Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File:                     eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier:          0VSs9bBkA+1KWRHJum5wzXw3V0dB14xSJz2moFxR4mg=
Subject key identifier:   2C:2B:FE:A1:08:85:E6:0F:94:FC:3F:DA:CF:EC:6F:B9:89:CC:2D:58
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer:       /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial:       01962F071DD7C39A0685FF17775397921452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
                          2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
                          3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: 96g5JZMvfyHo7JsJBat/4OdpeW4ZNuyk4CHnBqKa9lk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1d:d7:c3:9a:06:85:ff:17:77:53:97:92:14:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=2c2bfea10885e60f94fc3fdacfec6fb989cc2d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:e8:c2:5f:a3:ac:7d:cf:50:85:90:e5:8f:
                    7a:ac:57:93:f9:2b:d7:27:f2:b3:af:d3:c3:da:47:
                    a4:5e:2c:e4:6e:7c:bf:47:e6:79:8d:7f:f2:37:53:
                    85:ef:d3:46:e4:ba:81:a9:45:ed:28:01:9e:67:20:
                    36:8a:74:6e:f4:0a:4d:40:0d:4a:ea:86:3b:ef:cc:
                    65:e7:c1:8a:17:2b:e5:fe:92:66:1a:11:cf:8a:42:
                    15:93:99:9f:3e:d1:45:78:42:95:ca:5c:2c:82:a5:
                    40:11:f4:c4:15:65:1c:fe:40:f3:c5:fa:54:cd:7b:
                    8a:0e:28:0e:85:11:05:c6:fc:7c:35:6b:ba:b5:2a:
                    2e:2b:a8:2f:e6:77:5c:c2:a2:98:2a:dc:26:a3:00:
                    0b:98:f6:7c:d4:67:fa:5e:14:d7:4e:ab:c7:8c:b2:
                    5e:40:67:33:69:46:fb:55:ff:3b:68:4e:06:b8:30:
                    bd:c8:a3:b6:df:25:a0:bf:5e:1c:4d:b9:f8:35:be:
                    a8:9b:32:61:17:e7:aa:24:19:48:2c:64:0b:ad:ea:
                    9c:b3:42:a1:01:39:9d:5a:7c:f9:2e:9e:db:25:0d:
                    0b:50:16:24:91:5c:d3:96:09:aa:46:cc:f5:e4:64:
                    84:38:db:56:d0:c8:25:c6:79:77:7e:be:12:fe:ce:
                    69:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2B:FE:A1:08:85:E6:0F:94:FC:3F:DA:CF:EC:6F:B9:89:CC:2D:58
            X509v3 Authority Key Identifier:
                keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:f0:4d:3b:dd:78:46:d7:ab:55:26:3d:6e:b7:6a:7a:5c:
         a2:26:17:f0:0b:98:aa:b2:1c:b9:45:a8:db:01:f9:3c:08:c9:
         cc:89:ad:20:79:7c:d1:14:2b:34:1b:7f:1e:a2:b0:38:e3:30:
         9b:dd:95:c2:14:34:c6:0e:11:f9:b1:00:61:1d:62:02:ab:89:
         66:99:31:46:be:99:d3:6d:f7:2e:50:a7:19:17:7c:d2:75:3c:
         a4:e9:21:7c:f8:f6:08:4a:bd:f3:e7:a7:e6:cb:e7:15:27:76:
         71:1d:13:ee:5e:c2:a2:5c:53:d9:4e:68:ab:1a:32:a4:82:09:
         b8:10:1a:39:68:97:1f:c9:41:c4:71:fd:ea:98:08:1f:e2:f6:
         70:81:07:0e:93:6e:0d:80:ad:17:d9:1c:ab:5c:b0:c6:fc:76:
         8e:f2:90:e5:8d:23:68:02:55:a6:59:58:60:e8:f3:80:3c:67:
         03:13:cb:67:64:76:3e:6a:e7:94:4a:58:54:2d:3a:3d:b0:a0:
         af:12:69:cb:a8:03:16:21:15:46:d7:3e:79:f1:97:93:99:ae:
         a7:46:2b:16:0e:af:b0:e1:0d:e1:f7:fc:49:7e:73:26:b0:6b:
         49:98:be:3d:a5:8a:44:0c:03:c7:43:1a:a1:d1:8e:ea:3c:73:
         19:1d:59:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----