Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
File:                     EiTl7_GrwObYvwKeT3MuCrcbwWo.mft (raw, json)
Hash identifier:          mWcOytExhSziaY1w11YLBMpvGZdYXy7PnbfvwD9iQb8=
Subject key identifier:   89:01:F2:68:8D:2B:BB:2D:F2:C2:BF:21:97:EB:DD:AC:96:54:A3:59
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Certificate issuer:       /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial:       01962F070A52A2EA4310CBE5716DF186C5D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: 5R1iDQt_jpAs4gRTjYIiTCijoFA.roa (hash: mmkAQLGE8LmgwjT34GOkgBAsVgXVqkU9ibiVLrTA0k8=)
                          2: 7Faq0zePkBZuO_C0WOkycepFjpc.roa (hash: a+Cb4RggiDeAr7Egu5HSD0OTK4+4eHJXr3k92kT+Pic=)
                          3: 7XTPQI5_LwhSmbPvNp1Tn6Ud2pk.roa (hash: SFMUBbdICCjMdnT7DNHSEy0Mk5ykN9qWuGlT6EQECgU=)
                          4: EiTl7_GrwObYvwKeT3MuCrcbwWo.crl (hash: KvMkW5Obcx5qL0BLt8829rnuLUS6brFwnu1VnQQAsV0=)
                          5: MeH4-k2OFjGN557s0Yu0tYWPxmg.roa (hash: MOhIHpA/NwdkOdOgWKuaCMarKZ7JqUMahtGZ4rfniHg=)
                          6: b15ntJ7HPmGOS4jgF4tCkINYtWM.roa (hash: COLo/VUjwKkooWaLaizaYaP2W19lhe7zL+POsW4XWdk=)
                          7: fzsp7PHSzmWVIn8yVOXQa_7FmKQ.roa (hash: SkYI08EYzD7GCVvQI07IBr+EWXXpCIcicBxWwCpdN4s=)
                          8: mpkBzz7TW-l1lBrQvBdbHkUYL5Y.roa (hash: DwjUpO/wsb0y0xDCKmYSdLKwmlXvcw+wJMGNkKGcaNs=)
                          9: yNFBmYXB0TSeMX21aqfi5zgqFSM.roa (hash: v5WVhwm3HDfxqbcn6pfOpvMvcRHTwMwjG/288XsWT0s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0a:52:a2:ea:43:10:cb:e5:71:6d:f1:86:c5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=8901f2688d2bbb2df2c2bf2197ebddac9654a359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:ff:35:5c:da:79:12:f2:33:f3:1d:44:9e:
                    37:af:af:6b:b8:40:01:3b:47:65:14:f5:46:2f:80:
                    d7:48:a7:6a:e4:b4:e6:fc:10:9d:d9:75:f9:88:b7:
                    c1:da:cc:cb:a2:1f:57:f0:42:28:94:3f:ed:8c:12:
                    a6:eb:2a:80:b5:3e:6d:e8:3c:8e:5b:a1:fd:bd:96:
                    72:02:fc:a5:c5:93:59:83:ae:f1:89:65:df:ed:87:
                    7f:00:3b:95:8a:86:5e:97:65:ae:7a:24:84:52:70:
                    4b:73:ab:bc:2d:b5:48:02:4c:3f:21:eb:d4:ab:ae:
                    4c:a6:1d:57:65:d2:ca:d3:f6:89:e7:7b:66:fe:78:
                    db:11:34:31:01:5e:b0:a0:0e:9f:06:08:c4:6f:3b:
                    ac:0b:8c:5e:a0:22:d1:28:fb:e5:e0:3c:e2:dc:9c:
                    6e:a7:5e:e8:15:c4:c2:62:2b:0f:01:d2:dd:9b:a3:
                    1d:2a:d1:ee:ca:70:0b:54:84:93:4f:22:17:7b:a5:
                    86:e2:9c:7d:e7:cf:b6:b9:b7:6b:58:36:b9:f6:20:
                    d8:34:17:08:86:39:f4:48:ab:99:11:47:c9:90:30:
                    11:b9:0d:cf:30:e9:26:55:22:00:71:33:f8:36:7a:
                    8a:91:03:f4:00:ad:3b:49:86:f6:2a:f8:ab:47:a1:
                    96:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:F2:68:8D:2B:BB:2D:F2:C2:BF:21:97:EB:DD:AC:96:54:A3:59
            X509v3 Authority Key Identifier:
                keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:fc:c3:7f:f5:1f:3b:43:2d:a5:29:bb:e1:74:f7:ea:41:6c:
         41:d7:57:14:72:02:ea:27:8e:54:8a:ea:1c:0d:ef:e9:63:8c:
         d8:57:2a:16:7d:da:62:05:19:24:2f:f4:da:1f:5b:8d:66:b7:
         1f:e4:c8:50:3d:11:8e:ba:25:35:9d:03:d9:94:82:39:06:b1:
         f3:e7:a2:1e:bd:48:ea:16:05:d3:39:50:d7:cd:1a:37:86:28:
         6a:35:3b:7d:38:4b:38:a3:02:c4:a1:ca:6d:29:53:82:87:1a:
         53:63:e1:70:f1:0e:f1:bd:7e:b7:a8:c9:19:3d:93:2f:a6:d4:
         47:8a:76:ad:a8:6e:70:d2:6c:3f:f4:39:e1:5e:dd:62:27:2d:
         2e:00:f2:fb:ea:51:51:ee:28:4a:b7:56:e7:58:18:53:0e:09:
         c2:c6:85:fc:06:a9:d5:13:d2:e1:56:48:23:bb:97:75:ea:25:
         5f:9d:97:e9:60:c1:4c:95:e6:71:1c:f6:54:44:cc:ff:b5:e9:
         8b:30:d6:cc:97:35:de:83:a8:07:28:22:c5:64:f8:74:4c:90:
         71:e1:e5:63:33:cd:96:dc:c9:9d:a1:58:e4:fa:92:53:16:d4:
         4c:e6:a7:9b:6a:0f:e4:81:5d:d5:ae:04:72:e2:0c:ec:97:f6:
         3c:46:bb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----