Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File:                     EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier:          FdTlDQO9CK8RXHIW5QhxNAICEg7ARpU+9nmNZkJwn7o=
Subject key identifier:   B9:41:48:61:E5:65:A0:3F:E5:F9:32:DA:03:32:9A:C6:DB:D4:02:D4
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer:       /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial:       01962F3DAA47959062E694D6E652D9ED48C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: O4NC7cA8g0d7v8UqT7s/QR2wE8Att0wT4HgEI5aORuE=)
                          2: FpBWsvUKm0ZMBVbrVN6s-7nFNLU.roa (hash: hDs4UWnkGUOqC+RUIZ30o6zwlJPHN9Bd1LEfbEQFkI4=)
                          3: K2jJIhwtmQT1UdH5RcnFIJCydiM.roa (hash: 0E4f8Qcis4DaV7XLk+fios4T2cuQqx6rf8piBgJ+DN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:aa:47:95:90:62:e6:94:d6:e6:52:d9:ed:48:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=b9414861e565a03fe5f932da03329ac6dbd402d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a7:82:80:af:cd:d8:b4:6d:b0:b8:7a:4e:6e:
                    d4:7e:9a:5b:71:9e:f4:99:41:4d:7b:93:f2:8a:6e:
                    1d:a1:a7:8e:27:a0:21:18:ba:f4:ff:ef:13:e1:87:
                    10:e1:85:96:73:70:89:4c:7c:93:f9:0f:c8:85:87:
                    74:30:a7:b9:de:54:23:a0:77:ce:6f:9e:ca:f1:2f:
                    06:1c:46:92:11:7a:e9:2f:86:d1:9d:f2:da:14:f9:
                    a4:57:61:07:81:69:09:87:d9:8f:93:a6:35:b2:af:
                    41:10:85:d9:89:74:23:d3:7f:4e:31:a2:af:64:69:
                    57:1d:2d:0f:eb:0a:5b:94:55:f8:cb:ad:75:e4:0e:
                    2b:dc:e4:d6:22:05:f7:76:45:c3:48:93:91:18:98:
                    e2:30:ee:3d:ac:03:f5:8f:fd:63:4d:1f:4a:0b:0d:
                    8f:7f:f6:3d:19:44:89:b3:36:2f:fd:76:28:fd:66:
                    6b:4f:2f:38:c6:c7:9f:5d:6c:4d:9a:1a:2b:82:83:
                    ae:21:3f:4d:bf:fa:d2:9b:a2:8e:c8:e4:1d:ee:85:
                    c9:95:80:0b:9e:a3:87:50:76:fc:00:ca:09:43:e6:
                    cd:2b:f6:56:f1:36:fe:c2:c1:5d:4f:32:15:c2:40:
                    f8:fb:5f:be:14:f6:a5:5b:32:46:e0:57:27:2b:4b:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:41:48:61:E5:65:A0:3F:E5:F9:32:DA:03:32:9A:C6:DB:D4:02:D4
            X509v3 Authority Key Identifier:
                keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6d:ae:30:38:c5:1c:e2:10:c5:68:d3:52:21:64:94:bb:e5:
         b4:29:30:5a:13:ac:e3:ce:7b:ef:41:a5:f8:e5:92:fb:e8:44:
         ae:9f:42:b5:92:28:93:86:2e:c3:13:4e:19:93:d7:d3:20:2c:
         b6:fe:af:f3:bb:24:95:07:de:80:7b:5c:34:1a:c3:cb:a4:bb:
         33:3f:31:04:0f:9b:7e:a7:6b:ae:ec:1c:46:8b:0d:d9:61:c4:
         f3:c7:d4:35:92:4b:67:cd:2e:eb:60:a2:c9:8d:27:8e:38:6c:
         da:5c:d8:7e:b8:47:60:9d:2a:41:09:ab:b7:f0:ae:78:d6:27:
         d2:54:6f:e4:66:55:90:e3:17:1d:08:cb:b9:42:95:1d:75:52:
         79:0b:23:2f:49:b7:ef:29:0f:be:de:6f:3c:f8:6b:95:e7:27:
         f9:6b:01:55:23:d1:3a:f0:50:3d:2e:ff:27:40:0c:b2:d7:c0:
         f8:3d:89:3b:54:2b:b2:99:1e:9b:aa:5a:76:d6:c6:f2:ce:2f:
         24:7d:20:c8:1d:0c:e6:ad:e6:c3:f8:a3:78:af:da:6e:1f:18:
         57:da:88:81:5c:db:a5:b3:c3:c4:1e:f7:27:46:54:f9:c2:22:
         77:a8:f1:c8:89:c6:37:1f:2d:98:88:95:8e:27:40:30:1b:58:
         9d:0a:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----