Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
File:                     maykAWr4XVlpVITNYTzxiW39WaE.mft (raw, json)
Hash identifier:          gZGp0hf+gN7XFpPCDVQPWgNqBMAe7FqIVPjQKNKbAl4=
Subject key identifier:   EE:CB:D0:57:FA:53:70:B4:5C:41:1C:F0:E0:79:08:14:2B:EE:05:72
Authority key identifier: 99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1
Certificate issuer:       /CN=99aca4016af85d59695484cd613cf1896dfd59a1
Certificate serial:       01962E2AE50565CAA9306E35E063D26707BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft
Manifest number:          02FE
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: ZpEam4JrA75W3vKeb-kb3n0W0y0.roa (hash: kYGb95Bh9aZOERP/x6nIdXNnyuRNyDQM9q/MQE4pooE=)
                          2: maykAWr4XVlpVITNYTzxiW39WaE.crl (hash: 0CMaByc6kXEzYTMsz8L3WcGKXk6JlKO3VTN7nEAeK1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e5:05:65:ca:a9:30:6e:35:e0:63:d2:67:07:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99aca4016af85d59695484cd613cf1896dfd59a1
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=eecbd057fa5370b45c411cf0e07908142bee0572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:76:4a:b4:c4:78:f9:fe:f0:ad:b2:68:77:
                    75:80:15:93:f4:41:6b:ff:d6:82:cf:fb:41:6d:5a:
                    4a:2a:a5:d1:cb:12:74:19:06:94:ff:18:f8:72:01:
                    a0:a1:02:d4:88:5b:79:9c:14:a6:7f:cf:8d:46:8c:
                    1a:20:55:d0:e9:0c:59:36:a4:c6:31:f3:09:a9:b2:
                    63:0a:4c:4f:4a:73:57:66:af:e1:ed:7e:de:a5:0c:
                    09:4c:30:20:45:e7:26:d9:a9:da:aa:46:f6:ba:1a:
                    97:70:b2:e8:ab:94:b0:fd:2c:db:a3:fa:03:7e:4c:
                    a5:38:a3:de:33:fa:13:10:50:da:db:58:6d:da:7a:
                    d9:df:56:a0:e8:c0:d2:74:a6:bd:a9:0c:f9:be:bd:
                    35:e9:fa:ed:21:bf:82:0a:61:85:33:66:5a:1a:de:
                    8b:f6:ac:81:c2:c2:c6:ac:57:ff:b5:16:f7:25:3d:
                    f0:d9:29:a7:39:fc:10:82:f3:36:84:92:3f:53:68:
                    a1:c0:5a:5d:7d:90:14:86:90:a7:c6:74:b6:30:3f:
                    32:9f:71:19:94:97:a3:a8:8d:97:83:b8:14:86:a6:
                    03:ec:2f:b0:b8:96:e6:91:67:c1:e9:ba:38:ea:23:
                    13:4e:d3:4f:6b:ee:c4:09:58:04:6d:b5:63:7b:e5:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CB:D0:57:FA:53:70:B4:5C:41:1C:F0:E0:79:08:14:2B:EE:05:72
            X509v3 Authority Key Identifier:
                keyid:99:AC:A4:01:6A:F8:5D:59:69:54:84:CD:61:3C:F1:89:6D:FD:59:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maykAWr4XVlpVITNYTzxiW39WaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e0c1d4-8b33-4360-9f50-cbbac6e4ad71/1/maykAWr4XVlpVITNYTzxiW39WaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:08:82:a2:b2:4c:9f:43:f0:4e:2e:09:87:f1:9f:0c:12:
         34:85:15:26:47:3f:18:d1:94:4a:bd:54:e8:da:06:ed:2f:fc:
         c9:74:66:45:8f:ff:f5:16:24:67:ff:6b:ab:8f:b5:3d:74:68:
         d0:32:9a:ef:6b:d3:3c:ff:c3:99:2c:a2:a8:0c:9d:c2:34:5b:
         7d:d7:b6:04:42:0e:ad:a6:a1:7e:c4:5f:00:c3:fe:70:0a:d8:
         91:b3:ba:b0:60:48:62:dc:1d:ff:c3:c9:ab:6e:ae:03:a4:79:
         f7:ab:a6:61:95:14:3e:48:1f:0c:26:c4:d2:a3:06:7a:f7:45:
         4c:4c:dd:71:c1:6b:49:df:a4:7e:ce:73:5a:88:cf:bf:a1:e9:
         7d:8f:bf:9c:c0:eb:0c:d7:f6:f1:6e:b2:a7:85:eb:d7:31:69:
         90:16:ae:fc:bf:61:10:39:0c:03:20:87:c0:e0:09:c0:87:d8:
         2f:17:2c:20:0d:2d:ea:13:7c:76:25:1e:d1:0f:aa:73:ce:bb:
         9c:ba:cb:db:40:69:f4:89:c2:dd:56:b1:43:c5:4c:97:f7:11:
         1c:e7:b2:3f:56:3a:f0:95:cf:7f:75:7b:2f:13:a4:21:89:67:
         f4:dc:27:6b:c9:be:96:eb:e2:ed:1c:db:44:d7:a1:4d:18:c6:
         79:f0:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----