Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
File:                     W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json)
Hash identifier:          qLblEjH84JxLbKrwPtmmFsM+6qohhukwUFZcO5kzWkM=
Subject key identifier:   E8:7C:73:82:39:23:F6:5F:B3:24:2B:B1:AE:01:3E:B9:D2:FF:E7:D6
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Certificate issuer:       /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial:       01962E2B2ABC014E0DF3B081379E9AB8620C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: 3K3BWWtJTikdCXD1GiHEAWkWrNM.roa (hash: 8sWSqC8Ih92DS5DdfTRJP5hCXAztrqlMm3kUKR0XOZc=)
                          2: TJ2hwoBGgOzkeWhqHN6Mxx7QhtA.roa (hash: 3R7yJP25UZbo9ce0Ffrs5KJBp9yypSbTdrsjbTzVD5w=)
                          3: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: EJtkWygFN5fF8EXtCWTyr5JCYIDpwmG3P2erN/GvyTI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2a:bc:01:4e:0d:f3:b0:81:37:9e:9a:b8:62:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=e87c73823923f65fb3242bb1ae013eb9d2ffe7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:2b:df:eb:9d:eb:a3:fe:f6:db:61:6b:59:
                    17:fb:ae:52:a3:c5:9e:81:22:a3:4b:3f:c4:61:1d:
                    b7:62:30:ec:bb:cd:8c:16:4b:55:29:b9:52:20:af:
                    85:4a:d0:08:57:bc:df:27:19:9b:df:41:be:5c:f3:
                    ae:0a:a4:24:92:3a:55:00:89:36:ae:9e:6b:3f:31:
                    a3:59:22:75:43:fb:7c:2e:3d:bd:27:6e:cc:d9:9a:
                    df:49:af:46:cf:b7:86:98:ba:f6:23:87:f4:cf:39:
                    c6:7b:b4:5a:0e:ea:cd:00:95:17:f7:dd:cc:1e:6a:
                    e9:6d:32:22:fe:97:79:48:a8:9e:0e:8d:a4:13:0d:
                    66:39:60:fe:5f:3a:10:3f:8f:de:c2:ad:66:b0:85:
                    2c:f6:51:76:6d:e1:cb:b2:b9:5e:b1:d0:d9:b2:6c:
                    fc:c8:8b:1e:0a:45:de:1f:1f:50:61:92:87:e8:45:
                    9a:99:3d:1b:c0:f8:f3:64:cb:d5:45:89:9a:d4:d9:
                    3e:68:fe:d4:dc:75:e9:13:e5:fe:56:cc:07:52:39:
                    be:db:67:aa:1a:90:01:7b:86:7a:2b:f3:8e:b4:3d:
                    f5:1d:c2:bd:1b:b7:87:82:14:80:1e:74:00:bc:4e:
                    e7:c6:77:3c:2e:b1:7b:e0:e5:42:7b:eb:d3:3d:d1:
                    bb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7C:73:82:39:23:F6:5F:B3:24:2B:B1:AE:01:3E:B9:D2:FF:E7:D6
            X509v3 Authority Key Identifier:
                keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:9c:69:12:0c:d9:bf:1a:e9:fe:b3:eb:96:5e:c9:b3:36:b5:
         7f:cb:51:a2:b8:b4:74:30:8c:c5:64:20:78:0c:b0:d5:9a:f5:
         2f:63:0c:e7:85:d2:97:ab:e4:5e:4d:f9:8d:38:c7:42:b8:75:
         6c:29:62:02:67:98:29:a0:76:33:86:5e:5a:65:e4:cb:20:34:
         ee:2c:a8:ea:be:7d:a6:63:69:72:34:34:b6:b0:ec:5d:ba:9c:
         a4:50:74:fb:6b:a2:91:8d:ba:65:d3:1c:03:e6:82:31:cd:0b:
         f5:f8:11:18:fc:bd:85:49:d6:e7:11:e3:0b:cc:de:fe:80:17:
         98:a6:d4:b4:a9:f9:4d:ec:43:0a:18:07:16:7b:44:bd:50:e0:
         1a:1c:94:18:03:36:76:e2:49:e4:e3:b8:9c:ba:dc:58:ea:6b:
         fa:0b:a7:9b:07:c6:c0:ee:84:91:5d:64:5e:d7:3d:ef:f6:85:
         01:6e:eb:ad:73:85:c1:1d:04:1d:da:94:ed:7c:0e:28:eb:7c:
         90:b7:3b:6c:30:6e:cd:34:91:2b:f7:78:49:9d:ff:54:56:16:
         d3:45:17:49:d9:bb:4c:f7:a9:14:52:79:26:ea:b7:5d:ea:a9:
         31:58:4b:4e:94:19:31:8d:f3:70:bd:31:be:d5:f8:4c:da:e2:
         7a:6e:72:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----