Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File:                     7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier:          ZfUhe5Xwan5nfCrDKKTftuWWFJr2XnqKcqai9elP3Z0=
Subject key identifier:   20:DB:D2:BA:C1:E9:A0:8C:54:63:7F:11:C1:20:49:C4:F9:78:03:5D
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer:       /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial:       0195E00FC543E1D8CDCB2D17F1D6CB5B5445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number:          14D5
Signing time:             Sat 29 Mar 2025 04:01:24 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:24 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:24 +0000
Files and hashes:         1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: IXg8ixZoiVJXR4hNtB6t6z/nj/+fYBN9MwtUUcmynb0=)
                          2: BuLlbSCfr8m5R0bdvUy2auaVYo4.roa (hash: 5vhRJn1bAKiGFLiI67C1axUPj/VuaBvfb8oPGD+JOlw=)
                          3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=)
                          4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=)
                          5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=)
                          6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=)
                          7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=)
                          8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:c5:43:e1:d8:cd:cb:2d:17:f1:d6:cb:5b:54:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
        Validity
            Not Before: Mar 29 04:01:24 2025 GMT
            Not After : Mar 30 04:01:24 2025 GMT
        Subject: CN=20dbd2bac1e9a08c54637f11c12049c4f978035d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:f1:bf:76:81:49:8d:8f:b4:64:45:82:9c:
                    15:52:60:7f:a4:98:98:eb:21:5b:9a:98:c8:0c:b1:
                    e8:5f:17:8d:84:3f:0a:6c:7b:1c:32:3f:a9:7c:98:
                    ac:2f:ca:cf:77:4a:d4:6d:74:bd:fa:f1:5c:7f:e8:
                    01:ba:30:1e:29:0f:ba:3f:02:7e:dc:94:54:e4:d4:
                    43:ac:e5:0a:08:07:f3:09:5c:b7:27:56:c2:f5:eb:
                    ba:92:9b:95:2b:ec:f5:47:9f:5a:02:67:15:b7:40:
                    66:92:eb:91:eb:63:e9:a1:f9:c5:13:84:6e:f4:52:
                    f3:e3:d0:ad:35:d6:bf:de:a4:59:c7:fe:ac:43:39:
                    f9:f7:6c:6d:93:b6:09:13:35:6a:a2:c6:94:3e:e1:
                    f2:39:d0:a6:8e:d7:d8:42:ed:c0:93:99:1f:6a:29:
                    27:14:1c:83:ae:37:a9:20:c2:55:f1:9b:a5:ae:c2:
                    82:5c:7d:39:86:95:ad:28:57:ca:f7:f5:a4:88:9a:
                    b8:d8:94:47:83:4d:52:c8:f3:5b:8a:da:fb:0e:49:
                    b3:05:a0:77:3f:ea:3b:3e:b5:0f:d0:dd:d6:11:e0:
                    91:77:ec:c0:e9:6f:5f:1b:1b:06:e6:8f:63:59:1d:
                    72:4e:89:e7:b3:41:71:e7:1b:d7:27:24:39:3e:71:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DB:D2:BA:C1:E9:A0:8C:54:63:7F:11:C1:20:49:C4:F9:78:03:5D
            X509v3 Authority Key Identifier:
                keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a3:1e:0e:6d:11:d4:69:da:d6:57:9a:76:3c:3e:cb:23:3b:
         85:87:ff:4c:77:4f:20:85:f6:06:f3:15:1f:4e:ba:ca:05:d4:
         c3:c9:e9:18:a7:f4:af:70:61:f1:d1:21:ae:b1:41:c9:17:d8:
         eb:29:e3:4d:31:ae:34:47:69:95:a4:22:8d:6e:73:d1:a3:1b:
         a2:1c:f1:c6:cd:4a:82:5f:9e:bb:9f:56:e4:b9:f5:60:55:db:
         a0:36:53:58:5e:b4:df:96:fd:1c:bf:b6:3c:4d:f4:ec:ce:84:
         a3:88:43:15:78:4d:aa:a7:2c:05:6f:5e:ff:fc:d0:6c:1e:6d:
         a4:cc:31:b7:f0:43:9c:1a:4a:a8:f2:ef:8f:b6:57:3a:9e:63:
         ae:94:f3:be:f2:1c:fa:87:b8:f9:6c:3c:1d:5c:8e:97:47:7c:
         41:0b:d8:04:f7:25:57:10:ab:91:31:89:e5:ca:28:20:21:4b:
         7e:a6:c9:f6:41:ad:a1:c8:dd:65:e4:ff:56:c5:99:f2:96:af:
         23:82:0c:0e:a2:cd:d7:94:3f:7c:29:4f:ec:98:cb:0b:30:f0:
         45:d0:72:12:92:ca:1a:81:ac:fb:52:b9:a2:58:8b:12:1b:6c:
         65:14:6b:55:2f:64:a7:f3:71:e8:b2:88:c9:fd:99:2f:8a:c8:
         84:9f:28:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----