Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File:                     aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier:          s2QMsmA4MAtNifOxDaYi9Uc/VBLO63HCJDc28YLqj78=
Subject key identifier:   EB:56:79:49:41:FF:9E:75:6F:50:AA:EE:11:25:89:62:65:E1:A5:AE
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer:       /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial:       01962F072A4936DDA9001E0CE6DCA6E90BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: 3qhykcUymq2Ks+az4rt1kUUYKfR0XArxvUoPhMcrvAw=)
                          2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2a:49:36:dd:a9:00:1e:0c:e6:dc:a6:e9:0b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=eb56794941ff9e756f50aaee1125896265e1a5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:c3:6f:0e:20:f2:dd:95:e2:e1:55:48:5b:
                    6e:7a:12:2e:b5:c3:a2:3f:40:e5:be:d8:ac:39:fd:
                    a7:91:3a:66:5c:7d:cb:c7:de:63:e9:84:21:cb:5d:
                    57:3b:32:03:b6:ca:b9:6d:b7:e8:5f:61:1c:8e:d0:
                    81:b1:92:47:ad:6f:e0:a6:86:68:43:ef:76:52:3c:
                    33:a6:b0:f6:4a:d1:bc:38:85:ce:8e:b7:c6:92:5e:
                    1c:98:66:b3:14:82:e4:25:47:84:a5:4e:cb:aa:97:
                    8a:c0:f6:ac:6c:74:7e:e8:7e:28:ca:9a:9a:77:11:
                    36:d9:77:be:88:41:08:ab:d6:8f:95:01:e4:ae:11:
                    43:a1:9c:7d:c3:f3:63:70:88:0d:fe:77:28:0e:e5:
                    8a:fd:1f:82:50:1d:ae:70:4a:48:ac:c4:38:bf:a9:
                    52:2c:7c:11:a5:6a:bb:81:ca:09:a7:86:31:0e:5b:
                    08:16:32:e1:ac:3c:8d:78:01:67:f4:fd:80:95:e5:
                    8d:c7:43:a6:af:7c:8a:db:ef:e0:a6:67:9a:49:c7:
                    10:8b:6c:00:04:d9:1e:59:39:8d:e7:d5:aa:69:27:
                    6a:57:e3:c8:f9:bb:ed:42:01:f1:6f:e5:b0:d6:d0:
                    f0:09:90:b8:9e:82:8e:9e:90:62:b7:6b:4c:a3:18:
                    e5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:56:79:49:41:FF:9E:75:6F:50:AA:EE:11:25:89:62:65:E1:A5:AE
            X509v3 Authority Key Identifier:
                keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4d:9f:65:6d:7a:0d:d4:44:f7:98:ec:ea:1e:e2:3c:62:8b:
         0f:85:82:3e:97:cd:c5:81:7b:e1:ab:2a:96:55:2d:08:ed:4a:
         fd:ac:f7:f7:97:fa:9b:b4:47:7b:ab:79:8e:35:af:13:29:7f:
         e8:73:04:ea:23:64:0f:1d:d4:58:6d:40:54:a1:da:98:06:06:
         65:7b:53:69:d3:e8:66:01:d3:c8:ce:cf:1d:86:d9:31:82:f4:
         4d:28:5f:ca:a6:01:e8:09:7a:cf:43:db:aa:94:32:54:8d:3c:
         f4:c8:c4:87:10:26:41:09:4b:0c:af:0a:3e:21:fb:2e:6c:25:
         04:b0:ac:44:11:b9:98:64:a8:ac:ee:5f:6b:6e:ae:e4:2b:f4:
         1a:93:55:a2:3b:5b:9c:1e:b0:07:93:b3:ba:47:7a:d4:69:e7:
         71:70:b0:1b:1f:a3:6c:18:7d:43:02:30:13:f2:74:a5:b7:cd:
         33:0c:bb:b1:ca:10:20:65:58:65:7f:ed:80:31:18:29:55:5f:
         1a:36:54:f6:2c:2e:09:3d:75:0e:a9:45:84:0e:29:26:3c:32:
         b1:66:86:1a:ab:43:63:13:18:7d:75:c8:f4:ae:f1:1f:fc:f1:
         66:77:47:a0:44:43:8d:9a:67:ce:e5:39:8e:79:cb:cc:60:a6:
         bd:d9:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----