Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
File:                     63u7_vWVCecmOYb3gFiaseeZhCM.mft (raw, json)
Hash identifier:          3Ao39KLGRtE9yDA1cG0vV0Xbcdb9dRuUxSLTehq8iH8=
Subject key identifier:   8B:48:4E:AA:3D:D3:B4:93:18:EE:80:45:F6:94:94:34:F6:FE:E0:C3
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Certificate issuer:       /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial:       01962E2B2F8F51B8F948A6D63228611C0E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
Manifest number:          0A4C
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: 2BUGiRoL3RcSi7pY5f5xCjUN0VE.roa (hash: 6n3B6T6zOS7/ZMATij6xHm3dHxmihydJs8pSIyJdQOo=)
                          2: 3vDeAfLkiHCXh_bvB_uIne94H5g.roa (hash: b46TBjcEv5nDO9EWtbqceuM5D9jO8fm++JeI+6HPFkk=)
                          3: 63u7_vWVCecmOYb3gFiaseeZhCM.crl (hash: 85LPIVX9ptUW05Yfnx6MNkskHKXcvPsBBEG/U/XCgFA=)
                          4: JuLc15VQAUmfB5AhoFLPEFJjfOM.roa (hash: O2lLcciXAiORRxhqLiNEE2RffnRd8Q3rIUVOEkgnsXQ=)
                          5: LlVSfF2zbrfiTXsgpEfHg8iUgFg.roa (hash: YW2S4XaDpuDeBAX82B6q2dhsWAkKwz2ghZXjdNsB/3s=)
                          6: _cTjsccOlGfEayp8PXkvdYi_98o.roa (hash: FJYOiN3Fx5xaiccdaHyFz//7kwAj9hCTVSJd74dQwjU=)
                          7: i7e88REZIOCxR1OxendrEYYVqcE.roa (hash: NlgmAK3hiLBR5dH57/MCWPhaMtt4b6Gh+Scb1REySlY=)
                          8: tn6YiE2_z2Bgvd-QfHkeVEmemUU.roa (hash: hY4mdHuIs45tX1gpYMoJmJu5qNi8mSFLm+F2DSiuG10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2f:8f:51:b8:f9:48:a6:d6:32:28:61:1c:0e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=8b484eaa3dd3b49318ee8045f6949434f6fee0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:8f:4b:5c:0e:ae:80:7a:bc:05:51:8f:fc:
                    34:51:05:1d:30:54:93:cb:09:cf:05:f4:8c:a4:3c:
                    b7:e6:10:53:42:3f:93:77:24:2c:79:f6:03:87:70:
                    77:9b:88:55:f6:fa:3a:e4:2e:2d:e7:7a:17:5d:6a:
                    cd:5a:78:d1:29:b6:ad:fb:4b:b0:8a:ae:80:b8:5d:
                    b9:4d:e1:cc:2d:f1:ad:70:66:fd:e7:b4:2f:7d:b0:
                    a3:f6:6c:29:9d:20:ca:40:c2:58:1f:ad:ef:ff:94:
                    42:91:51:bd:69:b4:e0:d8:52:c1:88:79:0f:47:84:
                    f1:f0:ed:ea:37:54:fe:cd:13:d5:52:1b:a1:18:12:
                    11:94:ea:b0:dc:ce:a7:49:6e:c6:b5:c8:fe:d2:8d:
                    94:ab:34:81:fe:ee:6d:a5:51:7b:03:3c:11:df:99:
                    1b:a3:74:fc:46:08:7d:26:7a:87:cf:d1:a1:e3:79:
                    22:24:77:49:b4:90:66:4c:25:b9:6f:9f:e7:5b:19:
                    a4:29:79:07:ec:07:8b:28:c5:34:ff:c7:c5:38:c1:
                    40:76:55:d6:e7:5a:7e:5b:55:15:a0:f9:56:b3:b7:
                    da:17:5a:9d:f1:0a:c1:c1:79:95:09:a8:ee:8e:61:
                    0e:74:8f:79:90:75:35:31:99:c5:67:62:ee:a3:87:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:48:4E:AA:3D:D3:B4:93:18:EE:80:45:F6:94:94:34:F6:FE:E0:C3
            X509v3 Authority Key Identifier:
                keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:56:ed:cf:51:f5:70:ea:3d:a4:8e:c8:e1:78:1f:43:2a:14:
         12:79:43:57:18:ea:1d:79:82:89:3a:e4:7b:6b:b3:e1:7a:8c:
         4f:86:41:cc:a4:50:34:c9:b3:0c:5c:12:e2:05:42:14:9e:6f:
         57:dc:8e:9b:30:63:e4:75:55:32:cd:f8:22:54:25:e7:68:c5:
         d5:c8:01:5a:d5:fc:fe:ef:08:e5:b1:c1:e1:11:a6:44:5b:4c:
         db:69:25:52:7e:c9:54:d7:ea:5a:cb:3b:b9:6f:cb:aa:da:1e:
         26:3e:a6:c7:a9:11:f9:bd:db:48:bb:ec:9b:06:39:c5:e2:44:
         e8:76:2e:4f:94:fb:fa:56:19:05:87:85:51:61:43:ab:89:4b:
         56:85:88:68:d1:2e:b5:98:1b:49:2c:08:8b:ce:3b:86:59:f6:
         14:f7:2d:70:6a:1e:42:0c:82:d6:4b:4f:05:ca:ea:6b:94:dd:
         b9:5e:5a:12:e2:3f:b8:28:fc:87:e0:fa:05:65:27:9b:c2:eb:
         52:7e:eb:85:99:8f:c8:e2:54:de:82:0b:13:bf:6c:fe:c3:52:
         ab:8e:73:91:65:4c:65:83:72:8c:1c:b5:35:f7:b7:7c:c1:66:
         e6:21:c8:bb:d3:2e:5f:32:78:b0:72:67:00:06:4c:75:1d:40:
         93:15:9e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----