Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
File:                     eilzR6QNO99Xh8x1OsJALQgkv8s.mft (raw, json)
Hash identifier:          X6D6QEhV0FpwU8xlvyKWhKnbMXPp215IO++JOQOud50=
Subject key identifier:   5C:30:AE:C2:94:28:15:42:34:AC:FF:2A:5C:4D:07:36:7C:FD:09:CF
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Certificate issuer:       /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial:       01962E999FD62CD1C67D62797BBA41B583E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
Manifest number:          0DE9
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: N0z9esTkm8sf7IqrP3Uufonx0_k.roa (hash: cRVe0pjyNnhUe4BOiczul9pweEDzxKe03iHv5OQ9WhI=)
                          2: eilzR6QNO99Xh8x1OsJALQgkv8s.crl (hash: c8XCjYMtNqJH7feXr+LzQBJ9rNwR/D/FBsQuHcbgExc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9f:d6:2c:d1:c6:7d:62:79:7b:ba:41:b5:83:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=5c30aec29428154234acff2a5c4d07367cfd09cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:6e:99:a7:49:e5:10:3e:47:51:bd:43:db:
                    f1:d6:f6:f1:8e:ff:47:b3:1d:d1:2a:53:94:82:02:
                    62:b6:de:d7:6c:65:33:d3:9d:c6:ee:e3:f1:e2:cd:
                    63:cf:01:98:4c:5e:3a:b2:8e:95:6f:cd:ce:17:3d:
                    3f:11:d6:3c:7a:24:89:f5:77:56:a4:c6:86:21:c4:
                    38:20:e7:80:81:de:27:ef:1b:9f:29:fd:64:e0:c0:
                    36:cf:59:f7:f8:47:e0:ee:4e:ca:3f:e3:d6:82:44:
                    a3:77:f1:b0:84:cc:3e:a8:d7:83:02:46:ff:a7:84:
                    14:bd:3f:1d:e3:4e:f9:42:91:17:96:f3:fd:e1:9f:
                    f9:e9:cd:63:31:a6:95:fb:56:39:2a:12:2f:61:64:
                    c5:5a:b1:61:7e:04:87:8d:02:6a:8c:94:a3:5b:b6:
                    d1:e9:fc:74:85:e7:97:a4:78:f3:c2:22:7d:ab:40:
                    e3:69:27:3f:8e:94:33:29:49:c1:2b:14:68:20:ea:
                    61:ce:f3:ac:7c:92:bd:9c:70:a8:fa:9c:60:43:9d:
                    5e:a8:78:3b:8e:7e:1d:61:55:e0:ec:64:a7:b7:c8:
                    c6:6e:03:de:7a:69:2d:7d:40:0a:7a:3c:ec:b6:f6:
                    0b:20:d4:0f:f5:c4:f3:5c:d8:1d:aa:af:02:31:bc:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:AE:C2:94:28:15:42:34:AC:FF:2A:5C:4D:07:36:7C:FD:09:CF
            X509v3 Authority Key Identifier:
                keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:36:22:3e:16:88:58:ea:81:27:22:ba:d0:52:74:c9:21:ea:
         61:2f:cf:b1:05:4b:f1:b0:4d:b2:1c:0e:75:a1:31:82:99:dc:
         2a:74:0e:d9:fb:9c:dd:16:ee:41:06:03:a6:cb:df:35:87:80:
         f8:0f:78:2f:a2:84:fe:0b:47:58:f6:e4:2b:7e:d1:bb:bb:fd:
         a6:94:6c:d1:69:f5:52:d5:60:f9:cf:d5:97:fa:50:60:4e:0d:
         1d:20:2a:35:ab:f2:cd:a4:b3:d4:19:f7:e6:a2:17:5e:38:1b:
         1b:8e:1e:90:e7:56:2b:55:98:65:27:35:83:f2:53:70:4b:11:
         00:b2:ad:77:7d:d8:46:0b:b3:3f:c3:c3:2d:61:53:5f:f7:b2:
         fb:a4:b2:f8:bd:68:e5:18:63:5a:04:4a:6e:25:fd:5d:49:cc:
         d5:90:c2:69:12:7c:03:ad:f1:1f:87:77:c9:e9:cd:19:20:e9:
         0e:52:d5:70:7c:16:da:24:10:4e:7b:d5:7b:32:73:10:14:59:
         c6:7b:b4:57:4f:d2:30:65:db:78:97:0f:5d:a5:db:52:b4:71:
         c6:ab:c4:49:af:26:b3:14:be:74:11:80:18:e4:ae:00:a9:d4:
         21:5a:7d:18:a7:82:cb:ed:c7:88:02:73:2f:e0:47:66:58:e4:
         c8:59:8f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----