Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          vH6+QJStuu5RQxN/GXXL6hQx/x6hzgQXiEVzO8dkjiA=
Subject key identifier:   D5:74:DA:83:7A:F0:50:C2:8D:4F:1A:04:51:A0:9B:FD:E6:12:87:1E
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       01962F072918D7F27B96E6F8DDDDE13E4090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 13RmIh6yv-Ml6T8W-vpiSXUZ2gU.roa (hash: K4wrz2vLF42iU9Ok9LM/fxhgKzVbeVXkBRTlsWBsG54=)
                          2: 6GJDe6zJlkyBn7aK1IyaCupQ6-0.roa (hash: iC2qAiefhJNnquIXwdUvF/e3IYlNWXBAKniYmSUPZFU=)
                          3: 820Ud_GR15OB6xKqzxayx2Vq2Ow.roa (hash: Y4mHtGXvZVwTMpirNMNXroWlScEk84KdYNqjkd/s7Qk=)
                          4: RvNIPozHEQXs5iokhMWdzTpjJKw.roa (hash: yvOJlvlH/aPFeSnZ5uiNcTe4i5EocSDG2Jgr8QbqyYI=)
                          5: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: jfY3l4JyUvgJJ8KXMRMZUrPyiRSOK+A2ahf/7ZhuSrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:29:18:d7:f2:7b:96:e6:f8:dd:dd:e1:3e:40:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=d574da837af050c28d4f1a0451a09bfde612871e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:10:9d:8a:f0:7a:fe:3f:c0:2c:8a:e8:7a:
                    94:8f:ff:aa:82:3f:73:d9:f8:f9:8e:55:23:ee:a0:
                    2b:25:c9:21:7a:34:c3:d7:77:6c:ff:c3:16:b5:f2:
                    34:4f:08:24:f0:a6:32:73:ca:25:43:5b:39:1e:50:
                    0b:21:a1:37:c2:5d:e7:cd:44:57:fa:5d:f0:da:3b:
                    64:9a:6a:14:13:96:ac:92:06:41:f8:0c:ec:34:7a:
                    a4:8d:af:d1:3a:06:fd:1c:22:22:79:41:68:3d:14:
                    93:ff:00:3f:ed:f5:0b:9a:89:09:09:83:a8:7a:d6:
                    3d:ca:11:88:2e:0e:da:0a:ad:be:c6:76:74:40:65:
                    a5:6a:fe:91:43:7d:3e:cf:d5:1f:37:d8:eb:6f:e6:
                    ad:2b:ef:7f:d3:9d:46:ac:10:45:73:0b:93:db:d4:
                    c9:2c:ce:f9:9b:27:73:e4:45:6c:e3:0e:c5:16:80:
                    5d:ff:e3:4d:50:0c:70:82:f3:7a:3a:36:30:fc:b5:
                    08:b9:8b:b1:ee:dc:e1:1f:56:ec:1a:d0:5b:90:26:
                    55:76:dc:be:6f:3f:a8:aa:0a:42:49:df:5f:c9:d7:
                    84:90:f4:4d:d6:b8:e0:57:82:f8:90:29:a7:ad:d9:
                    e5:56:81:ff:41:a6:dd:6c:b6:e5:bb:b0:a1:c1:22:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:74:DA:83:7A:F0:50:C2:8D:4F:1A:04:51:A0:9B:FD:E6:12:87:1E
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:41:df:1a:00:5c:3d:01:37:38:03:a7:a8:99:b6:27:ee:82:
         a1:9e:2e:1a:32:f7:7e:a8:c3:4c:b8:9d:9d:6f:f0:ce:94:09:
         66:52:9e:95:9f:cb:b6:d7:69:2f:6d:34:39:31:71:3b:71:9b:
         44:fa:d9:c7:dc:ec:dc:d7:9d:fc:10:ac:e8:c0:69:79:af:5a:
         13:7e:13:29:98:1c:20:af:fa:71:ce:b6:49:a1:21:99:b4:63:
         4a:b4:10:77:b3:6d:55:31:ec:68:85:2c:cd:72:ef:eb:57:04:
         a5:ed:c0:38:35:55:46:c0:2a:51:db:6f:4a:a3:2c:e0:f8:2f:
         bc:fb:38:0a:3f:91:ae:df:2a:70:fc:0c:56:a0:f0:76:60:94:
         15:ad:d3:08:d2:84:d9:93:87:1b:56:55:1b:18:21:a9:bd:6d:
         1f:73:ef:c6:d6:87:80:2c:f2:6d:e2:35:f3:6c:37:05:ef:ab:
         5d:90:5d:30:cc:f2:4c:ca:4b:22:a9:28:b5:df:00:1a:31:25:
         e1:24:9c:02:0a:03:c4:fc:58:ed:fc:3d:99:7f:0b:5d:4e:73:
         a0:70:79:5c:9a:c9:19:1d:c9:b5:79:db:0a:c0:44:04:0f:e6:
         92:e5:a9:2e:6e:20:74:ce:30:92:2d:67:5e:36:7a:f9:5e:99:
         cb:bb:ae:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----