Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File:                     h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier:          kEatGmHBxZvUYfAK6/q1nilTGFPcoO86Dzn56Wrwg7w=
Subject key identifier:   FE:9E:C9:D7:63:52:22:00:71:83:A7:44:AD:6C:B8:30:D3:BC:C9:4C
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       01962F068035504D18AD46A8179D6D37E5FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number:          0E79
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=)
                          2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=)
                          3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=)
                          4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=)
                          5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=)
                          6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=)
                          7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=)
                          8: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=)
                          9: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: RVChehmGfTjugsju5HLbuLD12jNWaWLkfvsr16fZDRw=)
                          10: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=)
                          11: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:80:35:50:4d:18:ad:46:a8:17:9d:6d:37:e5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=fe9ec9d7635222007183a744ad6cb830d3bcc94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:28:8e:7f:18:3a:b5:7f:c4:60:09:8c:89:
                    99:27:24:e7:1f:c0:5a:2b:07:a6:aa:32:5f:49:f2:
                    5c:ed:9f:22:f8:c3:cb:c7:39:3b:dd:a5:08:ab:ca:
                    8d:84:0b:32:53:70:a2:9b:bc:6a:8a:cf:b4:65:24:
                    2c:2f:39:f8:f7:0c:de:38:71:b4:99:71:7f:f9:df:
                    6a:ad:d7:f9:a1:28:65:57:09:0c:0e:e8:4f:2d:7b:
                    09:fe:69:86:65:03:1b:1b:77:44:b1:ae:7c:ad:50:
                    53:fd:57:79:03:81:bb:f9:54:fe:25:a6:ad:57:cd:
                    fc:c6:6e:fc:f9:cc:c4:64:3f:21:a9:2a:3c:13:76:
                    6a:0d:96:83:33:f4:5d:09:fa:21:6a:6c:02:f3:8e:
                    99:4e:7a:19:bc:c9:4e:47:cb:22:1f:7e:bd:65:77:
                    4e:e0:2f:75:52:6a:82:0c:dd:94:d9:b2:bc:5a:4e:
                    30:d6:73:66:fa:2f:89:79:fd:af:24:b4:2b:57:53:
                    51:ca:d0:92:a4:7f:c8:26:8e:73:25:1f:71:8d:cc:
                    4b:66:60:6f:57:fb:49:56:96:31:f1:62:44:1c:e8:
                    8b:80:7c:0f:2b:4a:a2:d7:ca:bb:10:e1:05:c7:8a:
                    14:4e:38:66:32:54:12:38:14:07:0f:fb:1f:6e:1c:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9E:C9:D7:63:52:22:00:71:83:A7:44:AD:6C:B8:30:D3:BC:C9:4C
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8e:ed:67:c8:4c:f8:5c:85:bc:0d:a4:6d:8b:48:94:f7:1e:
         cc:c6:c5:07:05:64:93:12:e4:af:d4:e4:9e:cf:cf:82:4d:4b:
         e4:08:d3:56:be:33:2e:df:f4:49:eb:ac:50:30:11:99:11:3b:
         0f:8e:bf:34:78:43:63:d4:be:75:d1:0a:8f:8a:10:41:be:12:
         15:ee:a2:da:a9:4d:e0:db:8f:fb:77:ef:a1:3a:c2:bc:6b:90:
         7a:3c:84:83:ac:69:c9:86:8a:6d:f4:a4:84:fc:45:f2:92:d4:
         10:23:dc:94:7b:69:96:53:96:df:bf:f4:96:86:c8:cd:8a:3f:
         9d:14:93:57:08:d5:75:0a:91:e7:a3:16:65:d3:b6:ba:b2:5f:
         ec:fe:75:4d:a3:0d:2b:61:4c:00:aa:12:11:e6:be:c9:5a:de:
         ef:40:9c:e3:8e:21:30:a2:95:02:45:32:00:a4:60:11:29:a0:
         c2:69:93:20:e5:f6:72:32:87:6a:e9:cf:ba:67:0d:17:a7:23:
         68:4e:c9:7a:3c:ba:84:98:8c:a5:92:ab:32:de:77:22:fd:05:
         c1:f7:44:76:f4:9c:9b:99:f2:c4:b3:5d:03:0e:e6:79:a3:7b:
         99:db:2a:e6:2f:d4:63:2f:07:27:15:94:51:e4:5b:bb:69:48:
         71:32:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----