Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File:                     Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier:          BCBsMpbEe+wQbyVi0WtQjBRKOyAlmkoGprusohVm46w=
Subject key identifier:   2A:AC:C9:9E:5E:DD:C5:C5:1E:F0:55:DA:DA:08:C4:8B:21:7C:63:2A
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer:       /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial:       01962F3D7747B7DE103392CB48EF3F49DB41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number:          0CA6
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: 7rGhXzCfmOAQtFdCFMtNwQZCGzI.roa (hash: +YzcMttJR4cOnsIWs0CBLy1v8W7l7gh7eA5Qk1ZfF+0=)
                          2: E-owwaRkGBOgTW0gbT6t0z8jYpA.roa (hash: MzJgxXYLXxOfkRd2uBOOGYCYN+rSmPW8si+rCfGvcKY=)
                          3: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: 5iJpLu8FnP4Yodh67LKyu29izhPiArxq7/Fk5qNn3NU=)
                          4: JMIXuwUBCaOmERtHlzG7ISJ3JvY.roa (hash: Hw2s88epzhilOmADkh2atAnnbAnZEDzpVgH8yNCsz2o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:77:47:b7:de:10:33:92:cb:48:ef:3f:49:db:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121a37282dd992d88658160559e048392798c84b
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=2aacc99e5eddc5c51ef055dada08c48b217c632a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:b0:53:b1:e3:68:b3:5d:42:f8:41:9f:31:95:
                    6d:8c:ef:33:16:fd:27:00:79:f7:a3:32:3c:ea:30:
                    35:64:5e:b0:77:1c:ae:bb:a5:63:3c:ec:b5:ff:02:
                    5d:ee:8c:04:49:d5:ca:a0:f3:a6:22:1d:6a:af:d8:
                    2d:89:76:2b:ac:fa:e1:93:08:11:c7:79:6d:6d:4f:
                    3e:90:e5:48:8e:48:c8:dc:f9:75:b9:14:ce:5a:c3:
                    91:d5:ac:bd:cd:2b:b8:33:85:5c:d0:d1:e9:57:0d:
                    5f:89:8e:bf:f7:a7:48:d6:2c:d4:b6:87:03:4c:aa:
                    11:c8:3d:64:e1:7d:82:25:4e:0e:ad:9d:29:40:12:
                    bf:66:77:42:c7:7c:52:7a:ea:48:3b:6a:d0:ed:bb:
                    00:ad:3a:0d:9e:a9:53:0f:ae:31:6c:41:9c:e6:dc:
                    87:99:c1:70:b2:e8:c0:b2:28:3c:10:6d:26:3e:52:
                    45:f4:85:8b:9d:2f:16:0a:5a:33:b6:b3:f1:fe:62:
                    6b:10:b6:c6:0a:a1:11:70:d1:3a:10:60:0f:1f:3c:
                    18:09:12:cb:07:ba:36:b4:4e:a1:cd:f4:b6:49:a4:
                    c2:cd:dd:52:88:46:46:8a:9f:1d:0b:ed:ad:13:0b:
                    61:fd:05:e7:2e:58:e8:83:07:b7:1c:e3:37:6f:92:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AC:C9:9E:5E:DD:C5:C5:1E:F0:55:DA:DA:08:C4:8B:21:7C:63:2A
            X509v3 Authority Key Identifier:
                keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:65:69:06:48:ff:2a:7a:77:d0:33:6a:1e:81:96:3d:6e:5d:
         12:f4:c1:5e:12:da:7a:6f:47:78:94:17:06:6d:a1:b1:e9:93:
         cf:ac:07:3b:55:67:cf:07:da:9a:0e:d5:28:63:fc:22:7f:02:
         db:94:a6:b9:22:c0:1b:0a:e3:aa:3c:7e:3b:a1:5c:df:11:1b:
         58:89:b4:af:33:47:bc:fb:e5:26:ac:49:b1:1b:c4:e5:c8:51:
         53:9b:ea:64:70:66:bf:6c:96:97:38:4c:0f:7c:d6:ed:08:ca:
         52:21:44:62:1d:52:6e:17:3c:d8:d3:ba:15:df:70:a0:55:4e:
         b5:a8:a9:e1:9d:1a:5f:44:2b:a4:87:77:b3:22:68:78:ef:58:
         44:c6:86:49:f0:ba:46:8a:2c:1a:eb:a3:cf:09:a2:95:2a:12:
         6f:1f:49:3b:d4:23:96:08:14:93:00:d5:5c:20:34:55:f0:88:
         4c:9e:01:ee:77:3b:e7:5e:0c:3b:3d:88:21:b8:19:90:84:bf:
         58:0e:74:ff:9c:7a:0a:37:dc:11:10:d8:8c:fd:ed:57:79:43:
         24:42:eb:00:03:b3:34:50:a4:0e:6e:10:a0:38:fa:1d:bd:38:
         1b:fa:ff:ff:f8:b6:46:1b:13:a4:76:4a:03:bf:72:e7:ac:30:
         23:09:eb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----