Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
File:                     ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft (raw, json)
Hash identifier:          qA+hTPrz5RyLmSK5/s4s/+fvQgXO+uyR4RR4uEq3IJQ=
Subject key identifier:   70:46:BB:C3:BB:76:53:44:63:FE:44:02:5A:3D:80:FB:45:37:8C:AD
Authority key identifier: 79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
Certificate issuer:       /CN=79df50e26894bb0e81359606d82b7190c17598cc
Certificate serial:       01962F74D59F16A14EDA27F95E8F598D1B70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: CmtSe5W47sEvu4dqUbsE8AFHRfo.roa (hash: IMShtZENk7lbdDo/N1aCJsixVqWpjgjzDkLqSHXXRLg=)
                          2: ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl (hash: QP+J9rqQiEvN3kvl5kbNLLwOmWYM5whRsVDEpUlDUeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d5:9f:16:a1:4e:da:27:f9:5e:8f:59:8d:1b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df50e26894bb0e81359606d82b7190c17598cc
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=7046bbc3bb76534463fe44025a3d80fb45378cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:b5:5e:c2:ad:b8:1c:76:d1:38:77:d5:04:
                    2c:64:46:d1:2c:d5:8d:72:89:ea:66:18:18:31:f8:
                    dd:98:3e:d3:99:e5:0c:26:aa:07:a1:4e:c3:85:b0:
                    5b:0c:41:0e:a2:92:c9:1e:3f:e3:62:a6:c3:ed:46:
                    5a:9f:36:86:f8:f7:61:d9:10:37:15:98:43:ad:ef:
                    9e:e2:7c:0d:10:e9:f2:aa:2f:52:a3:8e:72:e9:09:
                    fa:2c:4f:16:1f:d8:7c:d1:05:f0:bf:ed:ed:ae:ab:
                    97:01:ea:c2:5d:14:59:da:ea:c7:8d:18:3a:1a:88:
                    e5:0a:fd:88:56:da:71:75:b3:7b:2b:79:0c:67:e1:
                    de:7c:a6:98:a5:e2:86:36:95:8d:16:67:56:06:93:
                    6d:00:6e:8a:d0:f4:d2:87:a8:7c:63:2c:17:4e:a4:
                    10:f1:15:cf:3f:38:cb:f9:27:0f:57:f4:ba:f6:a0:
                    f7:4f:83:21:64:ac:1c:78:b7:8e:6f:ab:31:e4:de:
                    f8:c5:7c:a7:8a:ea:16:95:85:38:b3:97:0f:ce:3b:
                    d8:2b:f6:e8:2e:b7:b5:9a:bc:4d:d2:e0:2d:99:b0:
                    a4:41:64:66:e2:8f:91:65:c6:f0:11:e8:e1:79:98:
                    f0:41:af:d6:f9:a6:df:d5:b5:3e:38:df:d2:37:09:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:46:BB:C3:BB:76:53:44:63:FE:44:02:5A:3D:80:FB:45:37:8C:AD
            X509v3 Authority Key Identifier:
                keyid:79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:e2:78:e5:28:87:5c:59:84:cf:56:28:bb:36:60:40:84:
         f0:46:1e:16:4c:20:22:22:93:71:5d:39:0f:a8:42:6f:49:54:
         06:ce:c7:59:1b:9e:09:25:f5:98:01:b7:80:11:3d:4e:ec:1c:
         10:49:2c:c7:05:24:bc:0d:bb:28:82:13:93:14:83:75:f9:ec:
         c6:27:ec:da:9a:59:36:e9:be:02:dc:a9:b5:e0:ee:3b:72:31:
         50:4f:d8:bf:e6:0a:20:64:40:56:40:ff:b4:22:2d:a1:14:0e:
         31:5e:fa:db:f0:42:6f:7f:d9:91:c2:fa:bf:b3:a4:f5:76:8b:
         42:c4:d4:7e:aa:e6:94:89:fd:05:0f:d3:68:16:d8:76:b0:01:
         8b:89:ec:3c:06:48:6c:e7:95:67:92:f1:7f:ce:3b:c3:99:aa:
         6c:67:ef:27:6c:3c:26:cf:98:64:20:d7:e2:44:0d:ed:89:7a:
         d6:db:fa:4f:85:ba:d4:ee:4e:6e:e2:ca:08:83:f0:71:35:a6:
         bb:7e:ce:83:01:79:b1:cc:f1:61:ee:37:7f:94:d4:4e:44:ce:
         27:d7:cc:03:74:d8:2f:39:3f:1c:78:34:af:5e:b9:88:33:b2:
         08:0f:a6:0d:aa:bb:21:e7:c6:fc:34:09:2c:52:45:1c:8c:5b:
         51:7e:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----