr8No8ki4IqE=)
                          4: svsHgTKbSt-q2-rESrjX7HwSyco.roa (hash: Ly7V0InrDHQxrljhfQHH31oMyka8Z0vBaIfhff+n6jQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f0:3f:c2:de:f4:f9:16:83:e3:cc:85:9e:70:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=6826a9770ee32b1de40bcda8658f19a2a4189c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:6e:b8:f4:19:a1:ff:22:f8:ae:c5:f3:fa:
                    d1:19:d8:77:aa:b0:d6:5d:9b:44:89:cb:e7:96:1f:
                    2c:2b:1f:5c:ba:12:b5:69:c1:5a:ad:2a:42:e6:8b:
                    e2:c6:31:06:b1:c3:fb:ea:6b:e2:aa:ab:94:a0:22:
                    89:69:c9:97:4c:5c:4d:8a:e2:61:23:cf:1e:ef:ea:
                    3f:81:cf:c6:a9:0a:61:31:bf:47:b8:8a:d9:91:1b:
                    29:8c:a8:9d:03:5d:6d:7f:31:0a:1d:46:74:6c:30:
                    68:2a:08:6a:c5:4d:cc:60:ca:49:a2:63:a6:8d:d9:
                    fd:6b:a9:85:ab:94:d4:89:47:36:5b:8c:0f:f1:41:
                    c6:6a:02:3e:61:c0:6c:50:87:43:2f:3d:0d:b2:5d:
                    02:c6:8f:71:54:05:6c:7e:09:c4:f7:38:5f:61:10:
                    60:69:ca:72:d2:8e:31:a1:37:02:9f:68:76:b4:c3:
                    46:8d:8a:e7:5d:94:8e:37:2d:08:98:37:00:f8:ba:
                    9a:50:8f:3f:22:2a:c6:fc:ee:17:c7:03:9f:ab:7b:
                    f3:c6:50:bf:ea:d7:c2:8d:d5:ca:16:10:c6:7b:2c:
                    25:6d:c5:c0:28:68:89:71:af:a0:77:0d:eb:1b:35:
                    b0:76:51:e2:e7:c2:2d:d2:33:da:51:02:cc:7c:1d:
                    3b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:A9:77:0E:E3:2B:1D:E4:0B:CD:A8:65:8F:19:A2:A4:18:9C:84
            X509v3 Authority Key Identifier:
                keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ec:bb:89:10:0b:34:ed:3b:e6:62:3c:36:96:7c:9a:3f:aa:
         4c:f1:c0:56:da:1e:dd:40:8b:f3:8b:f3:4c:a7:d5:53:5b:1c:
         94:fc:59:53:5c:8e:83:c8:62:20:20:d6:af:d1:6a:0f:8f:a6:
         c3:22:f7:28:65:43:2c:82:68:d6:44:1d:5f:40:9f:cc:4a:19:
         ad:e4:f3:3c:03:69:cc:1d:de:95:57:1b:51:bb:ee:19:9f:f1:
         be:7b:df:db:b7:cf:21:0b:81:07:07:72:10:46:5f:5e:fd:f0:
         f5:f6:e4:82:70:a7:32:57:11:75:67:28:eb:67:f1:e9:bb:31:
         64:5b:a2:e7:af:da:41:31:99:b4:7b:1d:f4:13:69:86:98:82:
         23:3e:99:91:f5:f2:4e:fe:b0:fd:02:37:2c:db:8d:3a:8a:b5:
         ae:65:67:28:e8:f1:00:c9:6d:18:9b:01:84:76:9e:b7:61:b7:
         bd:92:b2:d0:a5:66:d9:cc:a3:cd:a0:e2:35:67:4f:5a:aa:bd:
         86:ec:db:4c:13:35:ed:81:86:79:cd:0e:21:dc:1c:cd:2b:e2:
         92:19:b8:28:1e:c4:fc:39:26:3d:05:91:d5:88:66:c5:56:03:
         74:61:ce:ff:df:88:38:61:12:22:af:61:2b:d0:28:0a:69:d4:
         c8:0b:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----