Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
File:                     7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json)
Hash identifier:          5RttkVFd/EGNvqYi7+oZ45EovZmFgRLjybPmmcdosH4=
Subject key identifier:   84:CB:3E:86:55:5E:6F:13:99:30:7B:5C:F8:AC:B4:07:D3:AD:44:F3
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Certificate issuer:       /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial:       0195E00FEFCAAB5F6A80E43E8633B11E1AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
Manifest number:          14DF
Signing time:             Sat 29 Mar 2025 04:01:35 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:35 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:35 +0000
Files and hashes:         1: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: /yZlcNSG/NFSNpMo+2nmIvrGmmKEI+axpsU7Uobrz/M=)
                          2: GEPdl2OUeL05DmzNrEcRVPqqDx4.roa (hash: cS7ko6IsOhid7OeMb3wmb0UyLO3IwFElsJZGiNuQYl4=)
                          3: O4G8Oy8WXn03ntoUxCRHejsTASA.roa (hash: +xEpXad5VkxTIKpDB4MRGFxb/Xqo2YExKflblesjHtU=)
                          4: ObT7tYrwBXFRyjbdmNfMJqZI2Ac.roa (hash: d6dwZMctMoLW/PwYpxpTj6NAHKpbh3tEazNMZcoj5WA=)
                          5: PHFVTcG4KZjwKJOE7_73HHVKLFs.roa (hash: WE0SQ9SvcesHSizaa+Bf2w3NFhcVw1y/r+SFqq3s8Og=)
                          6: RQrFYttaYZP7w79BBGpHWoy0Vf8.roa (hash: +Cg1kkFKtdIbI/uOI/tqhmwLFs4Hzpn4OanpQq8QmfU=)
                          7: U179jHYVg_Z0xMvsOH7RWHRV0JY.roa (hash: qAq8gQtVLON1xEsw96nwghWB+2IEvnYNGoYOTtsqD5E=)
                          8: _F5MVfF5fNE4gJHS7bTOuaP33x0.roa (hash: glFPm7n2DIuS97xAP2QYuEIRa9RXcbN9tpa+7lEYHOU=)
                          9: fakXDMo3zyIUclESUX9dWmYL5TA.roa (hash: IcVzCrlp60ik4ciNebwcS9dD7bdLcMNXOEwcfbEsKXU=)
                          10: xz8xILYuPCJsOo5-xxPZe0m8iY0.roa (hash: Nym9WSsF7iPFJyaeeaq8rTQr459/3AIDriLd5s5IRiI=)
                          11: yKEdpqHdvo91vC0Mmh0XBWCJyPs.roa (hash: pz0PLVuo+mNtiFiglr7TH4jCIgorFqRrLuJoPAyhrKw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:ef:ca:ab:5f:6a:80:e4:3e:86:33:b1:1e:1a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
        Validity
            Not Before: Mar 29 04:01:35 2025 GMT
            Not After : Mar 30 04:01:35 2025 GMT
        Subject: CN=84cb3e86555e6f1399307b5cf8acb407d3ad44f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:e8:9d:69:fb:0f:ac:c6:8a:60:37:20:1a:
                    bf:a5:3b:4e:6f:98:ab:c9:4f:53:a7:e0:5b:58:bc:
                    ec:c5:6a:19:7c:e2:c7:ab:3f:db:29:c2:89:e5:ef:
                    9d:63:d6:6b:7c:2f:c0:73:72:a3:6b:1c:d6:5f:d1:
                    1e:58:5f:96:64:f6:4d:0b:d0:67:52:b6:95:6f:61:
                    fa:a7:c2:6d:5a:7f:e2:a8:1f:fd:87:f7:c8:18:9c:
                    7f:51:ff:96:1a:05:8e:70:d7:26:f0:22:9c:33:70:
                    3f:d3:a5:ae:03:36:fa:d7:00:f9:82:8b:e6:9c:ad:
                    84:95:d4:7c:b8:1e:87:0b:98:04:00:0d:cd:6b:6e:
                    f9:28:e0:23:73:56:e4:03:5c:f1:fa:45:da:b0:bd:
                    ba:49:eb:a7:28:15:a7:96:c2:ea:22:91:8e:31:d0:
                    39:4a:13:34:3d:8b:39:2e:69:c3:d1:34:04:70:de:
                    36:3a:38:c4:52:c6:f8:03:74:3f:3e:4e:a4:f1:25:
                    a3:08:83:3c:42:40:46:41:88:90:f3:51:65:4a:2a:
                    a8:c6:4b:2c:d2:52:55:2d:32:99:d1:01:0d:9d:4e:
                    6a:f2:6e:42:d4:bf:7f:a7:1d:2f:d2:d8:ac:7c:e6:
                    4c:6c:19:4f:22:e9:c1:23:71:d3:7c:49:66:dd:5b:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CB:3E:86:55:5E:6F:13:99:30:7B:5C:F8:AC:B4:07:D3:AD:44:F3
            X509v3 Authority Key Identifier:
                keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bc:df:ac:27:f5:e2:85:8c:b3:c1:9e:10:b5:81:81:5f:d3:
         43:5d:4a:88:06:a4:c4:3a:e6:ed:ad:ad:90:f5:af:3c:c6:22:
         ef:3b:6c:33:cc:72:d9:45:6e:90:b2:54:be:ec:37:92:e5:e5:
         ef:68:c8:50:55:61:5d:03:0d:81:a9:f7:4f:b5:7e:c0:65:7c:
         9b:cf:5a:55:65:a8:25:13:c4:39:99:01:a2:ca:0a:05:3e:35:
         f8:52:ff:0f:5a:28:cd:3c:23:4c:70:b1:c1:4b:07:0c:10:f9:
         4c:ea:29:77:98:a2:63:c3:ae:32:ab:dd:0f:1b:55:c1:ba:f0:
         db:a5:47:47:cb:47:f1:a2:66:03:12:79:23:cc:f5:c6:ee:14:
         f1:42:02:af:eb:cc:8d:79:0b:23:a2:7e:63:63:a4:79:89:20:
         2f:44:79:16:91:cc:e7:66:03:f0:7c:26:c4:21:85:90:83:09:
         9d:1f:e1:85:50:cd:40:94:de:9b:4c:c6:cc:26:60:56:f2:c2:
         6b:19:f8:2d:fd:c3:79:fe:05:0f:10:3c:ca:ce:59:46:3c:00:
         4c:5d:79:c2:93:73:a9:3e:55:c5:29:bc:81:bb:0a:f1:62:c1:
         36:5e:6d:05:62:b1:29:ed:70:7d:e2:41:40:c3:a0:5f:46:f3:
         04:b9:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----