Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
File:                     e-714WwUZ9p6AvGSN2U65CsQllI.mft (raw, json)
Hash identifier:          VMIpr4DH50S/jx33MMqzOSrfULpn9qwEhbwf0m8jUyk=
Subject key identifier:   CE:79:4F:E6:7C:59:FB:CF:08:3C:00:F1:7C:25:49:0B:AB:80:1F:74
Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
Certificate issuer:       /CN=7beef5e16c1467da7a02f19237653ae42b109652
Certificate serial:       01962E61A4C77D64FB9E3E63A6F2A0DEA1A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: TTLplKYMw3ALMHBQOquflMCv_74.roa (hash: xOzJXshEgFbL72SqfgJ9QFBYYI8Jm5YZHiKPrlqNSRU=)
                          2: e-714WwUZ9p6AvGSN2U65CsQllI.crl (hash: QcLMigOXjlF2mMUdfaJD3I9d+nnG7DHkCtPyxP+aad0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a4:c7:7d:64:fb:9e:3e:63:a6:f2:a0:de:a1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=ce794fe67c59fbcf083c00f17c25490bab801f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:24:ff:48:f6:21:05:62:36:37:b0:a3:29:59:
                    3c:df:6d:5a:75:61:37:f9:fc:f2:5b:e4:1f:c0:84:
                    47:ce:eb:81:16:e0:92:e1:d3:c0:b6:fc:96:9f:d8:
                    cd:fb:c0:df:b4:97:0e:5b:e3:f7:b5:55:cb:ce:cb:
                    ad:aa:62:52:af:ce:8c:b3:d5:62:d1:e8:74:b8:d4:
                    8d:79:3d:ed:ee:f9:4d:84:44:70:6b:07:0a:3a:a6:
                    80:9f:61:98:9d:10:d7:cd:cb:b2:cc:40:a3:7e:1e:
                    de:83:60:15:e0:ac:10:b8:57:02:f9:89:fd:ed:0d:
                    55:0b:c7:4c:b6:8a:4f:38:dd:8d:a9:23:8a:de:2c:
                    64:a1:ca:bd:52:fb:ec:98:12:7b:8c:d8:c7:15:73:
                    5c:5e:49:59:d8:24:a6:7c:54:28:73:33:7d:ad:e2:
                    1b:21:1c:1a:13:2e:ca:85:4f:62:0d:1a:5a:54:ef:
                    d3:22:35:e1:54:78:9f:a6:42:cc:2a:99:1c:28:8a:
                    5b:d3:40:84:22:c8:d8:5e:6b:6b:c0:69:56:1a:8d:
                    8b:a4:93:1d:cc:67:6a:30:09:04:2a:0c:0e:1e:e4:
                    f4:80:e1:17:a9:59:8c:3f:9f:93:d1:d2:dd:a2:18:
                    72:54:62:25:ce:cb:81:ec:e3:80:92:8a:5e:3f:d2:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:79:4F:E6:7C:59:FB:CF:08:3C:00:F1:7C:25:49:0B:AB:80:1F:74
            X509v3 Authority Key Identifier:
                keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3f:9d:4f:e4:24:f4:8e:74:2f:ad:23:cf:93:9b:4d:d7:00:
         a9:9e:c3:aa:6c:7c:ee:25:8f:bc:3c:ee:73:5c:68:93:13:0d:
         5d:30:8b:b2:fd:f7:0e:a1:e3:ea:84:3e:f6:54:fb:9d:b5:46:
         1d:a2:dc:52:77:b3:fd:99:3c:ea:45:1f:ea:43:b5:00:79:e5:
         c4:58:76:66:95:96:1a:01:bf:d8:b8:46:bd:d3:9a:98:5e:db:
         1a:f7:ee:57:b8:6f:50:1e:75:d5:ca:3c:aa:30:7f:6a:2f:db:
         d2:a9:3b:c3:8f:50:e0:89:18:29:2a:6c:08:00:9b:b0:a3:25:
         3d:ae:f3:9f:c2:4c:5a:20:87:ea:bd:cd:68:ac:78:37:15:aa:
         c6:6b:8c:6e:b7:90:e4:9e:6a:05:fd:63:ad:9c:ee:f8:1f:02:
         66:86:52:46:ee:96:c3:e8:da:b2:4a:19:f4:f3:2e:a6:3a:94:
         62:d1:a8:77:f0:3b:7f:09:8f:9b:e7:57:ee:64:ba:9e:52:7e:
         29:6d:6c:2c:87:48:13:87:38:bb:d0:59:88:65:c1:18:d2:53:
         74:49:b8:91:81:bc:ab:17:43:0c:fe:4c:39:09:9b:ec:9f:ee:
         71:79:4c:9c:d7:2c:5f:78:19:c0:80:32:81:9b:5e:a1:a3:47:
         95:ba:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----