Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
File:                     eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft (raw, json)
Hash identifier:          8ZXGETwdESsEq93aGhfTkLV7hN8zrVuI0Nk5L5ufBiY=
Subject key identifier:   8A:8C:96:17:12:0C:4C:8E:86:1E:5F:26:86:57:20:14:93:67:66:ED
Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
Certificate issuer:       /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Certificate serial:       01962E99607D1C676155A65CF6DA6AB43ABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
Manifest number:          0474
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: 1LjZlnRBJt_qRKMuzNTKcoTDPVg.roa (hash: uQEaVATrxncZCByVj7FOPBy+k/KEvq9+fzzZSw1GL2k=)
                          2: eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl (hash: niOR/2rBBao7mqKwlysrbHpbqy6t7xsEOUtYXc2IXKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:60:7d:1c:67:61:55:a6:5c:f6:da:6a:b4:3a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=8a8c9617120c4c8e861e5f2686572014936766ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:c8:eb:08:59:68:66:16:ea:7c:fe:0a:f0:
                    75:51:38:b6:5c:1c:c1:fa:61:a8:22:41:7f:db:79:
                    3b:50:14:80:02:76:71:83:54:35:3a:bb:05:ad:27:
                    12:96:86:85:b0:9a:ab:3c:a8:18:b7:10:b1:95:f9:
                    79:51:6b:52:56:48:cf:a7:48:ab:7f:11:4e:ec:d9:
                    ae:50:22:d9:2c:94:d8:f7:bf:83:17:42:5a:8f:93:
                    45:9e:3f:47:42:bc:3f:6c:d6:94:66:2a:26:3d:73:
                    16:a3:88:c7:f0:a3:89:f0:89:4b:0a:e6:7a:d4:6a:
                    21:44:0a:33:b0:52:38:21:58:7e:f7:56:f1:1d:3b:
                    88:a5:70:47:a9:8b:15:8f:b2:b1:cd:3c:8f:6a:e5:
                    4b:96:5f:ef:13:12:7c:35:32:0b:72:b3:3d:0a:b1:
                    33:48:32:71:02:c3:1e:2e:da:a5:e3:3b:1b:00:54:
                    5e:31:7e:ea:ed:d3:fb:23:fe:04:40:64:ac:9f:56:
                    49:99:0b:bb:e4:e8:6c:03:01:dd:78:80:5f:52:7f:
                    64:17:16:11:cc:15:10:27:3f:07:cf:e3:a2:04:af:
                    69:bf:27:29:8e:d2:c3:2f:2b:f3:23:b8:e0:0d:e5:
                    e0:43:63:8d:5e:83:56:01:8c:b3:05:59:62:71:f2:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8C:96:17:12:0C:4C:8E:86:1E:5F:26:86:57:20:14:93:67:66:ED
            X509v3 Authority Key Identifier:
                keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3d:97:d0:92:87:43:79:52:60:6a:e6:21:8a:7e:c7:12:f9:
         cd:43:43:27:76:6a:87:02:7d:00:70:bf:0a:54:30:f5:37:3e:
         40:87:85:a6:80:da:cc:86:15:6f:64:1d:0d:59:76:5d:83:d4:
         1f:3a:68:69:35:3d:36:c6:ee:dd:b9:7e:58:0c:f8:42:d2:b6:
         fe:ec:10:f1:ec:22:8d:62:d9:66:6c:40:80:f9:77:8b:da:e3:
         88:76:f0:b3:0d:ab:d2:b3:0c:94:f4:71:d5:bb:01:c4:4b:08:
         26:90:40:88:7c:01:6c:62:1f:3d:70:e2:0f:bc:c6:eb:89:6b:
         c2:85:20:a3:8c:74:09:0b:33:45:05:b1:e4:d1:87:f8:e2:18:
         11:a3:ac:65:e2:34:79:5c:39:b3:df:9a:c3:75:dd:a7:db:9b:
         01:3d:8a:ba:a1:54:99:ea:1c:e4:b6:ef:b6:fa:cd:80:8c:28:
         6c:a0:fc:02:0f:e2:d6:14:39:d2:8e:87:b9:4d:ea:76:ba:b1:
         b1:59:50:4f:fb:9b:e8:78:f3:dc:20:e6:51:91:4b:8a:e8:be:
         81:34:25:63:c9:24:a9:54:77:c9:4b:2a:f9:69:48:d7:5f:b8:
         c3:8e:8a:ac:1b:de:ef:45:0c:37:9f:e6:49:ee:68:a4:5d:14:
         aa:7b:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----