Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File:                     Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier:          +/HC4yR0q9hA4x+il56sIgz7GiwIg+dDc6DTSINSLfM=
Subject key identifier:   FE:EE:5E:3B:A5:C7:4D:03:AF:E9:5B:FF:69:76:E6:BB:AE:C8:ED:A8
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer:       /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial:       01962E6186D8D58F92A242DDF9E265F016EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number:          123A
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: 0VHyYvVwFLCaU//KrPus71pDFucfIH3AEUtFTA0rfxQ=)
                          2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:86:d8:d5:8f:92:a2:42:dd:f9:e2:65:f0:16:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=feee5e3ba5c74d03afe95bff6976e6bbaec8eda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:76:d8:9a:73:4d:45:af:f7:b7:27:11:c1:
                    e5:bd:e9:02:ee:b4:8b:9d:2d:ed:30:06:7a:89:d6:
                    21:3d:c9:f2:60:62:48:cb:38:4e:e1:26:b8:cb:1f:
                    f6:b4:18:45:ff:96:77:66:23:b1:b2:03:ce:3f:ef:
                    e8:b2:0f:1b:5a:f9:dd:6f:8c:b0:db:91:6e:8e:31:
                    7c:63:97:c7:a8:47:12:18:7c:55:ea:1f:d6:2a:d4:
                    0c:e2:1c:2f:4a:5b:94:ce:57:01:88:a0:6c:06:7e:
                    1b:e5:28:89:fb:0a:2b:9b:9d:40:0a:47:3a:3e:b2:
                    49:3e:46:96:32:b0:44:35:9a:e8:1d:d2:e2:e8:69:
                    0c:cf:ad:eb:20:0a:37:37:9c:ca:2e:7c:29:85:b1:
                    b5:e0:3d:7f:91:5c:8f:3f:33:10:94:e0:97:09:15:
                    4f:58:5c:8a:e8:16:dd:90:09:94:a0:58:96:11:0b:
                    06:9d:1a:e2:fa:69:55:f0:8c:80:7e:f9:d7:6d:c2:
                    23:e9:fa:26:6f:ff:92:21:5e:64:1c:40:bf:11:63:
                    12:c9:03:f1:f6:a1:e7:3c:dc:86:cc:d8:2a:14:da:
                    ae:00:e5:5e:7e:f2:53:56:00:23:5d:b9:97:34:61:
                    33:4d:01:72:fa:30:88:c5:9a:b1:18:22:a1:c5:d3:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EE:5E:3B:A5:C7:4D:03:AF:E9:5B:FF:69:76:E6:BB:AE:C8:ED:A8
            X509v3 Authority Key Identifier:
                keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:1c:a0:1a:09:be:e9:be:ba:03:57:66:52:d9:e3:02:9d:
         c5:ca:b9:39:80:7b:05:f6:fd:66:20:53:0c:28:3b:0e:69:c2:
         74:f4:3a:69:7c:ad:64:4f:1d:15:29:5f:ca:2d:fa:83:d7:2c:
         ec:44:2c:ff:0e:70:93:bb:68:38:36:c3:a6:d9:19:44:97:2e:
         cd:6d:c8:0d:28:94:ff:39:1e:e2:cf:f2:b6:29:08:48:e7:f5:
         19:0f:19:ac:58:7c:09:32:3b:66:3e:c2:3d:1e:b4:bd:37:f2:
         62:ff:64:6e:a9:5b:f8:89:02:b4:e0:ee:a9:16:24:d7:77:83:
         02:6c:3c:e0:74:80:fa:2e:50:55:ab:a1:83:7a:ae:49:02:01:
         84:e8:ed:1a:f8:72:d7:bd:2a:44:45:59:51:a2:09:07:84:66:
         4f:06:d5:a7:d1:61:81:89:6e:0a:27:43:d0:f8:0b:27:8c:01:
         14:0c:64:bd:5e:95:f8:77:2c:12:c9:90:3a:dc:23:65:10:41:
         98:70:24:cd:a5:7f:98:6b:7d:ac:10:92:29:51:aa:f5:37:dd:
         22:d6:be:d0:23:21:58:bd:3d:db:7f:ad:19:26:22:c5:b4:61:
         e4:14:19:51:cc:8e:6d:ab:d6:97:1a:fd:e7:34:29:55:a1:dd:
         01:5a:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----