Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File:                     EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier:          mQZmxI6kNcuRicfHTKtweRBvOJkKoxRF2utV/67HZyA=
Subject key identifier:   20:6C:CA:BD:6D:24:AA:C9:F8:3F:13:AA:82:4B:BE:B4:B9:F1:7C:97
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer:       /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial:       01962E61B824A4903E53267E9D2352BD5793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: H3m9p6w0gfNAcnM4Oy0gS63H4FoIwFhRSyjX0lwIyF4=)
                          2: gD2HCH7UZnug2JFbN0h_SjReLJU.roa (hash: 46J5NZnwRfdk2xDFMSmrrq3sdpnGs3ijOq3oqLGBAkw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b8:24:a4:90:3e:53:26:7e:9d:23:52:bd:57:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=206ccabd6d24aac9f83f13aa824bbeb4b9f17c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:8e:6c:c6:f8:5d:c1:eb:c7:82:df:a3:87:
                    5f:33:cf:ce:db:97:d7:de:5a:81:70:29:62:94:c3:
                    0b:ce:09:74:a9:00:92:e7:a5:78:59:c5:37:e2:08:
                    3e:5a:77:6b:dd:94:02:d8:46:61:82:87:f5:3f:ee:
                    c0:bc:62:8e:17:ac:70:35:20:21:c2:17:b0:75:73:
                    2d:e0:d3:4e:5f:71:e8:82:0a:8d:bf:24:8c:46:b1:
                    c1:13:1d:33:5e:7f:98:7e:e5:eb:c0:15:19:4e:f3:
                    ed:f8:b5:c5:94:3c:43:53:5e:f4:dc:19:0c:0f:71:
                    a9:7c:0d:ce:be:b1:6c:41:46:0d:db:43:5e:bf:7a:
                    00:8f:59:c0:8e:89:e6:cb:2c:67:f9:19:e3:61:b6:
                    91:28:9c:a9:ef:cd:90:78:76:bd:69:99:4c:31:df:
                    3c:8c:7a:4f:57:d4:f6:0b:c3:66:58:95:1f:78:bf:
                    b7:96:cd:73:59:d5:d5:4c:da:23:48:fc:fa:01:cf:
                    cc:b1:e3:c3:64:68:74:12:27:39:5e:c0:ce:4a:ea:
                    3d:48:7b:de:53:4b:ca:48:c3:7b:7a:34:a1:6d:6c:
                    68:0d:fa:46:aa:e2:ee:cc:61:c9:bb:3a:74:32:8f:
                    82:c3:11:69:0a:a1:46:b5:14:b8:a9:1c:13:17:96:
                    ae:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6C:CA:BD:6D:24:AA:C9:F8:3F:13:AA:82:4B:BE:B4:B9:F1:7C:97
            X509v3 Authority Key Identifier:
                keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:08:ed:ce:a2:73:22:99:fd:29:5b:41:28:2e:20:08:1a:53:
         6d:db:b1:dc:27:96:65:56:f3:29:07:f5:89:e8:c8:e1:81:6a:
         6e:b6:e1:35:c8:2e:3e:0c:d1:ac:84:9a:cf:7a:35:d2:68:5d:
         56:62:3d:3b:9f:5c:fa:50:f7:f5:6b:8d:c7:d8:b7:cc:e9:30:
         5f:0a:a7:af:9a:9f:1f:8f:ec:fd:53:86:a9:50:cd:ef:76:64:
         e0:d2:3e:22:31:e9:f9:b6:05:23:ed:fb:08:b2:f3:c7:05:36:
         36:96:c3:9f:9c:67:3c:43:20:bd:55:52:98:2c:dd:07:79:ad:
         29:2a:2b:c8:7d:32:9d:eb:f5:73:99:24:c4:98:e6:51:c2:d3:
         48:78:bd:cf:76:49:96:45:c1:75:e9:06:87:cd:1e:4c:03:94:
         d3:1d:2f:e1:18:62:f5:5a:eb:44:c4:06:8d:25:96:c7:1f:81:
         bf:0f:3e:96:4c:38:09:cd:b0:e7:e7:f0:2b:96:d7:49:2e:45:
         a2:5b:db:eb:cd:82:e0:3c:b4:e6:39:21:6e:80:75:60:39:06:
         b5:6a:63:0c:1b:07:81:6b:d2:cd:e4:10:1b:5f:b8:dc:a7:f1:
         84:a6:ee:29:24:83:9f:2b:12:11:fd:90:91:35:10:e2:10:7b:
         32:8f:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----