Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File:                     9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier:          e0y53j1QaNwvZuhfe9gJD16l8+d1qlrZI7OIhvLMYm4=
Subject key identifier:   ED:5A:CF:1B:A6:08:01:5C:B5:61:B1:97:04:5C:0F:80:1A:2A:FF:CA
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer:       /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial:       01962F749E90B4083EF12643B7236DF2027E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: 4auG5RmqeIvq7uYigAdoXGpdnoDIAaAmvbn+QH1ZbJ8=)
                          2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=)
                          3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9e:90:b4:08:3e:f1:26:43:b7:23:6d:f2:02:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=ed5acf1ba608015cb561b197045c0f801a2affca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:76:79:cf:36:8c:db:0e:fc:73:81:4b:90:
                    05:22:e3:ae:30:1d:74:eb:ee:7c:bd:52:15:eb:bb:
                    53:b5:fa:5d:8b:3a:42:cb:31:d5:85:c5:4c:f7:9f:
                    44:fd:b3:f8:21:f1:0a:1f:ea:a0:8d:a9:f8:a4:a8:
                    5b:02:f4:f9:7c:da:73:bb:c2:65:9e:d1:b5:ae:9b:
                    59:41:d4:40:b9:59:8b:e7:36:27:c3:fd:1d:46:03:
                    22:33:ce:6d:7e:14:4a:5e:fb:1b:c0:2b:02:c3:13:
                    47:39:86:8e:52:6c:d5:78:a5:66:0e:cb:ca:31:31:
                    0d:c5:ff:a3:bf:bd:2c:91:7d:66:ed:07:68:77:d3:
                    41:bd:17:74:8e:ee:77:84:15:69:40:40:30:77:bd:
                    b2:f2:4a:58:1c:dc:75:98:b3:42:02:73:d6:ad:5a:
                    bb:96:d4:51:82:f5:2f:e3:b6:b9:33:d7:af:e1:ed:
                    82:e9:dc:23:f5:c6:5e:ac:36:9e:d4:74:d2:3f:65:
                    b5:d5:ab:85:54:f2:55:40:6c:de:28:f3:98:e2:5e:
                    c8:b8:ec:f4:f0:38:aa:98:23:cf:25:a3:30:35:df:
                    e7:11:4c:a9:d6:9e:48:c7:33:4e:0e:af:92:67:27:
                    ec:b0:d6:c3:e5:7f:9c:c8:8b:81:b8:73:c5:22:11:
                    5e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5A:CF:1B:A6:08:01:5C:B5:61:B1:97:04:5C:0F:80:1A:2A:FF:CA
            X509v3 Authority Key Identifier:
                keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8a:db:7c:21:93:24:08:d5:51:90:3b:fe:82:b1:67:21:29:
         17:e7:cf:7c:ff:68:56:5b:2a:ca:5e:3d:eb:ee:da:63:92:77:
         eb:f0:0a:0b:50:66:90:04:aa:67:df:29:b1:aa:d8:c8:27:63:
         36:b0:3f:33:4a:2e:82:53:20:5a:17:9e:3e:9e:e6:38:ec:55:
         53:41:56:8d:0a:33:91:a2:8a:ca:4e:d7:a2:05:9c:ca:00:1d:
         a7:04:ec:82:35:13:93:df:28:1c:ce:c0:fa:14:f5:ea:98:21:
         d6:28:62:f2:a8:21:43:ba:50:96:df:0c:f6:e3:b4:d6:ec:34:
         77:6a:0a:81:e6:5d:50:5b:32:26:c5:f7:ea:26:9c:6b:44:de:
         a2:aa:1d:c7:d5:26:74:48:a9:fa:31:58:3e:b4:df:84:76:74:
         4f:fd:28:40:5c:64:b3:ba:18:fe:7e:80:d4:0f:7c:3d:6c:97:
         c9:91:bd:b2:f2:84:58:ad:b9:a1:46:35:0b:25:72:c4:57:09:
         d4:db:cb:67:01:42:73:3f:69:e1:73:00:d1:d5:0c:1a:86:c1:
         dc:2f:20:4d:6a:90:cb:ab:ca:21:22:8c:ca:da:81:8d:87:4b:
         75:9a:d6:b9:47:86:7c:ed:c6:8b:05:65:62:bf:0e:ce:f9:30:
         6c:a3:aa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----