Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File:                     o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier:          cTfkz2SD/ljW/cbLi1mv2/9NyLyxXr0He3U156hGd7o=
Subject key identifier:   EE:BB:0B:80:3B:CE:5D:E8:46:FB:5D:EB:71:97:32:27:77:1C:DA:6B
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer:       /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial:       01962F742F3DB37B61874E249974FF1B1FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: DyAD9klcag15NhnplKEMXi8dKqg.roa (hash: Zvr5j/JLyl2kQb4eL63NQCTsndBLbuYPjEiWULmfej8=)
                          2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: GT/GD0WIPajT8Bsyf1EXWu8+s4pyQ+0nqnAK71s9vM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2f:3d:b3:7b:61:87:4e:24:99:74:ff:1b:1f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=eebb0b803bce5de846fb5deb71973227771cda6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:3a:b1:9f:70:e8:43:e4:99:f9:5a:13:54:
                    3e:03:18:52:ac:d9:06:5f:7a:19:63:6d:1d:1e:e7:
                    70:75:0d:ec:73:6f:4f:2d:e7:b7:fe:a5:f8:3d:f9:
                    e7:09:45:ee:83:bc:33:0b:3f:02:56:21:68:39:2f:
                    aa:24:9b:94:b8:70:44:15:48:48:a0:42:83:fc:af:
                    db:62:f2:00:99:c3:73:44:60:6a:6b:64:2b:04:9e:
                    c4:fb:91:6d:e6:12:f0:22:bb:e1:d1:a0:5c:c7:49:
                    00:d1:6f:68:86:9a:de:3e:e8:a3:0c:5a:fb:dd:cc:
                    1b:8d:33:3b:20:fd:cd:ad:1b:01:63:c9:8a:c3:e7:
                    1e:e0:c3:8b:50:74:3d:1d:56:a9:8d:0c:50:d7:e7:
                    cf:c4:60:d7:86:d9:fa:2e:6a:7f:4f:50:ef:d8:e7:
                    b2:d9:95:4e:13:ab:ff:71:ef:36:c2:29:3e:fd:6d:
                    c7:20:0c:1f:29:f9:1e:84:21:e9:3a:16:37:0e:31:
                    52:82:26:3c:12:fb:a5:71:b8:e2:6d:17:09:8d:36:
                    6e:72:21:75:0a:88:a7:ee:0f:98:65:7b:bf:ab:bf:
                    e6:ee:ff:ea:5d:8f:32:0f:70:6f:13:81:8b:98:fb:
                    af:61:fe:06:8e:6a:79:57:f7:6c:73:11:a4:bc:d4:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BB:0B:80:3B:CE:5D:E8:46:FB:5D:EB:71:97:32:27:77:1C:DA:6B
            X509v3 Authority Key Identifier:
                keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:2a:29:3d:ba:59:0a:8f:61:46:99:e7:17:9f:16:06:fc:
         99:f8:fa:fe:48:86:c9:76:b8:ce:00:ab:4b:a5:7e:2d:c2:77:
         2d:dd:0c:f8:13:3e:6a:c2:5d:0e:ac:9f:6f:85:ae:62:e4:aa:
         14:6b:9b:2a:c9:d4:18:e1:2c:35:2c:71:de:09:96:72:0b:0f:
         04:e0:7f:ee:8a:4d:10:54:88:d8:2b:8e:f7:57:01:81:19:34:
         f4:42:7b:2e:18:6c:15:59:ff:f5:96:e0:3c:80:30:31:56:69:
         77:60:ae:d5:28:df:53:41:63:5c:0e:fa:c1:5f:b5:64:aa:c2:
         c0:7d:14:22:5c:42:dc:00:df:e3:82:e6:51:fb:de:ed:df:a4:
         8d:6a:58:97:71:d8:95:a4:58:ea:b4:a2:58:57:6f:f5:9f:cb:
         0e:49:33:f2:2c:f8:b2:15:b9:75:74:ee:74:a2:b7:cf:2b:64:
         1f:1f:5d:28:aa:e7:2d:17:37:eb:03:61:01:b0:47:cd:d3:45:
         57:ef:65:4e:c4:80:fb:33:f8:3c:00:22:f5:37:41:09:6f:7e:
         c7:6f:29:1d:75:3c:09:05:2b:24:f7:fb:1f:39:67:82:5c:aa:
         e4:22:0d:90:3a:56:9e:2e:2c:4f:49:0e:db:f7:65:81:db:68:
         fa:06:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----