Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          gie62mLe8pBG0UX9fMrtgBwd7B4nIovcb2NQoRwSavs=
Subject key identifier:   8B:3E:34:AE:23:8E:3A:7F:0D:8D:02:12:15:7B:08:D9:68:11:81:A7
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       01962F3D919F67C582211EFB4E7B5A6F18C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: AqdNwPQNkfVczluLWSpSFMC_l4c.roa (hash: kZGRYpxYYa0OYlHbt48zpjPJ6+jRCPnuaKjcS//r4hs=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: IEhaT8E0A167OfJJIah7EhVJZWvQdMTQImI5XFXqLW0=)
                          3: MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa (hash: WSV4LQJShI0X02CRQl4dfytl6WA7n85th9+MfrRp6Q8=)
                          4: qqV2GYRrmbyUVqWNJgyRU1ckeZ4.roa (hash: c1XQtreZPdPfIPdsWXkoKiXRjwhEMOyVYtqVV4vEo5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:91:9f:67:c5:82:21:1e:fb:4e:7b:5a:6f:18:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=8b3e34ae238e3a7f0d8d0212157b08d9681181a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:af:67:cb:78:23:d5:36:a0:cf:d4:e9:59:
                    08:29:33:f4:8f:20:99:9a:24:e8:08:c3:c3:5d:2c:
                    c7:35:c7:3e:b7:0e:e5:d4:01:04:2a:d4:79:b1:51:
                    99:14:b9:a3:6d:04:63:c0:27:83:b3:57:2e:dd:28:
                    c1:48:0a:5d:15:87:95:88:ff:5e:1b:02:bf:40:30:
                    c1:28:89:29:42:fe:e1:4b:84:5c:ef:43:5c:43:72:
                    f6:34:e2:5b:3c:7f:1e:e1:d2:b2:04:95:fd:83:5d:
                    0f:a3:8a:96:35:76:36:d3:10:e4:42:df:72:6e:f9:
                    38:d0:f9:99:24:47:8e:3b:0a:3f:20:12:99:d4:a6:
                    2c:a3:81:4d:9a:60:af:8a:da:4f:ae:bf:8c:a9:1b:
                    07:e7:bd:39:81:04:68:98:02:81:3a:91:69:a7:48:
                    85:9d:99:35:ee:0f:a0:3b:e3:89:06:9a:5c:1d:bc:
                    9f:6c:68:28:2c:ef:23:ca:f7:ff:1d:57:6b:3b:e2:
                    49:71:25:27:7f:c0:49:51:5a:83:e9:58:3d:e1:02:
                    78:c9:41:15:5e:71:90:fb:c3:2a:c6:60:e2:c3:2b:
                    43:8a:bf:e3:21:a7:85:96:11:36:20:c4:a4:1b:86:
                    ca:9b:14:a6:2a:38:d9:3e:52:da:74:48:3f:08:8d:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3E:34:AE:23:8E:3A:7F:0D:8D:02:12:15:7B:08:D9:68:11:81:A7
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:11:50:53:b9:e0:66:62:4d:a6:00:fd:b9:a7:d0:a9:31:87:
         8d:30:63:e5:b6:70:ed:7f:35:32:60:23:8a:37:8b:dd:6b:f8:
         9a:3c:a8:20:bf:9a:b6:39:72:17:21:f9:b3:eb:04:b7:cd:ec:
         82:e3:51:c7:61:61:69:d7:71:0d:36:57:32:2d:91:3d:be:dc:
         31:1b:3b:4f:96:6e:83:47:3c:2a:ac:5f:bc:fc:8a:d3:c5:db:
         91:13:02:34:f9:ad:ed:9b:c0:21:b1:ac:40:61:d3:9d:b2:da:
         b8:8f:10:0c:97:4c:0c:1b:ab:6a:a3:ff:9c:af:25:61:8c:1b:
         ed:ee:ec:ad:9b:be:7a:02:c3:da:25:02:eb:42:0c:9e:b6:d2:
         3c:d1:ed:4a:9a:63:f5:0d:c4:88:e0:73:11:5d:fc:67:75:ae:
         2b:82:2f:7c:53:2d:1b:55:bf:48:3e:3a:0c:47:70:ff:af:61:
         6f:73:f2:3a:b9:05:a4:00:f4:36:30:63:ff:b1:f9:f6:5c:1b:
         b8:0b:e7:b2:c2:d5:a6:01:c6:65:9c:ca:ee:db:5d:2c:3a:c6:
         6e:b9:0e:aa:ab:b4:2b:3a:ee:c0:39:d0:ae:a5:ee:28:f1:59:
         ee:1d:e8:67:37:da:eb:6a:84:8c:bf:0d:ac:d7:3b:8a:9c:bc:
         4b:90:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----