Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
File:                     61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft (raw, json)
Hash identifier:          Cwr6yhDlu5wM1O9XBhhTBUipFbAQlFYVztsTiXwr0Zc=
Subject key identifier:   95:BF:5D:38:4F:ED:E2:C0:A8:CC:D1:E8:65:E9:33:2C:77:C2:20:C0
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Certificate issuer:       /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial:       01962E6188C9695DDD1ACA5E77DBDBFB2B00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
Manifest number:          13D7
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 1-2EBppiSOjktT4c8541NHUWIXp4.roa (hash: mDi6ulbEvLogL54BCm4x5j5s52n2zOwohZJdy8LLDgM=)
                          2: 61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl (hash: 6xSQxDCMOIlEkmP0+lnrBqDae1NnNBgUCg2zosZEG9Y=)
                          3: 99j68jcIcmMIEjblV6YGZG7Xz-A.roa (hash: 6pGtaoOAdQOjWl1uvPVsb4nf1cwSsH0trxw0JSPAMyQ=)
                          4: eyY-erluNs3v5144XEgHxCFOudE.roa (hash: TBmAqLL8PbuQkrNWT7JMgvjhkU1ufdS4TOsNk7ShJ90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:88:c9:69:5d:dd:1a:ca:5e:77:db:db:fb:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=95bf5d384fede2c0a8ccd1e865e9332c77c220c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:21:6e:67:3c:d9:31:dc:42:a0:ea:28:c5:
                    3e:67:fc:38:4e:fb:3e:fc:1f:56:88:aa:14:3a:e2:
                    50:61:97:d5:a9:2a:4f:4f:71:39:99:08:b4:7d:65:
                    12:a8:b0:c9:60:d3:30:c6:a6:8b:16:e3:6d:bc:9b:
                    c0:10:e2:41:ac:5b:b6:00:f0:79:cc:3c:c0:84:74:
                    56:d9:17:ac:8e:b1:9f:ee:fc:02:46:fd:2e:0c:ff:
                    41:eb:f9:3b:30:14:58:d4:87:13:1f:97:8f:7c:a4:
                    42:13:d1:54:8e:f1:4e:34:f5:fc:b1:20:2a:58:7e:
                    f0:9b:e7:5c:35:db:c6:60:3c:4f:af:c9:29:88:ef:
                    11:16:63:6c:e3:e8:66:8e:fe:3f:c0:47:43:eb:d1:
                    50:2b:6a:8d:43:52:00:f0:96:30:73:73:43:49:6d:
                    c8:05:04:0f:09:aa:b4:14:04:dd:3d:8e:70:5d:3c:
                    ff:96:3b:f3:04:f4:29:75:a3:91:01:4a:d8:3d:90:
                    56:cc:8e:32:61:c7:e6:f1:d7:88:40:03:0f:81:59:
                    2b:2b:40:72:2e:e1:04:c1:13:22:7e:34:70:20:09:
                    22:3f:8a:d2:5c:a6:34:3a:b5:c3:95:34:6f:57:c0:
                    fe:2c:98:01:50:04:1c:27:ce:b4:b0:d0:ee:2d:cd:
                    62:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BF:5D:38:4F:ED:E2:C0:A8:CC:D1:E8:65:E9:33:2C:77:C2:20:C0
            X509v3 Authority Key Identifier:
                keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:66:20:70:f6:52:09:bc:91:ac:53:b0:ce:b7:3f:4e:28:
         48:7d:5a:0f:2e:56:65:cb:f1:d0:f2:bc:92:3e:ee:2c:6d:f5:
         4f:7d:71:6a:ce:92:ba:7e:19:c9:c1:90:a2:61:d7:75:90:62:
         85:3d:ca:be:cc:d8:08:26:f3:d6:e1:be:db:8a:2b:b5:b1:55:
         47:15:fb:73:b7:92:90:7c:1c:3e:4a:61:07:80:06:6e:60:62:
         70:34:5b:ae:53:ed:11:56:c0:bd:27:21:cd:a1:a9:06:bd:71:
         67:7d:13:22:5f:0c:5e:54:9a:b8:4c:a9:db:db:df:1e:21:35:
         a0:bb:f8:ff:65:16:7b:7b:9b:80:42:a7:04:ca:82:0e:ee:2b:
         b4:2a:a1:32:06:3c:3d:a4:bf:5a:c9:7f:f4:3f:c3:d2:e2:55:
         7c:49:7b:85:a3:ae:6f:d5:67:e2:54:fa:7d:83:70:90:d0:c7:
         4c:df:10:a3:f3:84:61:9c:10:e4:89:85:75:85:a8:c9:44:91:
         9e:6a:fd:52:5d:a6:84:b4:e2:0a:52:9c:a8:3e:40:20:71:5e:
         95:37:8e:28:dc:f1:02:33:25:ca:54:63:b9:33:83:33:99:0e:
         1d:af:ea:24:1f:ab:9e:4d:62:fb:c5:4e:35:30:0b:14:24:28:
         e3:22:5e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----