Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          w4FuxkgVoDeacZQIq0kE7TbcB/9rN2VxtFqO5pON1wk=
Subject key identifier:   C4:14:D6:47:C0:7F:BF:B7:F5:F7:5E:49:90:43:A8:FE:93:38:87:A1
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       01962E987081B331B1C5FDCA4A48C24EBC0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: 2W0mVYMtUj2Armlmk_FP_3q5ESY.roa (hash: w5Ej5+Qvny/iMXD/R+qRLBIbP+3L75HhJ+B0EUJmp8o=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: cfc3/sirICTsH+zHE1YYG7XcAz6R6gflP4FopxTCdCw=)
                          3: Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa (hash: QG3UN2HjFfGKFrQvhtxeeeXreoHXBK1yS6QHGjO5Etg=)
                          4: efQyVpTfdzTLxoeY6EZRaCPb9ME.roa (hash: osXy82VNbyBuJJhgosvmVAstSYEdkdV+Zv1r3Rp3SjY=)
                          5: vPKCfihyP4aceHhSVf5O5t7dhks.roa (hash: BSL3nS6RO+KWTxuVXzJtjXxdHmqwKWboA1DQ+yINRvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:70:81:b3:31:b1:c5:fd:ca:4a:48:c2:4e:bc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=c414d647c07fbfb7f5f75e499043a8fe933887a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:68:b6:4f:af:5c:93:97:11:33:52:5f:1f:
                    79:f0:8b:57:56:8a:bf:e9:82:7f:04:75:14:fd:e8:
                    56:f8:fc:33:e2:68:49:31:8e:5a:5b:72:32:82:93:
                    be:4b:e0:26:2e:58:c8:26:ab:cf:fe:44:b9:e6:66:
                    c8:89:07:6c:c1:82:bd:aa:c7:f2:83:18:28:dc:88:
                    77:da:0e:10:20:c0:9f:8f:ba:97:36:ab:00:20:65:
                    11:e9:fa:65:5b:f8:74:16:09:3e:43:65:6a:01:ea:
                    13:36:57:1c:84:74:c1:67:24:f0:00:af:6c:e9:1a:
                    29:76:8e:8f:4d:8a:37:63:64:f7:d0:22:13:54:f6:
                    15:8b:e3:9b:99:e2:c5:66:2e:c7:f1:3d:e1:f3:63:
                    c7:5c:b7:1f:c4:5e:a3:31:2b:21:01:76:19:d9:ed:
                    52:0e:b6:ac:c0:0a:ad:d3:97:98:e4:6c:20:d7:91:
                    62:35:58:c8:ed:ae:d0:09:90:e7:dc:ea:0b:2d:64:
                    38:68:37:4c:ec:38:87:b8:a0:4c:a5:8a:73:68:ba:
                    0a:19:f7:49:d9:e3:d0:d1:78:1b:6d:06:c6:ac:79:
                    89:b8:e1:42:ea:82:60:0c:9b:b2:ec:5c:97:33:9b:
                    26:a5:78:80:b0:fb:c6:6f:4f:08:16:85:5d:93:f6:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:14:D6:47:C0:7F:BF:B7:F5:F7:5E:49:90:43:A8:FE:93:38:87:A1
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b4:3d:de:ed:d2:e1:8b:1b:aa:8f:52:e3:1f:5c:c6:fc:09:
         24:43:57:77:e0:b4:14:cf:ac:bb:28:eb:8c:69:94:29:a6:b5:
         76:86:a0:e1:35:6d:3d:5c:69:49:e9:73:10:f9:b9:0f:23:c4:
         09:c8:d4:a4:c1:a8:0a:f2:06:ca:8a:0e:ab:ed:cd:a3:3f:f3:
         19:30:97:e7:bf:50:44:b2:d1:ca:85:82:1d:92:29:18:a5:ba:
         ab:ac:de:52:5e:1b:cb:32:3c:2a:f9:6e:c3:c1:5f:e7:9e:e9:
         fd:95:5a:94:17:a7:1a:92:52:b1:7a:09:3a:cb:bc:d2:5b:0a:
         d3:af:36:bb:d3:16:f1:f2:a5:ba:36:d6:53:e6:55:be:6d:c3:
         bd:4a:d0:94:3b:cc:22:32:b1:b4:a0:8a:eb:bb:6d:ca:50:9d:
         1d:a7:28:0b:c3:98:75:bb:10:ee:75:0f:b4:97:95:c1:58:f5:
         af:77:be:bb:6a:10:d2:76:c0:b5:a7:21:37:1c:75:1c:17:f5:
         e5:f5:ca:a1:c2:46:1e:ee:09:d0:f6:45:b0:3b:09:e6:f4:86:
         ac:85:0b:8f:9b:6e:86:2a:41:cf:0d:b6:aa:20:61:b6:4f:72:
         8f:17:3b:a1:eb:94:b0:b2:e5:97:16:e7:2c:7f:f2:b0:ea:f6:
         4b:8e:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----