Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
File:                     eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft (raw, json)
Hash identifier:          UvKbyVhJi9uvtnHyGif8cYNnqvuWgweKXq1KsMnp9jg=
Subject key identifier:   25:0F:10:D6:50:A7:07:59:68:7E:40:CA:0C:7B:E3:B3:7E:95:B4:5D
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Certificate issuer:       /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial:       01962FAB16D0424801E7A6B9545407D97727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
Manifest number:          0A04
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: GBm_VAZMm95tvGvpR8c8CkKdzyw.roa (hash: /MkVaXn8Lh0U59FVf0qSK7VZuxTGbFM8GznUiwatBTk=)
                          2: R7KosinOXjF2rG3vtu7p8AIu4xQ.roa (hash: O2+0nwWvmmZlJHCPQl2XQCYQ7eCOvA/497czNNwGoCI=)
                          3: bZEqWQ4d1wH8hJyV04MAPEO0Ygo.roa (hash: om8LxQrZJkACoqW8VxCdwbEW0cMygwUVSRnGureg1Lk=)
                          4: eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl (hash: xJ0SwqdOTWCjJO6G6aJP1tjaP6QBXZh98lf5Xl+Peqw=)
                          5: gkwT-d__QKowAY5Ocf64cDl7M4s.roa (hash: S0K8yM8s7Jfw7i+k1P/jE9FZq22d/v6q6SXDGil9ri0=)
                          6: obdeRPKbOYg0TdkTFUjVSUL8oXE.roa (hash: BP4BJLn84w/b9EROSrMEziDmPyaTFQ9fBu6r5N57qNc=)
                          7: p_PcjKLs5WrMiyv4jJVIiC78mps.roa (hash: Wu2AIvH1jcbjy6EzqUwoJNbeG7lBj3dtIoXcWjMsOto=)
                          8: xv9HfwhggDXbUMv-czQzhIKTeZ8.roa (hash: 8zbraxRvCOHngoKaCuyrD6Tzu9xckameA/akAOr4XQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:16:d0:42:48:01:e7:a6:b9:54:54:07:d9:77:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=250f10d650a70759687e40ca0c7be3b37e95b45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:42:c8:2c:c8:90:cc:9d:a1:41:86:3b:4e:
                    a9:99:2b:cb:1f:8c:46:e1:44:a5:89:bb:41:91:95:
                    c0:86:55:f1:71:e0:c8:c6:d6:60:e6:88:2e:5d:b8:
                    e6:1c:c9:97:fb:db:fb:5a:2f:d2:59:a9:89:0e:a5:
                    6a:cc:e6:4d:fa:4b:18:16:a7:f7:62:d7:65:04:56:
                    2f:a0:69:03:41:91:f6:fc:0a:a9:1b:d0:db:87:a0:
                    cc:8d:77:c4:df:57:32:91:ef:8c:e9:bf:56:6b:91:
                    5f:11:d3:6b:94:19:d0:d9:54:01:81:76:49:76:2b:
                    3c:7c:28:68:d6:a7:7c:e6:90:e9:a8:dd:aa:a9:53:
                    9a:6c:d2:83:88:ee:6d:25:e8:bf:4c:c5:65:35:33:
                    69:b4:c4:10:cb:e7:48:05:0c:8b:85:7c:d4:46:e5:
                    90:0a:e9:52:f4:38:d4:81:76:68:d0:02:1f:83:d9:
                    e9:bd:d9:2a:1d:95:25:8d:c6:c2:fe:70:2c:ae:e7:
                    02:53:b5:33:b3:e7:c1:62:6f:27:1f:1e:b0:5b:b3:
                    8e:1b:0c:85:e6:69:a3:39:96:39:83:f0:ae:53:d4:
                    ec:54:85:b0:91:49:5b:aa:be:1f:77:01:19:2a:5d:
                    cf:30:da:35:83:f2:5b:4c:26:9e:c3:6f:45:a9:84:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0F:10:D6:50:A7:07:59:68:7E:40:CA:0C:7B:E3:B3:7E:95:B4:5D
            X509v3 Authority Key Identifier:
                keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cf:83:7a:56:45:8a:28:c9:12:14:b0:73:d0:3b:a0:83:c6:
         83:0b:f3:d4:c9:ac:e5:36:53:e0:f5:eb:e7:9a:94:a9:ef:b8:
         0b:7e:98:55:c5:00:fd:3a:92:ff:da:75:5c:8a:9f:ce:f9:6c:
         a3:44:1a:de:0e:19:a3:08:42:93:9c:c9:d4:ee:5e:22:2b:13:
         2f:2b:7b:0f:06:40:c2:37:15:87:fd:9a:d3:be:a2:27:c5:03:
         ac:3b:f7:06:4f:49:e6:1c:ed:dc:eb:7d:24:ad:8e:b4:3f:fc:
         40:ee:6c:6b:9f:2b:0b:1a:00:c3:b5:48:56:45:e4:48:0c:0d:
         bb:bf:2e:5b:12:a3:dc:a4:53:f5:d7:21:d4:a1:07:b6:7e:29:
         ad:f1:e6:59:33:3d:2f:04:45:78:47:7a:9e:25:83:d7:72:30:
         5c:29:14:ce:20:58:b2:8d:2f:40:4e:b4:ac:99:bc:73:6b:1e:
         8f:fe:58:1c:67:8e:79:6e:78:bf:24:af:cd:01:50:04:df:28:
         cf:51:17:d3:96:9a:1b:05:25:d8:b7:ce:f0:d7:4e:dd:d4:15:
         d3:8e:e2:1d:b2:70:7d:e6:28:09:42:b5:95:20:a2:1c:70:88:
         3b:5a:5a:ca:65:9a:43:8e:80:3b:f2:e4:5f:26:79:66:1e:9c:
         2c:28:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----