Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File:                     e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier:          0ikMKtKGMCdHiZxaVuTKVihFsz8Q/00wTzO2QfOrKPk=
Subject key identifier:   E8:23:B3:56:54:A7:50:E6:4D:EE:01:EA:4C:49:55:DB:13:99:DD:5B
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer:       /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial:       01962FAB8452CCD3C4777512768085A2E22A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=)
                          2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: nVXBdvFMSkhzTxZXecR/bjfVSGauqbPy5wlz/kvPAVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:84:52:cc:d3:c4:77:75:12:76:80:85:a2:e2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=e823b35654a750e64dee01ea4c4955db1399dd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:5c:f9:c9:6b:92:49:64:2c:61:c0:60:ed:
                    03:8a:ca:06:d4:75:f1:dc:06:6a:de:1f:fe:17:0a:
                    86:b6:fe:00:61:dd:df:39:2f:d2:a4:38:73:31:dd:
                    54:67:db:17:b5:2f:73:6f:fa:86:57:0e:c4:1f:24:
                    e6:07:ff:4b:21:aa:03:d4:75:24:ce:ef:20:3b:05:
                    4d:02:c2:e0:a0:6a:f8:89:a3:59:14:13:ce:10:58:
                    51:4d:cb:8e:fe:c9:62:39:9e:48:41:15:dc:8a:cf:
                    e3:2b:6a:a8:b7:48:d9:70:7b:d7:53:15:f0:a6:e4:
                    dc:21:d0:df:96:a6:93:f6:90:cc:57:f0:1b:ca:d2:
                    8c:c1:30:3e:c0:03:5c:16:b2:cf:eb:c7:9b:f2:dc:
                    84:97:93:31:51:67:a3:2f:1b:ef:26:98:27:43:d5:
                    aa:e3:1d:dd:b5:75:9e:cf:f0:92:65:96:f5:bf:84:
                    22:c9:69:1a:53:9f:56:88:10:13:ff:c3:b4:51:f6:
                    e1:43:98:fb:d6:50:8c:bc:b6:13:b7:40:67:e4:8b:
                    f6:41:9c:17:98:29:eb:cb:bf:4e:bb:2c:9a:20:6e:
                    74:ca:df:e8:37:46:33:81:30:2f:19:23:7c:6b:d1:
                    2e:70:d3:75:21:10:ed:74:87:8e:f9:7a:d9:6c:61:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:23:B3:56:54:A7:50:E6:4D:EE:01:EA:4C:49:55:DB:13:99:DD:5B
            X509v3 Authority Key Identifier:
                keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0b:44:8e:b3:72:cc:0f:3c:aa:e8:4c:56:5b:09:38:83:8c:
         ab:c2:47:d7:42:92:2e:94:68:ab:a8:8e:46:9f:62:14:af:c5:
         e9:f9:43:dc:fd:de:a3:02:9e:ae:99:eb:70:cc:99:03:21:7c:
         75:21:4b:68:48:a0:39:be:ac:a8:51:26:a0:11:dd:73:9e:68:
         35:ed:99:b3:00:65:0b:8c:f8:dc:e9:7d:24:d4:f6:2f:7f:0c:
         4f:b4:47:cc:7c:1d:0d:6d:4e:e1:3c:c5:75:9a:d5:fd:c2:b0:
         a8:2f:0a:da:dc:b6:71:c6:e0:b2:a2:44:6e:3a:6b:3d:1f:46:
         37:6f:86:bb:f0:15:ac:5e:31:ab:78:cb:5c:34:7a:f4:9a:c8:
         7a:5e:f2:52:18:ab:1a:21:5c:88:ab:b1:ad:e4:d1:6e:7f:36:
         9c:96:bd:34:b2:6b:57:86:64:2f:0e:b3:76:ab:e9:6c:8e:9f:
         0c:8e:02:9e:27:bf:40:9c:df:bd:e4:76:54:cb:cb:11:3f:e3:
         45:d4:06:a9:d1:20:7d:40:0d:77:27:9c:40:91:9e:34:85:18:
         d8:85:ad:7b:f6:b8:d7:90:fa:0c:1c:52:6b:e8:74:99:c4:01:
         54:29:78:c6:31:64:ce:53:00:10:25:3d:41:f3:57:8b:0a:dc:
         97:1a:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----