Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File:                     EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier:          eJ47RzaoLTJAC6Qh+IQ1M7PllMLalevtPEpwv/TI7M4=
Subject key identifier:   33:96:C5:58:75:8A:1B:83:AC:A5:AB:57:3B:02:E7:E3:77:1D:C2:D2
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer:       /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial:       01962F3DF91CF660DF71350FCB189E121CA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number:          1080
Signing time:             Sun 13 Apr 2025 13:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:52 +0000
Files and hashes:         1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: thP+jfS0PyX9eBkb55XESGz9m3zYbY8GOus481yS9HI=)
                          2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:f9:1c:f6:60:df:71:35:0f:cb:18:9e:12:1c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
        Validity
            Not Before: Apr 13 13:01:52 2025 GMT
            Not After : Apr 14 13:01:52 2025 GMT
        Subject: CN=3396c558758a1b83aca5ab573b02e7e3771dc2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:f9:e4:cb:17:c2:83:e5:b8:76:17:cc:4a:
                    13:cc:88:0c:60:4c:b8:26:32:ab:c9:3d:41:34:1f:
                    fc:2b:bb:19:de:e5:5d:f1:a8:4c:60:bc:82:62:83:
                    02:91:41:ce:34:20:50:ec:5f:67:f4:b3:75:a8:88:
                    66:b1:72:76:09:e6:a9:11:e3:df:af:a1:c6:ce:fa:
                    4d:9c:fe:29:06:76:8e:30:40:59:cf:65:a3:14:9f:
                    3f:e2:e9:c1:ce:8a:b5:d9:85:f9:85:c3:b0:ab:e0:
                    9a:83:cb:c8:ce:5c:45:4d:0f:2f:3a:0a:d9:57:6f:
                    27:69:54:9f:d8:a3:17:1a:be:a7:65:cf:d1:0a:d7:
                    8b:a8:6d:46:2d:88:d1:20:b1:0b:cf:30:2c:ee:83:
                    3f:22:8d:01:08:b8:f1:ac:54:01:12:44:d7:e2:69:
                    23:28:33:26:1a:aa:4c:60:e4:92:f2:a9:1a:5d:80:
                    56:00:5c:1c:f7:8c:bf:61:1f:7d:cd:0b:7c:5c:c6:
                    15:55:38:7d:40:70:18:d9:72:cf:32:3a:19:74:9e:
                    56:f5:f8:d4:95:cd:12:fe:35:d2:c2:cd:4a:d5:19:
                    e6:bf:32:ad:52:ae:d9:4b:0b:15:6e:3a:83:da:02:
                    94:02:ce:f8:4a:cf:25:a2:6b:1f:64:2a:ab:6c:84:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:96:C5:58:75:8A:1B:83:AC:A5:AB:57:3B:02:E7:E3:77:1D:C2:D2
            X509v3 Authority Key Identifier:
                keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:41:28:a7:a8:ad:bb:d9:a8:9e:8c:e9:73:3d:d6:e9:4f:77:
         5b:db:d7:87:43:5f:3a:01:3f:52:d4:42:a3:0b:6a:88:3e:77:
         16:ba:a9:f7:01:69:83:b2:db:13:2a:85:3f:a4:a2:db:f8:a1:
         2b:5a:f6:ce:b8:cc:7c:32:d7:25:f2:2c:4e:04:b2:d8:9f:34:
         38:7a:60:ca:71:eb:75:79:34:8e:07:be:5a:a9:a3:c2:fa:f7:
         0b:75:5a:4d:47:74:21:7e:84:7e:99:39:06:37:7f:eb:22:16:
         5b:48:29:2d:33:c3:3f:0f:40:78:7d:73:ce:66:69:34:65:2c:
         f6:11:25:5f:f5:e3:b1:c5:9c:25:1e:4c:2b:b4:7b:5e:e3:7e:
         fe:72:38:84:c4:c5:99:ae:bf:6e:83:7b:bc:f5:b0:b9:6e:bb:
         b1:9c:04:6f:85:af:7a:b9:92:9d:41:59:9a:a1:1d:63:4a:72:
         77:02:25:b1:20:7f:5a:82:82:d5:fb:90:5d:c9:2f:90:04:35:
         a6:5f:22:3e:84:84:ea:16:ea:ca:43:3d:d8:8c:40:84:ac:eb:
         5a:56:81:81:ea:d3:fc:72:2a:bb:4a:a6:39:f2:66:00:c2:1a:
         d6:c3:53:c9:0d:c1:23:03:01:60:13:5f:e4:67:ea:a8:fb:30:
         a5:07:eb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----