Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File:                     ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier:          EpXdIR2Qzdvl7I8Oz9Jdh+ggJjOcQF6tPodwUC+6YEg=
Subject key identifier:   B2:02:B8:1B:D4:99:ED:A6:FA:D2:2C:05:38:AF:94:35:08:E1:19:91
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer:       /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial:       01962E61DCBF1E782934F81CA795CB6E42F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number:          31
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: XmpF35ngj-yNyTGypvCjCYGlpo8.roa (hash: 8XBhk5d8sjaCG8b1mNcJkFy1C7vdRPz5bf2EYXdWLuY=)
                          2: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: SaDLBFk++OjsmuDz9lpGOrcJwVT4hJCLWZBC//gb47o=)
                          3: te8WoSPpdBUUYvd1WKkLZbO72RM.roa (hash: o04bmvCElYlWOOu299mgLz7Vc+VKn0vUSkUyiAJD0o0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dc:bf:1e:78:29:34:f8:1c:a7:95:cb:6e:42:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=b202b81bd499eda6fad22c0538af943508e11991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:55:4d:db:6a:e5:71:68:6c:40:21:21:ac:
                    3d:35:54:e5:eb:3a:92:28:29:e8:6d:a3:96:a1:b0:
                    76:dc:d1:cd:b5:08:4f:cf:76:12:03:83:6e:2f:8a:
                    fa:46:ed:45:5c:f6:f3:4e:6d:94:8c:0d:91:ee:23:
                    6a:37:6e:bc:f4:f2:72:01:ce:57:85:35:d1:ed:bf:
                    01:ea:64:c6:dc:23:0b:c0:ba:86:8c:4e:f0:b3:16:
                    03:eb:e8:95:dd:1b:02:21:be:b1:7e:fe:19:fa:d2:
                    de:41:43:f2:2b:d9:7a:fc:7e:ed:61:ac:1f:18:f5:
                    c4:0b:02:40:4f:7c:3c:b7:15:6b:66:19:14:46:e8:
                    0c:c0:fd:4a:53:3d:e4:fa:22:42:7c:7a:d9:a1:fc:
                    9b:5e:16:77:1c:a1:c1:d1:8e:fe:bf:c5:0b:a2:38:
                    9a:24:ff:6d:38:c4:bf:7d:da:4d:ac:2c:d2:2a:3e:
                    07:6f:14:42:c1:6e:e1:bd:57:9a:da:a7:b3:4c:8a:
                    70:e7:aa:85:7a:42:95:8a:cb:99:67:50:ee:be:aa:
                    87:4c:2d:5b:05:76:76:6d:c0:16:82:7c:72:74:a1:
                    28:22:c5:46:13:7e:80:40:13:67:24:2c:1f:f2:a0:
                    ba:1b:7b:4c:69:ee:ff:c7:5b:0e:d4:bd:df:d3:b5:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:02:B8:1B:D4:99:ED:A6:FA:D2:2C:05:38:AF:94:35:08:E1:19:91
            X509v3 Authority Key Identifier:
                keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:a1:68:d1:1f:aa:6f:bc:cb:ad:cd:1e:35:26:f0:21:2c:
         ab:74:18:67:e3:a2:9a:ba:bf:b7:da:39:b3:3a:e9:f3:21:77:
         d5:b1:5f:62:67:89:38:66:ef:a2:4a:1a:3a:06:58:48:4b:68:
         4e:0b:df:2f:94:d6:b1:c6:09:e2:42:bc:c9:6c:30:ef:ef:a2:
         af:f2:67:82:c4:24:45:39:e2:d2:81:8c:b4:e7:5f:2a:89:46:
         be:7f:be:33:fa:4e:14:40:af:cd:5f:65:40:a6:e9:76:1a:1a:
         f2:e8:fe:8d:36:40:7a:82:63:38:82:7b:ca:83:05:30:e9:60:
         24:3f:4c:9e:93:97:4a:c4:bd:db:a7:31:74:ab:35:23:3d:37:
         a4:c1:db:bb:63:ab:8b:83:17:1f:d0:f5:1d:c5:2f:51:49:c7:
         c5:4d:dd:66:08:fa:04:33:54:77:f5:3b:c5:a1:e7:0a:08:e5:
         d8:02:db:83:6c:96:bd:7f:23:33:a2:ef:54:38:3d:93:ee:4e:
         d3:26:58:ca:e3:c8:a0:45:81:04:24:7b:cf:f0:99:f5:ac:46:
         f7:e2:eb:4e:29:c6:c4:ad:9e:ad:e2:36:5c:b4:17:a8:fc:8b:
         ee:62:4c:6d:1a:b9:7b:b6:32:31:37:04:48:10:69:6c:17:17:
         41:bd:55:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----