Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File:                     EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier:          WKyB59/XvdjJP/T/x2PNIWUKlHwN31MfXhKpqUO3BGk=
Subject key identifier:   91:19:83:32:E7:A9:48:60:02:91:14:2F:BD:33:0B:4C:4D:EC:D8:E8
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer:       /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial:       01962E9989C31D8482B8188BFA3A15B0BD33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number:          0BC8
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: QVgnGYaw3rWhxgvCqYkIAaZn/R0GNqUJw6rBvkjxgwQ=)
                          2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:89:c3:1d:84:82:b8:18:8b:fa:3a:15:b0:bd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=91198332e7a948600291142fbd330b4c4decd8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:56:d1:1b:9c:33:42:65:3e:39:99:72:d3:
                    54:b4:9a:67:3e:5d:ae:c2:26:e9:70:e5:6a:1a:57:
                    17:26:51:e3:93:cf:72:14:05:f9:29:31:49:30:3b:
                    80:82:16:b7:8e:9e:cc:a5:9b:c1:f3:2f:df:20:6e:
                    97:84:f2:72:6d:47:f3:77:fc:13:69:f4:21:24:55:
                    1b:9f:ab:ca:97:ec:f1:01:1d:34:e2:a5:81:4b:8d:
                    c9:56:41:a2:d9:6f:64:ae:b9:63:8d:a7:99:2f:b3:
                    ec:f5:6f:4a:1a:b3:bb:55:73:a0:7a:b1:d8:85:e0:
                    d6:bd:85:62:6e:fd:1c:d6:a8:39:1d:e3:2a:b1:f0:
                    6b:b0:60:71:23:64:22:ab:ac:36:b6:45:27:e3:4c:
                    14:ef:f0:50:99:85:b3:93:be:aa:10:72:0c:71:cc:
                    ab:10:9f:c1:22:a9:f2:ed:43:a9:5d:01:1f:83:b4:
                    eb:e9:6c:7f:31:59:7a:96:1e:7a:a9:74:33:37:76:
                    0a:dc:5d:c1:2e:7e:a3:23:9f:d3:85:6c:a8:4b:6d:
                    e9:9e:77:5c:d0:fa:5e:db:dd:04:f9:14:9f:c1:67:
                    84:d0:4f:d9:c8:57:07:e9:42:c9:1c:fa:0b:12:d8:
                    b8:6b:19:da:6f:df:9a:d9:79:58:42:81:9b:16:b1:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:19:83:32:E7:A9:48:60:02:91:14:2F:BD:33:0B:4C:4D:EC:D8:E8
            X509v3 Authority Key Identifier:
                keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:80:50:02:37:28:10:f2:7a:5f:25:60:19:92:3c:2b:fa:
         8f:67:2b:75:81:85:08:19:e7:10:f4:e7:28:e7:cc:82:24:7e:
         f7:48:a7:9e:4c:20:8d:cf:22:a5:54:9e:86:b1:84:bc:0a:ee:
         3f:86:7e:01:06:a3:57:6d:3a:46:b3:45:81:28:69:01:cb:64:
         89:48:d0:c6:f2:12:d2:29:8b:90:7e:ee:9c:ae:da:7e:69:0a:
         a6:86:a3:ea:e6:7d:d0:dc:84:63:41:e2:a2:82:4f:56:32:80:
         00:3f:1a:c1:1d:b6:d9:48:76:dd:d4:5d:a1:b6:69:21:36:6f:
         c2:a2:f1:37:e7:d1:c3:97:07:6f:17:5b:27:d1:b9:25:c1:11:
         07:93:0a:4e:79:fa:b8:20:bf:93:05:3b:0c:de:d1:86:da:b8:
         c2:cb:8e:94:5a:19:3b:be:f0:15:a7:58:87:e1:73:df:2f:d8:
         90:1f:c0:19:48:1a:0a:a8:e4:6d:f2:1e:db:66:3a:93:b2:1a:
         0e:4f:d6:93:27:ad:e0:a1:cf:0d:de:5e:1f:b3:a6:d9:a6:47:
         b3:23:59:bb:99:5d:49:ef:cd:58:1c:a8:5f:1d:d7:5f:6a:d3:
         11:05:c0:41:45:c3:ea:fa:0a:8b:6d:bd:cf:bf:f7:eb:ca:74:
         f9:c8:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----