Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
File:                     51B9sIinyBoNvsjxrdtS-VvRAUM.mft (raw, json)
Hash identifier:          El7cOFhsf2mUxV6mrR/0EQR7YKEi4BcRlZFeVSoCc7c=
Subject key identifier:   13:27:FA:52:B3:38:32:63:2C:8F:8E:2E:36:55:BD:51:01:28:CC:EF
Authority key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
Certificate issuer:       /CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Certificate serial:       01962E6191D536CB10C8367DC2C79CA3E969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: 51B9sIinyBoNvsjxrdtS-VvRAUM.crl (hash: /4wDOU0jVLqepc8AFbUG0rpNR5L6YkWxFc5SlgPrnt0=)
                          2: JqsmpwtOqjyRz6vPptUiZgce7K8.roa (hash: pfrW2tfjY6bKg2OyQ0AT6gz0/WFDKcYI71ThpGRK95k=)
                          3: po48a2MWEhlAE5KjGT2n1-nt4aI.roa (hash: RciP0DTkihCaXUKuuKGuqV/HOeqRVfjuiRLGyDnupMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:91:d5:36:cb:10:c8:36:7d:c2:c7:9c:a3:e9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=1327fa52b33832632c8f8e2e3655bd510128ccef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:7e:a2:d2:31:a5:c4:be:11:8d:33:e9:46:
                    0f:a7:36:e1:97:6e:05:10:b2:21:49:47:26:5d:95:
                    1d:09:e5:c1:84:bb:f5:65:5c:74:73:ce:c9:38:d9:
                    d6:a7:1b:b2:37:72:85:1a:ca:39:60:5e:fe:7a:2b:
                    12:cc:45:65:68:4a:23:c4:81:8a:13:24:4f:c5:d5:
                    47:38:4e:c7:fc:2c:38:32:dd:43:45:4c:a5:d4:fb:
                    73:f3:9d:dd:c9:64:2b:9c:4c:64:ae:06:9e:35:d2:
                    17:46:00:1c:a7:a7:6d:85:f5:66:28:d5:4e:56:94:
                    cf:7f:45:c1:ac:d4:19:43:59:e7:42:91:4c:33:34:
                    47:f0:b4:3b:30:29:bf:0a:df:2e:00:72:b5:7a:fb:
                    cb:22:a0:7f:44:a8:ba:41:c7:ef:8e:5f:18:a3:56:
                    d7:c2:d1:cd:4a:d6:c6:27:c5:30:0c:d3:5c:fc:6c:
                    97:3d:eb:33:c2:17:ff:11:fe:86:50:35:58:3a:d0:
                    be:81:3c:8e:e1:14:c2:9e:7a:66:0e:41:fb:95:6a:
                    fc:4f:86:e5:07:19:1f:15:2f:33:f3:1b:97:3a:c4:
                    51:ff:75:53:39:57:96:ef:a8:01:2d:7d:8a:0a:ef:
                    61:f5:e9:fa:94:4f:cc:be:0b:d2:25:86:b6:30:c6:
                    a2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:27:FA:52:B3:38:32:63:2C:8F:8E:2E:36:55:BD:51:01:28:CC:EF
            X509v3 Authority Key Identifier:
                keyid:E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6c:cf:2c:39:09:d3:1e:ba:16:cc:38:58:b3:3e:d2:47:d9:
         19:40:da:39:a3:01:05:83:f0:0d:c7:57:44:a7:52:64:95:26:
         1b:eb:c7:80:e1:67:2c:1e:7d:46:72:6f:ad:d3:4b:20:b9:25:
         57:e5:64:e5:d5:42:7e:53:4b:c4:a8:a7:0a:4b:1b:72:e8:f5:
         39:43:0a:76:5f:eb:ef:2f:8e:6c:b0:0a:e6:ec:ef:ea:b8:70:
         c8:a8:b8:15:e8:47:9b:49:64:cd:71:25:0b:1d:b0:1c:99:e8:
         2b:d8:b6:89:eb:67:32:98:46:7d:1d:a0:a6:5c:db:62:82:c4:
         2d:b8:eb:57:25:04:9f:d1:33:a2:36:8c:ef:cd:4b:2e:76:9c:
         b0:f0:f4:a5:76:a3:e1:5f:0a:15:c5:fb:e9:ab:87:66:cc:2d:
         97:84:06:9d:fe:a3:16:a3:e8:e5:b5:bb:9f:91:3c:c2:44:45:
         cd:fa:03:a8:9e:7c:f4:4a:47:62:72:73:46:b5:f4:7a:6c:47:
         f3:d0:52:9f:7a:f3:f1:a1:46:3f:a3:fc:ab:41:7b:b5:0b:3c:
         45:94:6a:2f:b5:e4:26:0c:94:81:70:92:3d:45:1b:98:54:32:
         e9:97:94:82:d4:6b:c3:d8:06:0f:1a:ce:3d:e4:76:d6:ab:ea:
         59:62:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----