Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
File:                     EyMNpwIy9meEcw_WwSVRNbf40J8.mft (raw, json)
Hash identifier:          IXzzECJubz65CCt7b1dmYW1oRnn6zogZkzcQ+Hc/NH8=
Subject key identifier:   B6:18:16:F6:85:73:0D:D3:A1:C9:C8:57:43:1E:1A:53:95:A3:15:A2
Authority key identifier: 13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
Certificate issuer:       /CN=13230da70232f66784730fd6c1255135b7f8d09f
Certificate serial:       01962F7419B2582275A3762E8DEF3ECE25B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:00:59 +0000
Files and hashes:         1: EyMNpwIy9meEcw_WwSVRNbf40J8.crl (hash: wfga22pC6wkcjcy5OLFe75qqgjwUsFSxacqcJCV5ggk=)
                          2: FQ08SQHuDvgVY6-vPXOmsMLAo8o.roa (hash: +WAwLsz7zfr0/VzLYZMmCYMqBgn9Wh4IQM0OezR1NSE=)
                          3: vKEgB0Axxq_vhvipNh_yyOaG4yg.roa (hash: 4yc1yltpHrzDr+Gx1FWQMUfwlna9IEYvSirw6/GV188=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:19:b2:58:22:75:a3:76:2e:8d:ef:3e:ce:25:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13230da70232f66784730fd6c1255135b7f8d09f
        Validity
            Not Before: Apr 13 14:00:59 2025 GMT
            Not After : Apr 14 14:00:59 2025 GMT
        Subject: CN=b61816f685730dd3a1c9c857431e1a5395a315a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:72:3d:78:92:f3:41:40:78:75:0c:bf:2e:
                    54:87:cb:10:10:a4:1d:92:8b:4a:d4:26:f9:7a:b5:
                    8d:21:ba:a7:3a:71:f9:ed:ad:14:ff:f7:db:ce:2d:
                    f2:1b:65:5c:2b:20:b4:2b:02:0d:d5:35:36:8f:dc:
                    a5:a1:f2:05:5a:88:03:ee:b2:83:99:10:16:13:ca:
                    14:ca:61:24:12:cb:ab:cc:ec:11:44:d8:0e:f7:4c:
                    80:14:56:dc:c0:1f:86:7f:39:7b:18:52:66:05:8c:
                    34:23:00:73:1a:7c:c0:3c:2c:59:7f:6c:a2:a1:05:
                    9d:6b:19:45:02:0a:04:97:9a:5a:20:ad:c1:68:49:
                    7e:41:cc:e7:2f:bb:36:73:35:99:8e:19:1e:a4:c4:
                    29:1a:99:e9:20:33:7b:dc:c6:5b:a2:88:ca:7b:73:
                    09:c1:71:9e:65:d1:46:0c:cd:95:9a:07:37:69:26:
                    30:b0:6a:4a:a8:16:e4:80:91:4c:1e:6f:0d:dd:e7:
                    6b:87:91:50:aa:97:c6:e1:4c:41:0b:27:2f:57:c2:
                    15:c2:05:ef:2f:41:59:40:eb:29:10:bb:8f:24:42:
                    56:68:3d:06:05:82:a8:a5:83:ac:3a:06:9b:13:08:
                    5a:a2:05:a4:9d:ef:48:76:ee:74:8d:b0:8e:07:da:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:18:16:F6:85:73:0D:D3:A1:C9:C8:57:43:1E:1A:53:95:A3:15:A2
            X509v3 Authority Key Identifier:
                keyid:13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:78:79:a2:9b:52:e7:c9:a4:b3:9c:a7:bc:f0:11:40:b7:fc:
         fd:58:75:80:4d:c4:93:fa:90:be:2c:49:bb:d7:1a:02:03:45:
         9e:62:3f:2a:93:78:76:58:a0:7e:42:cd:7c:03:3c:55:20:26:
         8e:51:1e:ef:a2:62:32:92:33:0d:e7:5d:46:44:c6:88:1a:46:
         56:a8:3b:ea:d2:8d:80:95:da:46:e0:fe:cf:21:cb:8c:d6:94:
         d1:67:6a:be:bb:da:8d:0a:08:7b:21:d0:a0:0a:71:06:ca:48:
         ac:a6:cd:d1:03:60:22:1b:bd:be:ae:3e:18:df:cb:04:a3:85:
         cc:17:5a:17:24:61:ea:6d:b9:03:ff:6c:9f:32:61:ec:0f:a3:
         a5:59:5f:73:08:02:98:19:b1:b8:b9:6d:54:29:0c:a7:91:66:
         4f:50:df:b4:d1:c5:af:52:93:e3:4c:bf:32:92:09:45:42:b6:
         3e:c1:ce:34:98:87:a1:48:94:ab:21:70:e2:4d:92:f1:d5:16:
         92:77:2b:55:59:68:d4:56:76:5b:13:22:68:08:33:e4:ac:9f:
         5b:02:14:50:56:29:d5:85:3f:e9:a8:7d:82:42:bd:4f:7a:31:
         5a:ff:18:93:ed:ec:57:e1:f0:1d:2d:2b:c4:f0:9c:87:6e:47:
         0c:b0:51:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----