Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
File:                     7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft (raw, json)
Hash identifier:          eCjd98xJNeiVChaIqtZdfi+a8nb4gP0SxmtPvb0/G5E=
Subject key identifier:   9D:25:BF:51:DA:34:D8:01:F1:56:3B:14:D5:BB:94:49:F1:A9:32:C9
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Certificate issuer:       /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial:       01962ECFBD88124F978AE7E4BF3FD3447630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
Manifest number:          128D
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: 7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl (hash: pX23C6K2cNtz5fuGWBCwtoPj53c+l5oRC9HtBFQ2P9M=)
                          2: 87P_Ci_iU70ncygI7CnpcT0_t3U.roa (hash: Dx/6MtnsELNcfT3Kd/IAvBHzZJiX4ArB2AnOrW867fY=)
                          3: BVScilCB5AVz4BdoAZN-XzcZq3M.roa (hash: Oi7kCEaMjqNz1/ABo7GXrFFSRxf0di49byHZnkWl/xY=)
                          4: RTkmkNiaF4qMZtlUnnCXs8j2Uz4.roa (hash: vl+4xCPXpGUni/jcI0T4WydcImVmhjMnOzOiGTD/SYU=)
                          5: peAC0jemS44LL9eAMtnnvfhl0QQ.roa (hash: M7HBy7+sXugALnAMwzpYlFnUldtIuCHef9Q+Yk5qLvo=)
                          6: tB98Odb5xySPuatQxtBYr1TkuKY.roa (hash: jqy1Pxj3jnhl57ZRWHAF9knEyjWAZ+BFSBls3RcvCpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bd:88:12:4f:97:8a:e7:e4:bf:3f:d3:44:76:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=9d25bf51da34d801f1563b14d5bb9449f1a932c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:f9:82:ab:78:4a:ce:9f:dc:d0:f3:7d:0a:
                    da:42:01:61:3e:5e:7c:08:2f:ca:19:c6:0a:45:1d:
                    3f:fa:e2:5d:35:0a:1f:a1:a3:de:96:3f:fc:48:6a:
                    d5:bb:c8:05:37:c5:37:4d:ac:2b:95:5d:0f:23:f4:
                    59:48:a9:f6:81:9d:4d:29:d8:1d:28:ab:b5:4f:31:
                    e2:ce:a4:25:c5:3a:14:a2:b2:47:12:ef:7b:31:62:
                    16:0e:04:74:6c:26:45:fa:f8:41:cf:2a:8b:89:3a:
                    a2:82:47:58:65:d2:cc:55:50:e9:3f:c7:c0:a5:5a:
                    b3:53:12:f3:9a:be:2c:51:fa:9a:07:6b:31:fe:8e:
                    b6:3b:30:86:ab:a2:fb:5e:30:83:c2:14:2a:21:76:
                    15:21:78:e2:59:23:8b:96:b5:ec:97:a1:52:1b:90:
                    f2:74:ea:55:84:c2:27:31:3f:55:6c:b9:01:ec:7c:
                    d5:5c:d6:65:75:03:5b:fb:47:7a:e0:63:e8:33:98:
                    75:c4:96:88:b6:20:d4:44:b5:29:2a:a5:8c:b4:91:
                    fe:cf:18:63:16:fe:b5:0c:fd:43:1e:aa:28:0c:19:
                    85:a7:b9:9d:54:09:e5:02:d0:72:92:02:4d:79:65:
                    50:0b:ab:d8:42:7b:48:2a:c7:9c:d7:84:8e:29:d6:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:25:BF:51:DA:34:D8:01:F1:56:3B:14:D5:BB:94:49:F1:A9:32:C9
            X509v3 Authority Key Identifier:
                keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:6a:be:27:8c:01:9e:3f:fc:27:fe:71:dc:e0:d2:dd:58:
         c7:e1:e8:c0:3b:80:14:e4:20:91:8b:2a:f0:d2:2b:a9:ac:47:
         6f:40:9b:4b:5d:70:7a:2b:21:4c:90:61:33:4f:a9:dc:b1:9b:
         1c:53:03:8b:a1:8e:90:11:d5:36:71:7a:71:8e:82:ee:0a:c6:
         83:6b:56:74:87:71:05:b5:ea:26:ea:a3:2a:a7:ed:98:55:8b:
         7b:e4:57:ee:46:8c:9f:8b:b8:44:f8:a6:96:f2:47:1e:43:81:
         bf:f5:b1:73:43:50:29:9e:c9:26:95:af:0f:2f:33:64:e1:8a:
         11:7e:25:94:f5:ac:1c:9a:db:68:53:0f:bc:fa:3e:86:7c:08:
         60:65:16:9f:02:9a:95:9d:ad:e7:a9:2b:fb:72:a2:f5:6a:d4:
         35:dd:91:05:ba:ab:e3:71:2b:83:88:84:7a:e1:9f:fa:a7:71:
         6e:14:cf:b1:58:e8:c1:cc:58:f9:05:f7:c6:85:83:b8:d2:54:
         b8:47:3d:e5:ec:20:28:3b:92:5a:fa:d3:26:dd:3a:19:56:55:
         a8:ac:c2:45:a7:80:30:b2:4b:4b:9e:4f:03:37:f6:88:72:cb:
         28:9f:47:2d:af:dc:01:91:df:d5:0f:ff:09:ff:e9:86:45:be:
         05:3a:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----