Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File:                     eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier:          Lu5EeGTRi7alFNvNoSgmsuZBzeWgdlJb/k31Ts94Ips=
Subject key identifier:   DF:A6:9D:60:9C:DD:1F:4F:13:2A:B9:FE:65:F6:77:34:AC:C6:9E:E3
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer:       /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial:       01962E98C181C45AACF771212F51318B504C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number:          055C
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: 21v5q3pMDwpvxT2hARKYBVN9oBs.roa (hash: td2s5WSN+NdDkVRugdr/XPfHV2CBhN3a/Leo5BS5CwM=)
                          2: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: CkF2x1nrIJp/DyE5L4rEFeILobxh+9Vle7QhMEVPu2Y=)
                          3: nEwu5TmmWrj9UATGJds44UGD1Ts.roa (hash: 5ZaywPLeoC0QnbAlhOsY8aemb2/eQKD5NWLwsAEHpiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c1:81:c4:5a:ac:f7:71:21:2f:51:31:8b:50:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=dfa69d609cdd1f4f132ab9fe65f67734acc69ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:35:b5:8a:8c:f3:46:83:b6:57:2b:dd:46:
                    89:46:d5:e7:41:38:86:e4:22:5a:2b:05:b8:e5:70:
                    d7:09:9c:b2:d9:7f:75:af:45:8e:0b:42:9a:20:c2:
                    9d:0c:34:69:f4:55:48:66:4d:c2:03:4b:37:a6:af:
                    60:c3:20:b0:74:ff:e2:3b:d5:6a:05:9b:e0:23:fc:
                    bf:7d:32:62:0a:35:b3:ce:35:12:fc:d1:8f:e1:fd:
                    fc:b3:88:f5:74:17:f9:c4:14:cb:da:35:db:cb:18:
                    8d:35:be:58:2e:f0:35:85:7a:9f:32:00:89:a3:b3:
                    35:c2:bb:e8:7f:25:ad:67:29:f4:45:48:6d:38:7c:
                    43:99:1c:ea:f7:93:2e:c3:be:4f:e1:46:c6:fe:2b:
                    e6:9c:b7:14:60:95:a7:c2:c6:f4:32:80:2f:71:60:
                    f5:69:ee:3b:8e:07:34:2d:24:d3:c7:ce:43:93:76:
                    26:a3:ac:2b:b8:2d:61:5c:cb:f3:4a:f8:ed:3b:c4:
                    08:23:ae:36:14:9a:31:64:cc:32:f8:67:46:df:65:
                    62:d7:da:28:90:58:0b:cf:1e:30:3d:be:95:04:8d:
                    0b:7a:fa:fd:97:50:56:8c:e6:45:32:85:9d:f2:09:
                    92:38:9f:ec:ab:59:92:49:9f:19:7a:01:d4:05:d2:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:9D:60:9C:DD:1F:4F:13:2A:B9:FE:65:F6:77:34:AC:C6:9E:E3
            X509v3 Authority Key Identifier:
                keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:99:a1:72:2e:71:db:77:8c:11:f1:06:2f:5d:b9:39:1d:26:
         7a:85:22:e7:1e:93:a0:7c:11:6e:28:f7:f3:53:72:9d:ff:02:
         58:9c:01:05:ab:19:d5:06:d1:4a:0f:2c:9e:bf:04:94:19:48:
         87:58:09:0c:61:bf:12:0b:fa:e8:74:8d:2f:5e:14:b4:f0:05:
         26:fd:44:dc:72:56:12:e3:4e:45:45:e9:b1:4d:2e:5a:c6:55:
         89:41:f6:41:62:66:d6:8a:16:47:7d:bd:6b:b1:89:18:bd:a9:
         6b:53:06:fb:54:c3:9f:fe:2d:90:44:18:44:3d:d0:e3:91:ba:
         9b:92:d8:8b:3d:9e:58:9c:73:d7:16:0c:bf:7d:af:11:5f:52:
         c8:26:a3:88:16:ff:28:00:2f:3e:96:66:12:4f:66:d7:46:bb:
         9a:72:ff:b5:f3:d2:76:f3:4b:7f:16:37:55:29:7e:b1:02:2a:
         60:f4:f7:2d:35:98:6f:34:1f:20:74:cf:59:d1:7c:c4:17:d4:
         c4:80:5d:fc:b4:f2:3c:0d:d4:67:ff:a1:aa:8e:5a:2b:ef:02:
         19:de:01:98:ce:86:85:37:cc:e9:38:1b:3b:3b:c9:51:47:fb:
         85:34:c8:92:b3:c5:2f:d3:4a:0b:bc:d1:aa:50:72:31:52:43:
         45:e4:5f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----