Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
File:                     ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json)
Hash identifier:          tx9NmHNLdqJ1U1jprrlkl+YHsWP0pk9c95nvA1dDMPI=
Subject key identifier:   10:DC:A5:65:34:E9:93:E8:E1:FD:A6:C8:A7:B6:40:1F:43:D2:05:D9
Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26
Certificate issuer:       /CN=7a1b849c340702501363a1f927ec424099b94726
Certificate serial:       01962FAB0F8D12B5756397DD84F41E020BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: 5A2sFC+40SRMFMft9un6uOEGou05NX6YYA9ZuySiCb0=)
                          2: iKoSCNAZjucl_5DmTaH10Tdpg9A.roa (hash: YVc4w2MJumvbAdOpOrjC4pr5c6N7CyHuK7cs3DXXsqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0f:8d:12:b5:75:63:97:dd:84:f4:1e:02:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1b849c340702501363a1f927ec424099b94726
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=10dca56534e993e8e1fda6c8a7b6401f43d205d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:d6:03:9f:3f:91:a3:de:9a:3b:b4:87:e7:
                    b7:0f:25:7b:8b:5a:e5:b3:10:80:58:bd:bc:03:f7:
                    45:28:31:ad:68:47:2e:64:f7:4c:c8:3d:bf:3f:ad:
                    77:dc:b0:ee:c6:30:c3:4f:56:fe:d0:59:51:6f:4d:
                    f6:40:28:d1:ad:da:e0:b9:c7:0e:e9:0f:4f:a4:4c:
                    36:60:19:fd:c7:bf:15:91:0b:ca:f4:4d:6a:30:a0:
                    5c:0e:5b:69:e3:b9:c6:2e:b4:a4:1d:a4:c4:bf:8b:
                    96:5e:e1:8b:ab:60:fb:ec:29:ae:0d:a7:3c:07:5f:
                    a2:40:70:66:10:5b:25:02:de:5a:35:56:6c:5f:3a:
                    33:01:6f:76:16:17:a0:b6:cf:0f:a5:60:c0:0f:c0:
                    5d:4b:5c:bb:c2:12:7f:07:65:1d:bb:aa:b4:b7:63:
                    95:2f:d8:c2:00:e3:77:5c:11:ad:33:dc:68:10:69:
                    26:6a:91:ee:08:a1:25:d9:a5:01:b3:0d:40:b2:f0:
                    56:cc:11:bb:f0:cb:8c:04:79:5d:27:11:33:50:4e:
                    2e:b2:0e:49:a7:9c:8e:2a:ca:a5:1f:86:56:ac:db:
                    cf:93:39:4b:05:14:77:3e:e6:9b:cb:25:6d:de:38:
                    47:ea:f2:e7:aa:76:d3:bf:67:0f:3c:3e:25:d0:72:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DC:A5:65:34:E9:93:E8:E1:FD:A6:C8:A7:B6:40:1F:43:D2:05:D9
            X509v3 Authority Key Identifier:
                keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:42:f9:16:71:49:18:96:ae:bc:9a:79:4b:d6:a1:11:36:
         67:dd:be:af:30:a7:44:a6:af:15:08:9e:be:ff:2b:87:f2:f6:
         d8:8f:33:5c:6b:2e:58:2a:7c:a7:6f:58:6f:5f:08:7c:e1:43:
         ef:fc:8a:ab:09:0a:fa:08:0d:fa:3b:3d:01:14:fc:f1:28:95:
         da:ea:d4:97:b3:aa:90:e1:9b:66:94:c5:8e:b1:29:20:4d:46:
         a1:67:3e:39:1a:af:bb:a0:9a:b7:f5:3a:92:de:6b:5e:19:0d:
         6f:91:8d:46:a9:67:79:ab:97:38:38:27:27:21:0c:e7:f8:20:
         ec:f3:d9:f7:f3:61:7c:74:24:d0:80:27:78:57:53:d6:25:0b:
         2d:9d:74:c4:44:a9:9a:2e:ce:a4:6b:93:05:78:f0:d9:76:d8:
         45:c7:c3:72:a1:69:47:26:be:49:af:68:7e:a1:31:7b:33:b6:
         72:a4:42:56:b3:40:d0:7f:f6:ee:58:9a:17:15:6e:10:3f:e2:
         5b:4e:47:e8:b8:01:a6:fb:8a:9d:0c:0d:c3:3e:b5:ba:5c:f6:
         d9:ff:ec:05:f4:1d:2a:f2:24:f7:8b:e4:19:56:06:1b:2c:e5:
         83:39:de:cb:1b:53:a3:6f:e1:1f:c3:ef:45:1a:d0:17:3b:33:
         c7:af:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----