Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File:                     e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier:          KiL939GORudlPjvbgIteYHAv3M1KmMEoup074wF18eo=
Subject key identifier:   79:E5:93:30:DC:A2:73:FC:3E:6B:13:FB:9C:3E:F4:16:8D:35:C4:BA
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer:       /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial:       01962F0689452FE4E24410733DB1D384EA5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number:          03A4
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: hSU0vhtiX/bbsudwhjbPnv0bMPGImTtzzfwX5WmludE=)
                          2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=)
                          3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:89:45:2f:e4:e2:44:10:73:3d:b1:d3:84:ea:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=79e59330dca273fc3e6b13fb9c3ef4168d35c4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:e8:17:1f:91:8c:55:f5:eb:99:e1:86:75:
                    b5:f6:6f:04:1e:4a:cf:94:aa:5c:82:20:17:e3:f6:
                    f4:f0:91:d0:cd:c9:9e:ed:8d:68:35:4b:52:8a:98:
                    4a:02:c6:50:24:d4:8a:c1:08:9b:e4:27:62:c8:21:
                    a4:23:14:f1:ae:e4:30:e9:bb:c5:3d:00:b5:0a:fa:
                    92:31:49:77:ce:9d:ef:2a:12:aa:10:b0:33:4e:8f:
                    0a:f4:0f:80:20:28:9b:5e:14:08:4d:a2:6f:09:ef:
                    ad:17:f8:b1:e8:58:1f:e0:d3:fc:ad:80:61:88:a9:
                    d2:e1:fe:35:ea:fc:09:65:6d:62:81:d8:20:ce:a9:
                    d6:34:05:1c:1c:f1:39:09:9a:d4:79:e2:38:b4:e8:
                    28:89:f1:f1:0f:90:17:0c:72:b7:d2:09:18:37:f2:
                    fd:32:e3:e3:5f:96:78:53:e5:93:bb:f6:5b:18:d3:
                    1e:bf:fa:97:eb:a9:c6:2a:25:3b:aa:28:42:83:21:
                    05:89:da:72:0a:44:0d:58:ad:6b:c0:f5:5a:f7:71:
                    d8:6b:00:87:9d:2a:9c:19:20:f8:13:b5:56:e5:00:
                    ef:a0:8f:ca:14:cd:27:ab:e0:39:e3:1c:f9:90:e9:
                    69:d0:ff:8e:0a:35:a8:c7:2b:08:a8:16:fd:cf:46:
                    81:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:93:30:DC:A2:73:FC:3E:6B:13:FB:9C:3E:F4:16:8D:35:C4:BA
            X509v3 Authority Key Identifier:
                keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:59:6f:a5:24:c3:52:41:65:e5:ef:45:3d:78:ef:68:fb:93:
         3d:bc:c7:dd:6b:b1:7d:f4:1a:ae:8b:f4:4a:e5:a9:2f:8a:32:
         50:94:d3:26:6c:1c:88:b0:7d:d2:7f:ed:9d:d4:37:c3:b5:97:
         60:b6:f8:1f:42:82:a6:7b:b3:20:4b:11:b4:8c:33:20:86:a2:
         de:74:ee:0a:6d:69:d2:8d:73:f2:e2:85:2f:c1:f5:40:d7:d2:
         9b:01:05:15:c9:54:9b:64:de:a9:29:90:29:2b:5b:0f:46:82:
         92:df:64:ce:e3:31:cb:86:57:24:26:b4:95:04:4c:bd:a8:52:
         ef:d7:62:09:81:a5:b7:d7:1e:53:66:de:25:92:5d:a2:e3:09:
         1f:99:1b:89:df:8b:98:95:24:de:0d:aa:fe:bd:0a:97:6e:a9:
         87:af:a6:52:c5:a8:ad:45:30:0b:20:1e:99:10:62:79:99:8d:
         f2:10:1c:0c:77:01:44:eb:31:ab:5a:b6:31:69:c9:8c:39:89:
         19:ce:ba:f0:80:a4:d8:54:c9:f4:a8:61:92:e9:0e:fa:53:b5:
         e5:33:04:48:b8:49:73:5f:4a:36:01:28:56:95:5d:c4:44:ec:
         4d:3f:ce:5a:42:e7:81:bc:14:de:84:84:3a:fe:de:22:f6:35:
         0c:b8:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----