Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File:                     U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier:          +R+z51eKK16k1AAdEtVYlJYGaJLFcujESl9WeFmjJqU=
Subject key identifier:   EB:B2:7D:43:1E:03:19:07:2C:CB:BF:80:44:D8:31:88:0E:A0:1F:5C
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer:       /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial:       01962E61D668D9DEEFAA0CF7676A07BAF1BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 7FIS9JXLBhSn9Xd80njFKcjrU5c.roa (hash: YIkfZDnE728Jfdsal+Cj/SDX4JnmcF1VCDJGwCdL40A=)
                          2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: WC/fwbQCOZeHK1Km8XDBzv22PpRk+O/GVvHeeRYNqXc=)
                          3: znlbEhSL3OBIUicM0zTghSzFWq4.roa (hash: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:68:d9:de:ef:aa:0c:f7:67:6a:07:ba:f1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=ebb27d431e0319072ccbbf8044d831880ea01f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:00:60:80:6d:de:6b:6f:88:27:96:22:64:d6:
                    a1:bb:60:88:3e:12:93:97:f8:ff:cc:01:b7:f9:19:
                    12:a8:72:5e:c5:e8:a5:e1:66:95:82:97:1e:3a:ab:
                    4c:a4:1b:c6:01:84:38:77:9d:24:41:96:6d:42:88:
                    6b:9c:6e:87:ba:bc:0c:47:c0:9b:0e:04:3b:35:7f:
                    63:b7:32:20:c9:cf:ff:d7:48:8d:2c:0d:d3:68:88:
                    b0:dc:b2:59:19:ce:d1:4f:f7:8a:1d:6c:45:e0:32:
                    e8:7e:ee:8f:01:70:05:b1:f2:67:f4:ae:91:ae:44:
                    8d:2d:71:1b:d9:9c:c0:c4:b6:56:d8:5a:39:b6:51:
                    76:2c:31:1e:2a:01:69:89:3a:65:38:54:2e:29:53:
                    31:3b:19:e6:4e:ca:a6:87:9b:fd:24:50:c8:ff:30:
                    4c:44:2c:28:cb:2b:bf:9b:9f:df:91:9a:bb:09:3b:
                    49:7c:1f:90:62:99:e4:f7:5e:6b:28:52:1f:96:1a:
                    fd:fc:5d:f4:df:e5:d9:7e:ac:9e:0a:9e:1b:d5:eb:
                    92:2b:41:11:0b:15:ac:b5:4d:45:39:61:84:1e:62:
                    bc:1a:d6:5e:9b:f7:b7:62:e0:bb:40:c7:66:cc:eb:
                    0f:49:1a:db:11:fc:56:58:9b:46:56:e7:0a:f2:36:
                    ca:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B2:7D:43:1E:03:19:07:2C:CB:BF:80:44:D8:31:88:0E:A0:1F:5C
            X509v3 Authority Key Identifier:
                keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:17:9e:8f:f9:dd:9b:56:20:5b:43:ca:65:9d:0d:73:53:57:
         6f:c4:b2:eb:13:95:d5:fc:95:d6:18:8e:b5:83:e7:bd:fc:5a:
         8e:b0:f0:a7:1a:84:84:42:51:dc:d3:9b:86:86:6d:56:70:5a:
         62:3f:d4:92:e6:e6:08:0d:a4:ce:34:ec:7e:22:19:95:1c:2a:
         7a:4d:b1:76:3a:1b:ae:6a:16:92:e5:66:ec:b8:4e:ea:a2:ea:
         80:75:6e:d6:bd:81:34:ec:2d:ed:ab:6d:56:0f:b0:d0:1f:98:
         e5:a4:b3:e7:cb:2d:95:7e:2e:6e:5c:df:ec:ee:cf:fa:70:d5:
         11:3f:45:1d:19:1a:1c:c9:8b:66:e9:50:d6:92:a1:a0:ba:3e:
         87:5f:12:15:c2:66:e6:93:41:67:0e:35:36:d9:e5:fd:27:40:
         1e:c1:4a:98:e0:86:d6:db:a9:77:f8:df:d5:8a:13:e6:45:eb:
         8c:eb:3a:cc:57:30:2e:74:9d:9e:77:9d:0d:ce:84:6e:f1:e5:
         39:9a:71:d1:ee:ef:cd:1c:a4:15:b6:2c:fe:7e:fd:8f:8e:df:
         b2:4c:f3:0f:b3:d1:d2:81:0f:06:ac:71:ff:46:6f:6c:21:d1:
         bf:e1:48:5c:7c:30:80:a8:a0:b5:d0:cf:76:38:93:a9:9b:66:
         39:45:aa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----