Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          c/zOpMr374UkUqV1CrVXs+j0ZlbQT16dX1ZCLMNOqMo=
Subject key identifier:   36:F2:DD:FC:13:A4:A2:CB:D8:95:78:8A:3B:A6:6D:66:F0:7E:D9:5D
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       01962E2B2A24CD6D3C8624EBF10F502EEDE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          0522
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: e89SgW9HKhcwz6LK4zITR+UzGZbMfOc6qpFvIDj5JCE=)
                          2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2a:24:cd:6d:3c:86:24:eb:f1:0f:50:2e:ed:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=36f2ddfc13a4a2cbd895788a3ba66d66f07ed95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:7d:b2:e3:64:43:35:f3:a6:76:1a:c5:3b:
                    27:cd:53:c3:0f:d6:d4:cf:ac:4e:c0:7c:2b:71:39:
                    e0:ee:74:e7:94:5f:53:24:4f:df:3b:40:42:73:ee:
                    a8:09:bd:d9:ea:ff:b5:c4:65:64:f3:8d:b8:df:bc:
                    a8:62:4c:25:4a:be:b8:4b:f7:4a:c7:54:b6:41:d2:
                    76:71:a1:12:3e:42:b2:0a:55:ed:87:58:f9:4b:28:
                    cf:0e:e9:5f:53:95:fc:a1:ac:f5:fb:e2:d6:80:96:
                    91:73:df:0a:e1:1a:c9:a6:a0:28:f6:a4:68:32:69:
                    1c:4f:46:b7:23:a5:b1:1b:4f:74:a4:2a:c1:1e:7f:
                    33:dd:22:e7:aa:c5:0b:78:2e:05:0b:66:6e:2f:02:
                    4a:2c:71:eb:8a:e6:65:14:bb:7c:0a:ed:d8:f2:21:
                    6a:78:3b:11:99:b3:6c:66:b4:c1:39:d2:f4:ad:55:
                    b6:96:34:2f:3b:fc:cc:66:52:d6:ed:7c:81:3a:c6:
                    7b:5a:ed:31:4a:94:a2:11:c8:41:80:10:22:9d:7b:
                    94:3b:c4:26:49:21:2f:89:da:92:ae:64:e5:c6:d3:
                    54:a7:a1:a5:a2:7b:d1:a2:d3:94:3d:14:ed:0f:4a:
                    44:dd:db:a1:ec:22:ee:1f:20:73:59:32:79:20:8e:
                    a8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F2:DD:FC:13:A4:A2:CB:D8:95:78:8A:3B:A6:6D:66:F0:7E:D9:5D
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:5c:aa:c2:af:52:5d:63:e5:e1:53:83:e4:89:3f:5a:8b:
         19:81:d7:66:7d:02:2d:b1:f3:09:f3:4f:69:87:7f:73:04:98:
         8e:9f:c2:fb:96:4e:08:ee:b7:f8:c7:24:ed:7d:bb:19:3b:1b:
         b6:e9:3d:57:e7:c1:61:c9:91:dc:8b:7d:10:5f:0c:70:d3:9f:
         89:01:56:8f:3f:23:b8:54:9c:29:c9:80:51:7c:99:01:75:0c:
         5c:9a:e3:45:c8:3a:c6:f6:b8:7a:fa:24:f3:2a:33:1a:0b:72:
         01:f0:99:85:e4:57:0d:44:f6:a6:4b:b0:e9:e5:df:8c:95:f3:
         a9:2b:b0:00:d4:86:5c:ab:62:2e:8b:4f:ed:44:85:35:91:57:
         fd:52:df:df:65:8f:95:dc:53:e6:cd:10:ee:b7:66:37:22:e4:
         59:a5:a9:c9:b4:ba:f4:11:93:9a:bd:7e:f0:1f:7e:f4:be:51:
         28:24:bd:ff:90:ec:98:12:0f:9a:1b:44:14:98:14:dc:94:fd:
         99:d3:55:c2:03:ae:b2:5a:7a:bf:1c:7d:e9:d4:e1:8b:03:ee:
         fb:ce:fc:49:3b:db:e7:d5:0c:d7:47:48:39:a5:28:8a:84:ca:
         f5:d0:95:12:52:de:79:f3:0e:60:aa:c3:84:13:a4:35:bf:a5:
         bf:21:05:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----