Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File:                     rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier:          W4C76BFf1BTer8v6a+jOtL7QftZr5hKfP8JP+80kcGU=
Subject key identifier:   AE:49:1F:12:E9:0B:CD:FB:59:A2:EC:05:08:E8:30:58:FD:5A:39:F9
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer:       /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial:       01962E9969C45FC47EC057194A17FDA788DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number:          03B5
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: PwlcQaBPeu72jRxpS1TyAFafqIs.roa (hash: zweRMxR6GdWC0C5ngJnRInvOkWHsboI5uvSiYLo2X20=)
                          2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: TY8/rR0ZN/BOhYyCil99zBTai8y6HT8LJmaV5wChJ04=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:69:c4:5f:c4:7e:c0:57:19:4a:17:fd:a7:88:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=ae491f12e90bcdfb59a2ec0508e83058fd5a39f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:15:f5:48:7f:06:bc:8b:2c:55:0c:2e:c0:
                    f4:23:1f:f1:b6:6b:cd:aa:c0:0d:61:83:1b:7f:76:
                    9a:5d:5e:f2:57:a7:63:8c:3c:4a:7c:cb:48:85:20:
                    c6:0e:3b:c9:95:87:f5:70:1d:44:2d:2c:8b:91:0e:
                    08:a6:1c:36:90:27:e2:65:de:8a:41:11:1d:65:e8:
                    21:52:84:ef:59:65:52:41:95:13:d9:93:1e:ed:63:
                    48:64:1a:86:d7:a4:50:a2:89:2a:c1:70:3f:11:31:
                    56:b0:de:5c:7e:15:bc:93:e1:db:43:05:1c:44:00:
                    21:61:1f:79:87:c2:1d:4a:25:52:c1:78:d2:7f:1c:
                    e1:d8:4a:7e:0c:70:35:fa:77:1e:da:81:0d:46:69:
                    ee:25:d0:dd:d6:14:70:68:67:b3:7d:8e:05:68:f1:
                    80:a1:a2:6a:49:85:aa:59:ef:55:9f:cc:7f:80:95:
                    9e:6c:38:28:93:47:02:76:79:85:d3:91:39:d1:dd:
                    1f:9d:c0:02:c5:f1:54:23:ac:2c:96:eb:be:39:77:
                    4a:77:67:c3:f7:9c:69:81:ef:9c:17:49:35:29:e7:
                    91:7b:c1:fa:87:cc:26:11:cb:bd:ff:ed:81:24:19:
                    9c:ad:9c:7e:52:d1:a9:c5:b9:54:a4:85:e5:1d:cc:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:49:1F:12:E9:0B:CD:FB:59:A2:EC:05:08:E8:30:58:FD:5A:39:F9
            X509v3 Authority Key Identifier:
                keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:ec:84:e5:fb:e9:2f:8d:6a:58:17:a0:14:03:38:11:dd:
         b0:b2:2b:44:b4:c1:ba:c7:80:ab:1d:9d:a0:af:1d:1b:2d:dc:
         36:99:c3:e0:fe:00:b4:ce:85:3c:48:bf:0d:8f:6f:f9:6e:4b:
         53:f4:14:4f:55:c1:ec:6a:cf:ef:82:b7:8d:44:34:81:8f:f5:
         a8:83:a7:4f:b1:cf:1c:fa:3a:a3:fb:c9:0a:5c:9f:27:98:d6:
         4a:15:ac:4b:e3:da:d3:44:c7:69:3d:91:94:ec:fb:af:51:c6:
         e4:2c:7f:5c:8f:e6:0b:50:f4:44:08:3d:af:96:e0:d8:02:79:
         58:95:dc:76:5f:77:f3:17:92:8a:97:77:12:07:5c:a6:51:a8:
         2f:0f:7e:d7:dd:d1:90:f9:7b:e8:ed:85:65:d3:2a:ef:9e:35:
         9d:eb:ea:ad:f7:d4:e4:80:81:aa:fa:7c:99:76:9c:1b:4e:5b:
         b1:5c:a9:a8:64:b5:39:77:0b:dd:87:48:f5:29:86:ee:d8:1d:
         f7:54:95:f5:5c:5d:2a:ff:16:71:44:25:ea:4d:26:aa:c3:87:
         70:10:40:9e:ff:ab:bb:b5:a7:e7:ff:3e:a8:aa:ad:55:e3:d2:
         bd:4f:5e:bc:af:0a:69:5b:70:23:35:5b:2c:e7:66:21:52:de:
         b2:f8:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----