Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File:                     EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier:          NfDtrfe7uMPxBw1I4apOklQj+/VXhrYMH5Gzb62fP8Q=
Subject key identifier:   70:AD:85:9B:C9:C4:F9:4D:D1:4F:13:95:0E:4B:8D:79:8A:3E:19:E7
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer:       /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial:       01962F7434E1DDF54958A33AC76A06DB78C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number:          0EB2
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: 9ltoRvF8IrCagfv5cCrEK7BRKu0.roa (hash: YJOxESLE8nePOUhojbtV7GmOsBKkJt32JlcUp20ccWw=)
                          2: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: iJy87nl2Tb9Jkwd3/PjVh/PLf85chJrtkS6aafNaH3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:34:e1:dd:f5:49:58:a3:3a:c7:6a:06:db:78:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=70ad859bc9c4f94dd14f13950e4b8d798a3e19e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:05:79:9c:e7:27:72:34:14:ec:aa:1c:7b:
                    01:9e:fd:c7:8d:4c:f1:f7:24:35:19:46:d8:f6:ef:
                    cc:7d:2e:13:a5:d7:8a:cf:84:64:d2:ca:38:c0:7b:
                    8e:86:92:35:ff:91:db:27:65:67:de:e3:ec:f3:ef:
                    60:2b:da:bb:72:8a:5d:47:72:33:b5:fa:61:bf:97:
                    f2:1f:bc:54:bd:5a:99:e6:6e:e9:21:5e:77:48:bd:
                    29:3b:f0:11:cb:3e:2e:ca:da:b5:6c:21:5a:d7:84:
                    b5:39:01:d8:e5:4b:a3:d2:62:e6:3a:29:93:24:fe:
                    df:85:d5:e9:61:bd:9e:be:77:e7:83:6d:02:a2:14:
                    7b:f8:5d:95:9d:ec:f3:77:8f:0c:04:13:3d:29:9b:
                    75:55:75:7d:4a:7d:43:ad:56:a8:61:18:12:c6:73:
                    55:08:b9:24:75:2d:ca:8e:0d:f9:60:bb:99:c6:0c:
                    57:ca:3b:ce:e2:e6:d5:c6:32:0f:1b:76:e4:18:34:
                    5b:05:03:84:4e:89:1f:3e:4e:64:f5:88:a1:98:3c:
                    08:f1:7c:4a:f1:27:9a:33:f8:c8:f0:44:ca:e7:3b:
                    d0:a9:b1:d0:49:fe:b3:cf:e3:cd:e5:d7:84:82:7e:
                    b0:e3:1e:25:37:9b:9e:51:5a:5f:24:b1:43:f0:1b:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:85:9B:C9:C4:F9:4D:D1:4F:13:95:0E:4B:8D:79:8A:3E:19:E7
            X509v3 Authority Key Identifier:
                keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:84:f1:81:72:da:ed:d6:73:f4:5c:f9:63:b3:75:97:83:40:
         2e:41:85:e6:94:54:bb:a2:fa:97:14:77:88:78:69:10:48:f9:
         fe:00:cb:02:ca:10:1c:f1:59:67:81:f2:c0:6f:26:53:69:bf:
         37:ff:bd:22:ba:b1:fa:6e:c8:f7:44:11:6d:e5:94:61:20:fc:
         88:37:2e:e1:54:d7:06:f1:cb:17:66:ba:25:31:ff:ac:6d:69:
         26:a6:eb:01:0c:d2:fc:38:d2:00:64:41:d5:b0:38:c9:24:80:
         bc:29:22:30:c4:3b:9f:aa:20:b2:2e:55:bb:78:56:1c:15:02:
         6b:6e:5b:ce:4e:56:10:1d:b8:39:b4:b0:92:65:ad:54:ef:a8:
         d1:c9:c8:ca:cc:da:be:d8:6e:da:03:c2:44:dd:90:6e:12:6c:
         6a:20:27:cb:24:3d:84:42:00:c0:f7:c6:c7:ad:24:e8:39:9b:
         b9:9e:89:44:6d:57:11:bd:50:9a:f0:94:eb:ca:31:a5:4b:5f:
         d5:65:aa:d9:dc:fd:55:6a:68:f8:14:91:11:cb:70:00:3a:69:
         c1:56:fa:05:a8:ae:9d:1e:b1:3a:2a:95:84:36:91:a7:5d:28:
         7c:03:42:2a:b8:33:56:b6:07:3c:42:e1:17:8e:b8:75:b9:f2:
         9c:89:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----