Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File:                     t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier:          GR5F5XdyMz4L4mquJ9RNT3Ms2LYpA3piTDNdI3twxlM=
Subject key identifier:   54:A0:8F:2A:EF:18:9C:EB:C2:18:7F:26:C4:2E:19:5F:BC:7F:19:BF
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer:       /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial:       01962DF432A8896330EFE2839C256469ACA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: 696z34QMsC6_vR7KEfwUSvQdpWY.roa (hash: yNhDUKimDD5hTy/VhafEDO3vPLqIP7iVfa9gPXqtn9I=)
                          2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: zbEq8FaRs8UOwP/fWYjC8XjQSp5GoaNxYOVYLYNqpIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:32:a8:89:63:30:ef:e2:83:9c:25:64:69:ac:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=54a08f2aef189cebc2187f26c42e195fbc7f19bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:f3:be:60:46:27:48:8c:06:7a:7e:c9:ed:
                    cd:ba:cd:83:b0:da:1e:fb:bc:af:c5:68:fb:5e:b7:
                    4c:a8:56:d0:d1:55:72:f5:74:0b:da:52:73:0c:84:
                    3a:e3:b6:79:fe:28:9f:06:48:33:c2:11:54:5d:fd:
                    88:23:10:fd:1a:7a:b5:38:14:7d:df:4e:95:4a:52:
                    c1:f6:7f:0b:63:8e:e2:10:70:68:3f:a6:0b:15:5d:
                    ca:4c:51:db:55:f8:ca:15:e0:ad:70:25:c7:97:3d:
                    b9:e1:4b:8a:47:6f:21:6a:9b:54:d9:cb:0d:5d:76:
                    dc:1a:ab:ac:3b:7e:a0:24:8b:25:25:af:17:6d:37:
                    37:82:e9:15:a8:e5:e4:57:69:81:36:3c:4e:49:27:
                    31:0f:91:12:fb:94:48:c5:fb:03:71:50:3b:39:a6:
                    98:b7:b6:9c:be:6e:3d:c5:6c:65:2d:cb:23:86:48:
                    3b:cd:62:f7:a8:6c:1a:72:88:05:b4:70:61:eb:a2:
                    76:fa:22:fa:b7:47:ac:9c:4d:14:48:a2:d4:b4:b1:
                    65:9b:f2:3b:63:80:31:86:4e:85:d9:48:a7:46:11:
                    38:5c:2e:0c:47:6d:7e:8c:17:c7:10:40:ed:4e:ef:
                    3c:e8:7f:05:18:c8:6a:f7:8d:37:62:82:74:71:39:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A0:8F:2A:EF:18:9C:EB:C2:18:7F:26:C4:2E:19:5F:BC:7F:19:BF
            X509v3 Authority Key Identifier:
                keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3b:6b:81:36:fc:ee:a5:b7:f2:7d:82:21:d9:8b:d0:2f:96:
         99:10:fb:65:fd:ff:07:13:e4:84:d3:03:7c:5e:bf:31:48:10:
         56:c9:74:05:02:b4:f5:ff:02:0c:b6:78:85:0e:cc:99:ab:64:
         92:c1:6b:9e:21:0e:11:a8:9b:bf:29:a3:3e:8c:ab:48:90:56:
         19:03:89:ea:bf:c1:7f:e5:91:89:b1:c0:16:80:3a:18:14:34:
         70:69:5f:f5:13:b7:cd:94:7c:f3:52:15:c0:bb:23:db:4f:85:
         8a:24:cd:f5:bb:74:f6:7b:83:58:27:d8:fc:21:81:b6:63:10:
         f8:51:3f:d0:29:fc:89:93:00:7f:79:1a:5e:0d:6a:55:1d:29:
         c2:39:1f:eb:34:74:f2:7a:84:cf:49:e9:e8:fe:47:d8:d7:8e:
         41:35:e5:41:94:c2:c6:ca:e9:89:6b:bc:10:5c:e1:81:9b:aa:
         ef:bb:20:cf:d2:23:92:7d:4f:63:72:07:db:70:58:06:a1:10:
         82:40:31:67:73:56:2e:0e:48:3b:8e:9b:89:65:03:72:38:d2:
         35:07:be:7f:df:a2:64:0b:b0:a2:55:9f:58:c4:7f:49:28:d9:
         2c:36:13:1d:61:f6:80:5c:04:3f:38:8c:d2:01:6f:22:c5:64:
         92:48:e7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----