Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          dcu1Rgy+hlhOsQDbnRE7DjnYzt0QcG2fV9PfqtSLLXU=
Subject key identifier:   23:1C:1F:73:D6:55:04:3E:F8:50:E6:A1:C3:CB:B7:F5:94:6C:5C:85
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       01962F3D8CFCB7D85FA45DB8040746150542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          10F9
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: Te1smkaZFoPIXpDeDnkA_3SYuF4.roa (hash: fsg7fcR1+A1zfqsZoPgI6UandEUlSTg2/PWpSOpOTeg=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: jd/DQTzbJ/FvWqWq0+SQ+Ocl7NADrIbsbWr7bfzibqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8c:fc:b7:d8:5f:a4:5d:b8:04:07:46:15:05:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=231c1f73d655043ef850e6a1c3cbb7f5946c5c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:ea:2b:6d:ec:18:83:6c:de:99:c8:78:6e:
                    18:41:94:65:64:1c:43:44:29:e9:3c:bb:88:56:44:
                    77:b3:6f:c8:48:06:a5:b7:1c:d6:db:fb:57:03:ed:
                    ea:43:74:09:1e:a4:ff:7e:1f:36:87:cf:80:80:fb:
                    39:d2:89:b6:0b:2a:0d:34:5f:93:d8:29:cc:18:d2:
                    45:15:24:cc:16:fd:d4:14:32:76:fc:40:24:f3:9f:
                    e1:28:4a:89:70:54:be:47:9a:d8:20:45:63:a4:3b:
                    4b:e1:9f:3e:69:27:6a:6e:34:20:90:61:54:05:5e:
                    ee:94:8f:cc:51:ec:db:57:ca:77:0f:04:bb:07:d9:
                    50:27:39:2d:4c:f0:72:25:8a:89:1f:6a:1b:da:2c:
                    8d:53:7d:b6:c7:da:7d:10:37:df:42:02:c9:2e:30:
                    74:30:76:f3:8e:61:67:7f:b6:43:0b:87:d7:38:bd:
                    69:bf:4e:e0:3a:28:c1:a1:45:e7:17:88:7e:20:d9:
                    35:b2:96:a1:91:9a:64:45:84:31:4a:5b:66:4c:22:
                    24:ce:59:a3:68:54:12:55:c6:6e:99:6a:98:06:1f:
                    da:ee:05:67:87:cf:57:c9:9b:5e:0a:be:2d:ed:5c:
                    ac:09:bd:bd:d0:c1:d6:3e:79:45:c3:eb:44:4a:42:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1C:1F:73:D6:55:04:3E:F8:50:E6:A1:C3:CB:B7:F5:94:6C:5C:85
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:64:c1:1c:f0:43:65:47:07:f5:78:ad:cf:f5:06:00:da:50:
         3b:96:56:72:48:30:2c:5f:53:28:06:9e:95:ee:e3:20:ed:3c:
         3f:8c:9b:8b:cc:6d:f0:c7:86:97:90:e6:aa:01:45:ea:a0:de:
         54:f2:d6:c4:97:70:4b:a2:35:cf:96:f9:60:0a:46:05:0d:fd:
         b3:fe:fb:61:f3:97:0b:97:e0:0c:de:90:83:ba:99:be:38:02:
         46:27:16:ac:fd:a2:a0:d3:a0:8a:ff:94:30:54:41:35:a0:50:
         4b:d7:2b:d8:e1:69:85:ef:9b:fd:0e:47:e3:02:2d:7e:26:07:
         20:da:10:fe:cd:cf:25:da:c5:ed:5e:ab:e9:82:29:e8:ce:18:
         c0:8a:95:c0:c0:52:af:1b:5b:0e:16:cf:80:e0:17:bf:13:b5:
         56:bf:c5:32:bd:b4:cd:78:55:38:a0:c1:74:6f:bb:d3:d9:f5:
         bb:7f:f9:18:05:9d:bc:cd:b4:d4:d0:5e:46:94:e0:fb:01:a9:
         2b:1b:75:49:d2:68:df:3b:4e:7b:19:7f:3f:50:72:e5:c4:08:
         81:43:b3:1b:65:04:47:df:c0:8e:59:e7:fa:a8:fb:a0:3d:d8:
         8b:50:39:5e:2b:ac:93:d7:96:80:cc:ab:85:75:61:01:c0:7f:
         02:08:83:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----