Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File:                     eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier:          FESOemZL1gAQ/wK1Vbvy9sJXtZwaaWhh6jGy8tJkbB0=
Subject key identifier:   5A:53:72:F5:80:D4:27:53:29:88:A8:B5:38:3C:54:34:C8:5F:31:2E
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer:       /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial:       01962ECF82C391F11009A148DAE435A8ECB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
                          2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
                          3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: SQSGcusq05xXmE5jU4VHLKPWWfatgnGHxt0YSmuYSqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:82:c3:91:f1:10:09:a1:48:da:e4:35:a8:ec:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=5a5372f580d427532988a8b5383c5434c85f312e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:82:85:f0:ba:0a:86:9d:1d:b3:f3:6c:75:86:
                    fc:30:fd:fc:65:be:46:7d:e5:5e:e2:88:4e:a4:53:
                    8b:53:e3:ff:f7:d2:ec:84:fe:b8:93:45:29:8e:14:
                    db:94:4a:97:27:1e:82:3b:49:18:d9:ee:04:99:02:
                    7f:58:37:e9:a0:24:e5:4e:9a:5a:18:75:5e:e4:91:
                    eb:2d:c5:37:10:32:95:a3:36:3f:3c:ff:a9:e5:36:
                    97:fb:31:b1:3e:1d:a2:61:b9:61:99:59:e4:58:07:
                    3a:10:83:08:71:50:57:db:31:a0:96:75:5b:49:11:
                    eb:88:f4:73:f2:28:6a:54:d4:4d:7d:18:ad:6f:6a:
                    8d:bf:d7:a3:59:e5:ee:95:74:b1:d3:ac:37:33:e7:
                    b6:27:04:8f:0f:9d:e4:a3:24:28:c3:35:16:06:2a:
                    93:19:46:68:dd:c2:9f:f9:25:67:54:19:16:3b:e5:
                    ea:48:83:a2:b0:76:8e:46:4a:7f:a1:73:ca:80:79:
                    2c:00:2a:bd:1d:5a:ea:3b:f6:74:4a:ad:58:d9:8a:
                    62:9a:49:fd:5c:36:9a:a4:f8:77:74:5c:ff:cb:0f:
                    f1:27:b8:bb:c6:2b:57:53:e9:d3:e2:16:1a:1a:0f:
                    85:ad:6a:c4:69:72:e2:02:c5:70:c3:c9:d3:ff:d2:
                    62:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:53:72:F5:80:D4:27:53:29:88:A8:B5:38:3C:54:34:C8:5F:31:2E
            X509v3 Authority Key Identifier:
                keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:31:b5:16:0b:cf:1d:02:53:16:3c:d0:10:7c:ef:64:9f:5d:
         79:06:e3:5c:9f:fd:12:5a:dd:8a:c1:45:6e:8b:69:b8:06:e9:
         b2:dd:84:70:da:77:2b:7a:0d:46:e1:64:87:fe:9a:ad:2c:e9:
         99:15:9d:fb:9b:e0:1e:27:eb:a0:78:8b:d2:16:53:c4:c2:76:
         d2:df:0d:63:53:fa:e4:3c:33:8a:b5:19:c7:51:29:da:d5:60:
         44:ec:a6:61:87:eb:11:ff:a3:ba:df:7f:22:d7:e3:2b:72:7b:
         fc:42:2d:29:6b:21:3c:72:04:9f:2a:1a:3f:a5:6b:fd:92:14:
         6b:7a:fc:d0:4c:90:97:8c:47:6b:65:3a:6a:5b:45:50:38:77:
         9e:c1:30:18:42:35:fb:28:f4:77:cf:b9:aa:e1:d9:b8:85:22:
         e9:af:48:32:3f:a4:fe:e0:63:a2:18:26:21:d0:a1:5d:08:50:
         20:70:68:6b:60:cb:76:c5:69:79:c8:a2:7c:cb:7e:d1:a3:e0:
         d9:e0:c4:01:df:1e:71:40:f8:79:63:a8:1e:63:a5:c7:75:12:
         ba:ed:c9:26:11:d6:cf:2c:52:9a:e0:1b:c6:27:36:ad:54:0f:
         84:b5:cd:18:a6:e5:26:60:42:fb:3b:1d:9b:dc:a2:86:ef:da:
         e8:08:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----