Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File:                     e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier:          +RtSBgHjFo/3iF0En8HcKKxbFR8cNK1sTUKqpzeLD2k=
Subject key identifier:   92:4A:72:70:99:66:E9:D2:3C:F8:E5:53:28:1A:22:52:81:E4:6F:28
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer:       /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial:       01962F0745E9E3FA718E88882518174FE665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: mjgRWZGozOLD1A/vIh/3bpJVqiXaNMxc2ZhKd2yVKcI=)
                          2: hlbCnpGhMRluMY_1waDMmeV9vY4.roa (hash: KZsIHpuRlGx7ybmtLKdiNmONLiSIwlKsEPr24QJ/98Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:45:e9:e3:fa:71:8e:88:88:25:18:17:4f:e6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=924a72709966e9d23cf8e553281a225281e46f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a7:51:90:18:ba:20:0b:5e:f0:df:66:c3:61:
                    28:ca:58:2d:3a:e5:eb:12:aa:d2:8f:1a:0f:e2:2f:
                    3d:13:51:5f:59:cc:22:45:9a:81:44:4b:49:89:fe:
                    9c:7f:b6:14:d6:ab:78:98:d4:23:34:75:8e:10:a7:
                    54:fb:0c:d0:84:c0:fb:8f:97:63:a8:47:6c:15:13:
                    2a:4a:91:93:7b:8d:ed:49:74:bf:dd:77:fa:40:b0:
                    fa:31:5b:8a:9c:6a:5e:18:88:e2:3e:10:ba:ac:96:
                    c6:06:f4:52:fe:dd:3b:81:bf:4c:87:0f:b8:4b:9a:
                    9b:05:81:71:88:f0:c9:61:f6:1e:4e:49:3e:83:9a:
                    96:51:90:1c:ac:f5:ec:98:f8:a5:b5:a6:5d:9b:2d:
                    e4:88:40:32:e8:0c:c4:38:4e:23:d0:e6:65:46:3a:
                    47:47:4e:4c:f2:7e:ff:3c:c0:1b:b8:18:8a:08:1c:
                    01:2f:3c:e4:75:bc:3f:60:89:73:8f:a4:af:ef:07:
                    f0:2c:cd:f7:93:fb:3c:6a:31:d9:22:67:94:1d:65:
                    43:1c:ff:30:09:3c:6b:01:8b:b0:8c:f4:82:df:3c:
                    33:75:f3:1b:f1:ac:a1:ed:07:83:31:b8:04:56:72:
                    85:b9:8f:c9:f9:5c:c4:f5:8d:f5:ab:88:a5:6a:11:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4A:72:70:99:66:E9:D2:3C:F8:E5:53:28:1A:22:52:81:E4:6F:28
            X509v3 Authority Key Identifier:
                keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:9c:8a:e2:f5:36:13:7b:47:ec:9c:f2:c0:b2:82:13:c5:
         2a:bb:85:64:e8:fc:fd:d5:48:53:1c:d8:49:e7:2a:10:7c:f6:
         db:2e:68:5c:ec:1b:4a:e6:39:6b:4e:db:1d:a5:b9:b8:32:9f:
         aa:b4:12:a4:21:4c:39:72:b3:3f:82:d6:6c:9d:1f:57:7d:3d:
         c4:f7:84:d8:a4:7e:15:14:45:b9:17:9a:04:01:f5:4a:25:7e:
         ac:30:98:41:8f:4b:2b:9b:3d:51:21:2e:06:97:19:9c:2b:28:
         72:d3:d7:61:c4:04:da:f0:64:52:44:8c:78:89:60:73:d5:60:
         50:40:4f:74:8b:30:b2:2e:07:24:df:bb:27:bc:6a:cd:9e:47:
         36:85:48:5d:73:df:4e:f5:16:8d:4a:3a:99:7a:42:d5:26:67:
         9d:91:88:a7:45:85:1e:04:ce:65:ac:14:5c:24:44:61:72:8a:
         6e:54:5c:bd:80:03:e1:40:81:56:a5:da:f4:94:3a:21:5b:ac:
         ca:cf:b8:04:f8:5a:ec:78:75:be:6e:37:35:d6:c0:ee:0e:cd:
         d4:15:31:63:96:f1:21:83:9e:6d:c2:9c:6a:3b:d7:d9:8b:11:
         dc:fa:22:5e:d4:5a:cb:e7:8e:72:01:eb:c2:d5:3d:1f:ae:bb:
         63:d0:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----