Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
File:                     EU05B6zlGbJF_rzuMsO3rUk7KGw.mft (raw, json)
Hash identifier:          T4Jrk71uwOpjyVg1liuo0xram1tTPib5LKH4Y7avSLA=
Subject key identifier:   BB:0F:17:CA:50:85:6F:EF:0A:42:FF:66:F1:DC:74:90:2F:F1:2E:16
Authority key identifier: 11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C
Certificate issuer:       /CN=114d3907ace519b245febcee32c3b7ad493b286c
Certificate serial:       01962DF3D05DE490F174502C0DA078BD0660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
Manifest number:          032B
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: EU05B6zlGbJF_rzuMsO3rUk7KGw.crl (hash: mqaIPiESNrQgJMcQiYFKvbjRTyW5apLSNeQj1MkGjiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d0:5d:e4:90:f1:74:50:2c:0d:a0:78:bd:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114d3907ace519b245febcee32c3b7ad493b286c
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=bb0f17ca50856fef0a42ff66f1dc74902ff12e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:8a:c5:d5:42:59:1b:05:eb:de:3b:06:4a:
                    67:08:aa:7d:c3:8f:b6:18:73:05:e1:2c:0c:88:f6:
                    0e:29:16:b7:90:53:ba:3a:de:3b:41:3c:5a:3c:aa:
                    f0:b6:37:3a:d1:d0:c3:de:63:c0:6b:8e:49:4b:a7:
                    be:e6:ea:0d:8c:6a:88:d8:2c:d4:0f:c0:ad:b0:9b:
                    1f:ac:cc:11:6d:8a:35:e7:c7:25:ae:ce:bb:65:51:
                    48:fa:22:54:e3:e6:c3:a6:a2:ec:24:46:8c:41:fb:
                    5a:59:22:c3:7a:26:c1:84:6c:4c:0e:d4:3d:32:ee:
                    f8:27:8a:41:e8:e0:ef:f0:5b:7c:73:90:7e:a8:68:
                    83:b8:b0:a7:ba:dc:ac:b3:28:db:6d:18:f4:3a:59:
                    a4:70:fb:51:c2:3c:60:7e:0c:5c:cb:4a:f7:cc:d2:
                    82:6d:c0:fe:49:7a:fb:31:65:c3:67:20:09:a6:10:
                    5e:a7:cd:d8:b4:4e:0c:59:21:bc:1b:a7:83:17:8c:
                    61:be:fe:03:7b:cc:80:09:af:03:39:c5:7f:82:5d:
                    02:ed:d9:c8:6d:f2:b4:52:61:40:48:93:da:92:7a:
                    e0:fe:40:9f:a8:ae:3d:a4:f0:6e:00:46:cb:5a:de:
                    3f:b6:b8:63:92:ae:1c:c4:d9:06:d2:0e:23:ec:5e:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0F:17:CA:50:85:6F:EF:0A:42:FF:66:F1:DC:74:90:2F:F1:2E:16
            X509v3 Authority Key Identifier:
                keyid:11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:d3:88:e5:3e:e1:d2:ed:03:ee:4e:14:99:1d:0b:ac:bd:
         14:64:ff:5b:68:52:79:43:c4:34:f4:b0:f3:8c:92:7d:3e:3f:
         c1:ec:d9:a8:d5:13:5a:67:61:43:73:72:e7:76:f0:05:df:24:
         02:b6:49:1d:39:60:dd:fc:db:29:9a:31:f0:df:0e:a7:2b:76:
         f8:52:61:03:7a:11:1d:e3:65:b5:13:f4:aa:ba:3b:37:0f:93:
         59:39:88:f2:54:c3:b8:41:e8:a3:43:6e:03:f1:a9:41:e8:d2:
         63:43:18:d9:19:ca:6a:5c:8a:1b:43:f6:05:f0:43:9e:16:ad:
         cb:7d:90:43:c5:4a:a1:7c:f4:b6:8e:a8:46:3e:a2:31:b9:9d:
         bd:8e:aa:52:d4:7a:cd:9a:d9:e0:4e:9d:e1:88:f9:32:a2:79:
         32:4e:4d:08:bc:ac:3f:30:4c:c5:ea:7f:31:a7:0c:9b:81:79:
         6b:2c:7b:04:a9:c6:40:3d:95:48:2a:a7:14:50:36:7c:f8:87:
         65:61:f0:29:23:2e:c7:18:a9:de:ab:8e:c6:28:25:02:cb:6c:
         b1:2c:40:ab:cd:23:11:7e:38:f7:ab:a5:e5:cd:7c:3e:b8:a5:
         7e:06:ec:b4:09:20:b6:24:bc:ea:74:4f:bf:53:85:0f:fc:b6:
         cd:e5:77:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----