Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
File:                     e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft (raw, json)
Hash identifier:          eNi0H7xeXQDKQLCdLvMZ94k9PeaNnXBzH2nQPY9f5Dw=
Subject key identifier:   3B:74:EF:5D:48:8E:9E:2E:26:59:8A:1D:19:13:23:77:79:93:98:F7
Authority key identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69
Certificate issuer:       /CN=7b7873f89c2a985327ea7996267423a7751c6169
Certificate serial:       01962E9921BF940D1E079EB1CE22201D7875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl (hash: R47Hbb3TZcKb5oEd5oYznXjynytF5fA3hLt6T8DriVE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:21:bf:94:0d:1e:07:9e:b1:ce:22:20:1d:78:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7873f89c2a985327ea7996267423a7751c6169
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=3b74ef5d488e9e2e26598a1d19132377799398f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:40:14:b5:c4:67:09:a2:4c:6f:ea:a6:78:
                    db:86:d2:7d:1d:ae:a5:26:3f:f3:b1:ae:ef:ec:84:
                    1e:57:45:c0:6d:74:f7:2b:00:2c:d7:17:60:8f:de:
                    21:57:e4:01:cf:8d:33:3b:b1:55:c1:6f:03:66:ac:
                    75:4f:5d:f7:71:5c:1a:ce:27:c9:1e:1b:73:48:39:
                    f3:07:26:53:6d:2d:29:45:ab:a2:04:58:d5:8b:d3:
                    e2:54:74:5f:cb:07:a4:ae:e5:c8:1f:ec:b8:e6:65:
                    ac:e2:45:32:70:ce:50:5b:f2:9b:db:6c:e0:90:52:
                    8b:62:ac:7f:2c:d8:31:41:32:99:2d:ee:dd:1b:e9:
                    42:0f:10:aa:cc:c6:eb:18:8c:31:6c:3c:d5:61:c3:
                    08:66:56:7a:e6:e5:21:20:4f:a9:32:64:e4:50:69:
                    0c:c8:af:bc:fc:5e:54:b4:10:be:a4:f9:bc:6f:83:
                    d3:38:e0:de:31:5c:0e:d8:db:16:eb:eb:87:55:d7:
                    30:69:a1:6b:a7:5a:35:40:f5:d2:40:cc:e5:0a:75:
                    ca:15:fd:01:ce:11:0a:1f:ee:53:1c:66:7a:48:a7:
                    fe:4c:ec:b6:5c:32:9f:8c:fe:cb:a9:a0:dc:0d:9c:
                    96:5f:e5:d1:0a:4b:90:e1:59:72:89:db:56:92:4d:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:74:EF:5D:48:8E:9E:2E:26:59:8A:1D:19:13:23:77:79:93:98:F7
            X509v3 Authority Key Identifier:
                keyid:7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9b:10:1e:8c:e6:ba:6b:83:16:d2:b3:f2:c2:ca:ec:c7:ab:
         64:3a:2e:fe:94:59:c8:17:85:f6:3b:e0:56:95:0c:c0:cf:3a:
         0a:ec:c3:9c:83:0a:79:d8:bb:c1:31:98:17:82:6e:3b:06:a8:
         42:88:ed:49:03:c9:c9:e7:a6:14:63:d7:2a:7a:16:74:87:b5:
         08:24:19:59:d8:68:39:7d:d1:ec:0c:fd:05:dc:91:63:71:37:
         67:f8:55:9c:11:da:8c:01:3c:18:01:92:4a:28:cf:af:9f:01:
         45:41:5f:ce:5b:9f:9e:7b:86:41:dd:dd:a5:93:08:29:46:eb:
         f0:97:48:79:e6:a8:1a:26:0e:71:3f:d4:b5:da:d0:7f:87:55:
         4f:fc:15:27:77:ae:57:b6:de:84:3f:72:6e:09:fe:04:44:f4:
         69:11:e7:8b:f6:ea:68:5e:2a:2d:bd:5e:f2:cb:98:2e:15:3a:
         ad:ae:b6:c1:60:ce:bc:d9:96:31:39:80:04:a2:b9:e2:c7:3d:
         93:10:ce:c3:f4:11:40:f3:62:51:3c:61:c2:62:6f:7b:cc:79:
         cb:4e:b5:0d:bc:c7:cc:84:50:4b:f9:5a:44:7d:ee:0e:8d:ce:
         e1:b6:01:41:f3:59:8f:51:5d:df:79:ac:84:53:ae:e0:ce:de:
         00:a9:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----