Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File:                     y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier:          f6thp1dtBq/rz4yOZ7S0xRq+EGK0sg4CDQc6Qq0Laa0=
Subject key identifier:   EB:C4:1E:24:93:9D:03:A7:C3:3C:ED:E7:79:F2:9E:02:F5:B1:A9:56
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer:       /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial:       01962E2AECA80158295B244640FC073B4B82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: YCt2PEu1c9s1UKpEDsPjqt0QhVE.roa (hash: J7vCJCdM4bkswGPTs/5K83jCz1I4iBeDKjR/fP3jctk=)
                          2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: eZGdWHGYEZkBsKQFhXEeupe/gMyYeA61YUxQwA3F7a8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ec:a8:01:58:29:5b:24:46:40:fc:07:3b:4b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=ebc41e24939d03a7c33cede779f29e02f5b1a956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:6e:1a:2d:16:dc:3d:f0:da:ef:c6:8d:79:
                    13:69:f1:5b:64:90:96:84:ef:5e:63:04:62:d9:4d:
                    f0:29:45:18:bb:0f:92:e6:4f:11:32:16:e9:cf:58:
                    8f:b8:c1:a4:3c:6b:a3:30:f8:4d:5c:ca:b5:f4:b7:
                    29:bb:63:00:d3:9e:ee:aa:70:5b:48:92:ba:b1:6f:
                    13:05:ce:38:ed:a1:52:02:8d:c0:07:34:4e:50:70:
                    32:69:23:8e:4a:c8:9a:31:58:76:3a:8f:f3:e5:39:
                    79:7e:ef:19:82:48:35:36:01:fb:e2:9e:5c:7f:59:
                    b4:c9:3e:18:1e:5b:f5:2b:8c:ec:ff:c7:fc:2a:bd:
                    3b:64:64:08:a3:ff:9e:b5:6a:cd:9d:00:87:2d:e4:
                    60:83:1b:32:cb:e0:03:e2:01:57:0c:8f:42:b2:a8:
                    c5:d2:c6:92:a1:8b:7e:cf:06:a3:53:1d:ba:b5:04:
                    8a:a2:33:32:3d:4d:90:6a:be:76:d8:fb:e9:75:a8:
                    cd:30:67:38:e9:92:e7:da:d7:20:0d:2d:3c:fb:9a:
                    81:09:2a:db:1f:05:2d:4b:7b:2b:1d:4e:fb:6b:92:
                    c9:19:dd:a7:7d:9f:67:cf:a5:b5:51:9b:11:42:cd:
                    48:8d:f5:33:84:52:67:c0:b3:77:8b:df:c4:bd:8f:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C4:1E:24:93:9D:03:A7:C3:3C:ED:E7:79:F2:9E:02:F5:B1:A9:56
            X509v3 Authority Key Identifier:
                keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:79:4f:40:18:22:b8:a4:02:6a:85:c6:9b:c0:7f:c9:64:
         7d:61:b1:04:07:10:12:65:eb:74:7f:52:79:32:8f:8b:ec:87:
         b8:2a:5c:4c:c6:bf:70:f7:25:b7:47:1f:6d:87:d2:97:cd:59:
         c8:d9:30:c1:b4:3e:b8:c2:71:7b:03:cf:56:6c:4a:c4:1f:9d:
         58:c9:dd:c6:d3:e7:85:e8:d6:90:92:16:eb:b1:65:51:0a:13:
         5b:bd:1e:11:b6:33:98:44:26:39:c6:ab:5a:36:b3:09:16:04:
         8d:48:92:99:53:c7:aa:87:c1:32:76:e3:a0:86:03:71:a0:69:
         65:50:3d:35:fb:0e:01:30:16:7c:15:97:c8:50:21:ba:0c:10:
         ad:31:d9:3f:7f:e1:c8:c8:57:34:0f:84:21:c5:f9:9b:8d:a9:
         23:02:53:cc:8c:bb:29:f9:21:26:52:e8:6a:fd:19:f4:47:cd:
         5e:ac:3a:b4:22:d3:15:ce:b9:62:86:10:99:77:e4:dc:d5:6c:
         bb:67:99:9e:3b:82:f7:5a:ce:fc:79:70:d2:57:67:2a:c2:3b:
         97:9c:89:ca:72:9d:54:11:5b:74:be:2e:bf:30:bb:6c:5a:a2:
         6c:21:b2:4a:f9:39:4f:40:b9:ba:63:d7:79:2b:8a:ed:0f:64:
         f5:92:c1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----