Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
File:                     EH99C2TJjJno0IaDUFJk1rCL_YY.mft (raw, json)
Hash identifier:          guyFELu3F8s6ApNaxBSa0F+4NrEKlWK8oevDZFpDHts=
Subject key identifier:   3C:CD:8C:B5:73:D2:0D:14:7B:35:11:40:61:BE:27:09:CA:15:98:82
Authority key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Certificate issuer:       /CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Certificate serial:       01962E997D153474331BC9AF23C143B9E23E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: EH99C2TJjJno0IaDUFJk1rCL_YY.crl (hash: 5IkVKNXqG/V7vE+4HmnGPDRC9PIvdVUAmk6Qlnw87RM=)
                          2: vrwlMuSLqv4pWbmq0q24Ljisqq4.roa (hash: ownIF7p9fjg22RoqGmSsCCI+6MRT6EIXQBD8zcqpPug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7d:15:34:74:33:1b:c9:af:23:c1:43:b9:e2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=3ccd8cb573d20d147b35114061be2709ca159882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:4d:5f:5c:ed:df:5a:b4:d6:3d:80:42:96:
                    d3:a3:09:b4:19:03:8e:39:ce:15:84:7f:f2:7d:0c:
                    8e:73:00:d6:bf:e1:66:e2:f3:1a:36:42:89:fe:a5:
                    aa:23:57:d1:f9:e0:f4:17:a6:00:96:54:e8:48:70:
                    14:8d:f5:80:dc:a1:ce:0c:ad:af:7e:b3:0b:4e:3f:
                    84:4e:f6:f7:b4:4c:d4:ea:e0:ef:3c:0d:c6:9e:73:
                    e8:f5:b8:fd:c4:ac:0a:57:24:f3:9f:79:33:46:a5:
                    55:2a:2b:0f:88:49:b9:30:e9:f1:05:7e:08:b1:32:
                    48:70:c0:aa:e0:b6:34:50:60:5b:ca:31:42:0e:8c:
                    81:40:c6:d7:79:9d:c4:24:7f:de:a5:c9:dc:28:c4:
                    70:ae:86:94:c1:72:02:cb:56:5f:34:65:56:46:34:
                    0b:2f:50:be:33:7e:3a:e4:12:b8:c7:68:e5:1a:31:
                    f1:f5:eb:bc:95:44:5e:98:a1:05:b2:87:4c:da:e3:
                    ee:28:b1:50:11:58:21:d0:31:16:d4:cc:9e:70:30:
                    f4:a2:99:2a:bc:67:03:bf:b7:a1:03:bc:9a:dc:67:
                    29:72:bf:fb:ee:59:62:4e:08:24:3a:77:56:8f:c2:
                    ee:47:ab:92:9e:d0:f7:c0:1a:aa:df:95:7e:d1:cd:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CD:8C:B5:73:D2:0D:14:7B:35:11:40:61:BE:27:09:CA:15:98:82
            X509v3 Authority Key Identifier:
                keyid:10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:bb:46:60:6c:cc:8c:81:fb:a6:66:41:2e:51:d9:d6:74:
         a2:87:0b:fa:59:68:e0:22:e2:29:c2:fa:5c:44:13:0b:90:36:
         84:9a:43:77:33:24:28:e9:1d:ea:ff:89:f2:da:e8:a9:cb:fa:
         d2:ed:20:c3:47:00:e5:c8:5c:bb:ab:67:2e:f1:92:cf:fd:f4:
         d1:c9:0b:fa:48:64:40:1f:ce:62:77:9f:f1:2d:5c:c3:9b:08:
         a6:f6:32:c4:f8:4e:2f:72:e0:14:ca:3e:ce:2e:2f:28:6d:00:
         e4:34:41:16:eb:a7:87:ea:12:4c:cb:0b:47:95:5a:e8:26:3f:
         82:2c:00:d9:d4:26:cd:83:f2:29:a3:a0:2d:98:23:87:d4:a4:
         30:c3:90:d9:5a:ee:e1:4b:14:3b:9c:42:bb:da:b1:b9:d0:72:
         e8:fe:98:41:8b:e5:0c:2b:ef:87:50:6b:ab:fb:cc:90:ff:2f:
         7d:9e:a9:d3:ab:d3:67:2b:23:d8:42:37:6d:c6:b6:b4:a7:44:
         6d:d0:16:c8:cf:3d:b4:af:bc:7a:b6:d2:da:15:cf:fc:c9:0b:
         9a:23:62:3e:76:a4:a0:4d:03:42:f9:e1:50:c2:02:d0:b6:37:
         43:5d:dc:be:08:07:72:0e:fd:0e:da:9d:c0:fa:30:76:d8:60:
         de:5e:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----