Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
File:                     eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json)
Hash identifier:          fZXDz1vagPAQfFHtDkfZwNmS/t6o8scZ44aa1CIemG0=
Subject key identifier:   66:07:8B:87:A9:94:E6:6E:13:50:D0:6F:35:3F:CC:1A:82:F6:4D:DC
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Certificate issuer:       /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial:       01962FAB503D8F5DB47E83247687F255C11B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
Manifest number:          0BD3
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: ENQ20xMkXGryE3-R9yWMozdkmQw.roa (hash: KvgZxgzrzbwhIVZaQOAAyDaKtwhWmv2kX8Vy8zgIZhY=)
                          2: UZ6oBAYvDqEIadhrw2DO49OXd4M.roa (hash: hNLRe7VoLal2kN+aDGwW7RFMXgmWRT2E6T33XzWJ1Fg=)
                          3: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: lCjdTac3wKQgkc3d9uOj6DybKtQXZZJ2OL7DdZWPFvE=)
                          4: ij_jY1B8G7JPOxZEgHI2au9jigs.roa (hash: 9ggbS2YlHgtm+sTyMI/V9GVMhp50lC25Zf0jsvILQrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:50:3d:8f:5d:b4:7e:83:24:76:87:f2:55:c1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=66078b87a994e66e1350d06f353fcc1a82f64ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:35:ef:cd:04:2e:c4:6a:67:b3:92:83:ac:
                    8d:69:5b:d0:df:2a:5b:86:e5:8f:24:6f:79:8c:e4:
                    f1:d4:9e:b7:01:df:ad:53:28:83:fa:c0:a3:1d:83:
                    1e:b4:47:43:4d:cd:36:a9:48:18:f5:ae:80:0a:cc:
                    2b:94:10:ac:a1:63:d5:3d:6d:57:b4:00:be:d0:85:
                    7a:e6:69:d7:54:a6:13:bd:ac:f0:29:aa:68:bd:bb:
                    91:1d:5f:d5:df:2a:fa:0b:26:d8:0d:58:ac:3d:df:
                    05:b4:c3:3c:12:e2:70:af:b2:ff:9e:fa:3a:c3:80:
                    8e:d2:a2:f5:e6:20:68:b9:d3:c5:be:2f:6d:85:59:
                    73:e2:5e:7d:62:72:a5:3d:2f:ac:a7:e4:3d:99:a1:
                    5e:5e:4a:f2:33:4c:16:e5:3a:ff:77:06:13:6f:6a:
                    9e:df:a3:a6:9c:29:e9:65:97:f8:20:c6:15:3f:f0:
                    f0:d4:ea:b1:8d:95:f3:89:50:74:15:c4:0d:aa:2f:
                    5d:de:80:59:cc:88:9b:d7:8e:62:08:a3:6d:6e:fb:
                    06:14:f4:83:15:00:f5:f8:67:f8:93:e1:14:39:e5:
                    c1:c0:c3:ee:66:ca:5a:72:07:36:09:19:86:77:d9:
                    e4:f7:83:63:01:0c:63:4f:3f:92:4e:88:13:5b:bf:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:07:8B:87:A9:94:E6:6E:13:50:D0:6F:35:3F:CC:1A:82:F6:4D:DC
            X509v3 Authority Key Identifier:
                keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:52:02:af:2e:59:fd:bd:df:29:0d:3c:96:88:af:55:93:5e:
         2f:dd:25:5d:b5:d2:55:99:3e:bd:4f:77:49:6b:c1:3a:82:c2:
         fd:9b:5e:1d:86:29:4f:25:5e:9a:ac:ea:48:3e:9c:a0:90:bf:
         18:5a:c6:05:09:85:2e:4f:d4:ff:8e:19:bf:e7:16:dd:43:42:
         59:63:92:c8:e5:7a:e2:25:cd:4f:24:ce:b0:24:45:54:e2:6e:
         f5:af:23:1b:19:de:9e:11:89:9f:8b:61:ea:b6:fc:f5:b4:25:
         db:60:4d:5c:44:a3:b7:55:04:2b:75:56:ab:73:fe:e6:19:2a:
         6b:57:70:a6:9a:5f:7a:ab:6c:88:cd:c6:39:dd:4d:6e:cb:c2:
         ac:c3:c2:9d:6f:46:6a:3a:1d:32:48:63:a3:9f:e2:6d:4b:fb:
         f4:05:f2:a7:de:bf:86:47:86:e9:47:e5:1b:a3:9d:67:5f:89:
         36:aa:00:8a:27:94:51:91:2d:a2:0d:21:f3:5d:f3:9b:f8:eb:
         bb:57:64:b7:cd:1b:77:03:46:7f:58:8e:4b:19:9a:12:dd:7e:
         bc:d0:d9:c8:7f:56:0f:73:5a:d1:91:66:ed:60:ac:33:0d:a9:
         14:aa:16:be:93:d6:a2:db:ec:c4:53:dc:e5:3c:f2:c5:8a:a5:
         ac:0c:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----