Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
File:                     es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft (raw, json)
Hash identifier:          oJQOfASsdbBDn40jzenoL3u2ZHunUDnD6UsAwGzk21A=
Subject key identifier:   0B:77:B8:76:7F:6C:28:E0:39:CF:A2:59:2F:84:33:E8:4F:12:60:49
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Certificate issuer:       /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial:       01962FB7D8054EB7956CA8D0783C97F5BE6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
Manifest number:          01B8
Signing time:             Sun 13 Apr 2025 15:14:59 +0000
Manifest this update:     Sun 13 Apr 2025 15:14:59 +0000
Manifest next update:     Mon 14 Apr 2025 15:14:59 +0000
Files and hashes:         1: ZpHfWVjuEOKskBrtwaYIwjI0Guo.roa (hash: Wbu0UAoyfqfRNfVd83E/JzBGqxjkg6na3mvNKvAeptw=)
                          2: es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl (hash: vq0ny0T+DXk534dhqMQ7My+T9b8XuC4io4H/yUKXMdk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:b7:d8:05:4e:b7:95:6c:a8:d0:78:3c:97:f5:be:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
        Validity
            Not Before: Apr 13 15:14:59 2025 GMT
            Not After : Apr 14 15:14:59 2025 GMT
        Subject: CN=0b77b8767f6c28e039cfa2592f8433e84f126049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:28:2e:20:f7:61:6b:97:46:1e:e6:68:bb:
                    f4:bf:33:5b:7f:2d:f7:44:72:5a:f1:9a:fd:d9:0f:
                    83:5e:0c:d4:41:4d:1a:6c:bc:77:e5:a9:e7:36:5b:
                    9d:fa:c9:56:dd:30:63:f6:bc:0d:a2:97:14:90:6a:
                    f7:b9:0d:18:e9:ed:b9:75:c0:cc:56:13:97:34:4a:
                    da:a8:2b:33:06:f5:31:33:28:7a:cc:55:4f:b6:2b:
                    83:b3:a6:be:b2:e2:9a:9f:19:b9:b5:2c:1c:87:34:
                    88:7d:06:b7:a2:9f:a6:bb:18:e4:13:ae:a4:1d:e0:
                    9f:94:03:9d:9c:31:7e:f8:1d:0b:d5:a9:7a:3c:a7:
                    ab:bc:e3:6f:48:12:21:b1:69:7c:f3:cb:b2:f0:69:
                    06:40:9e:49:cb:28:45:a7:7e:59:a1:0d:7f:b8:3f:
                    b2:72:ba:fa:20:84:dd:ec:b5:05:9a:9d:01:60:8e:
                    43:65:5d:d0:bc:23:1e:de:19:9f:51:94:0a:68:0d:
                    9f:f8:b6:2a:a1:37:18:e5:8c:0a:1a:1b:d9:6b:09:
                    c9:e4:f9:4f:f1:5f:0a:ab:81:88:90:6a:46:aa:36:
                    3d:87:cf:71:a6:c5:29:65:a9:c9:65:67:1a:89:3f:
                    57:b0:c8:3c:52:3c:b6:b2:9a:01:e4:50:b2:5a:b0:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:77:B8:76:7F:6C:28:E0:39:CF:A2:59:2F:84:33:E8:4F:12:60:49
            X509v3 Authority Key Identifier:
                keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:76:8a:82:97:d4:0b:06:31:09:f9:26:1b:36:da:d8:80:2a:
         db:c5:9f:27:3a:22:13:d7:d3:0a:84:fe:b0:07:a0:5a:bf:b8:
         cd:38:e4:f4:6f:fa:3f:25:88:94:cf:ad:d2:95:18:ca:3c:b5:
         4d:58:7f:97:d3:44:3f:de:cf:cf:83:73:98:da:8d:36:f9:4b:
         7f:5d:18:8e:2f:72:32:9a:e5:db:51:d5:47:d6:1b:b5:9c:79:
         29:7a:f8:18:7f:21:fb:53:1c:e6:58:01:96:b7:38:fe:2a:21:
         4b:c8:c5:e4:4f:d0:2d:ea:10:8a:56:60:67:7a:50:bf:32:e2:
         6a:2e:52:f3:a9:ca:e3:22:03:81:24:fe:6f:f3:50:19:ec:74:
         20:93:1c:d3:dd:bc:fa:c7:c8:de:c4:b9:b3:13:5f:a0:1f:c4:
         02:0f:5a:ea:73:37:dc:c8:04:2a:60:39:57:6c:ee:d2:99:14:
         91:20:e7:77:37:5c:53:c9:e3:ec:23:f7:ea:63:2e:bf:d0:06:
         6a:fa:c1:ef:78:b2:14:21:f7:f1:62:1e:d3:96:c3:6b:96:d9:
         67:94:65:bd:0e:c0:99:74:c0:72:9e:8e:48:30:42:27:09:88:
         98:02:44:f6:ce:2b:5f:d5:6f:f2:ba:da:58:54:c4:12:24:39:
         c2:06:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----