Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File:                     deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier:          b5RpNy9IgjQOuV5Hwh/iB//6O19apzGCQ41UFxiDSRc=
Subject key identifier:   81:D4:4C:E5:B1:AC:65:39:68:32:61:87:13:EF:6B:E1:B4:76:76:A4
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       01962ECF93123FF12F3F57322FB2D52257AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: UJAjdPQrd8bP5k3ucoOuD61_MT8.roa (hash: ugk9F1DdJco8dK5O++Cvmb5dblVQF4BV4yb8wudILQ0=)
                          2: WkmHxNpKrmAzpx_FXkIaqhpVbpg.roa (hash: +AeFew5fsUdx9Fz3OOuJ7ZKCrATyNvcvfW0fCxc+tvg=)
                          3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: 7ai7BxkEslDmokCZw7OCZy9EDmDTt5IqhdZscKdH0ns=)
                          4: imLX_iKSVxIt55dbqRMupQNb-6o.roa (hash: OviNWocn0RhLkHHteMWnzyr2rnMguzIPeb1JC9urBc0=)
                          5: iwdwl1HuN2YXg9VICxrnQ2L8T_o.roa (hash: tLBry0LnEHMR25EGcYFuNe2nISzjy4sXmppIiMI5cVo=)
                          6: ju7dlcjXTVtzrpg-cXuTrngFgtw.roa (hash: Odms44ovs7hGv3jdYt/7+590lUec8LGS69mCjmZU8q4=)
                          7: rsxSpj9moP8LtPzNvFBSE3jnhTY.roa (hash: EI5toUib0yn2k83FMVjkqamZ8A/+xIBPYiOu2bZVLHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:93:12:3f:f1:2f:3f:57:32:2f:b2:d5:22:57:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=81d44ce5b1ac65396832618713ef6be1b47676a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:4a:1d:50:72:7b:a1:a1:7d:a7:3e:29:7d:
                    8e:37:c5:85:cc:9f:6b:48:ff:70:e7:13:60:9c:f4:
                    16:37:ce:49:bd:88:98:53:78:61:80:24:0d:fd:1b:
                    78:c3:5c:44:30:c7:77:23:9f:97:81:a2:04:5b:0d:
                    74:9b:55:35:a8:55:bb:7a:3b:19:4e:ef:47:aa:1b:
                    27:ba:be:03:40:90:c1:28:ea:18:4c:f0:cc:df:c4:
                    67:f6:9f:a0:9b:85:33:87:fc:8b:18:9c:1f:8c:25:
                    27:47:39:6d:78:b9:31:ba:8a:08:b5:96:f8:a5:12:
                    04:8c:7c:57:3b:52:30:79:00:e0:16:bc:ff:70:13:
                    8a:69:0e:1a:5e:c1:2a:9e:e7:39:a3:02:bf:df:4f:
                    b1:d4:2e:3f:78:92:b5:b3:5d:17:4c:31:46:8c:a2:
                    ad:b2:02:17:79:c1:d9:7d:40:59:36:83:1d:6e:06:
                    a6:8d:a6:09:f4:e7:8c:85:eb:d4:57:fe:4b:ee:6d:
                    4d:e8:65:5f:9f:43:86:13:9e:d1:90:4e:f7:52:c1:
                    55:21:97:49:1f:ee:28:59:af:79:3f:8e:96:5b:15:
                    a4:bb:21:55:79:39:cc:ba:17:d3:4b:85:2d:b9:41:
                    e5:96:9d:06:0d:1d:30:ff:5c:c9:84:20:b2:a1:42:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D4:4C:E5:B1:AC:65:39:68:32:61:87:13:EF:6B:E1:B4:76:76:A4
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:0e:78:61:67:5a:09:63:f1:af:eb:c1:42:20:7f:01:99:9b:
         4d:35:a0:57:f6:7b:7d:b4:53:8b:b1:60:39:d3:44:6d:cc:24:
         79:ac:d6:b4:2b:f2:60:5b:79:e8:54:36:75:70:91:91:62:54:
         70:bb:8a:ff:5b:c4:ca:a7:5f:dc:44:01:98:db:eb:96:d7:3a:
         16:0a:98:e2:74:47:0d:1c:06:89:1c:f8:fb:1d:ab:5e:04:a0:
         f2:57:22:fc:4a:92:9e:f8:7c:2d:bb:b9:52:63:e3:25:1f:fe:
         7e:2d:89:54:58:03:4d:fe:07:7f:4c:9c:f2:32:70:d9:51:46:
         f5:67:c0:2d:e3:63:e5:6a:01:b4:53:6e:15:31:d4:0a:38:48:
         0f:d2:03:3a:57:57:a4:2b:46:ee:9f:50:71:ba:fb:cd:41:7f:
         b5:49:d4:51:40:43:7a:55:65:e8:05:eb:10:0a:ac:87:1d:ea:
         b7:22:f6:f8:42:92:8c:70:0a:79:c0:13:12:40:b4:cb:fe:75:
         40:12:36:4f:6f:f7:44:04:cd:63:f2:ec:8e:66:2c:39:45:ea:
         e1:40:9c:3e:cc:fb:1e:32:0f:33:a1:40:ad:07:75:f4:4b:c5:
         2a:93:cf:1d:c1:b9:65:6a:b0:c1:24:8c:3b:49:dc:32:70:a7:
         0c:c1:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----