Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
File:                     eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json)
Hash identifier:          w5OVUkzyUkltKEwSOaWn3z31MUq946aYWzmHwF0gOVA=
Subject key identifier:   8F:92:E8:AA:FC:0D:2E:1A:57:89:35:08:C8:DA:78:7E:98:87:16:66
Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Certificate issuer:       /CN=78d32c121735449f1538ff0036f4abd0600a825f
Certificate serial:       01962E9973D84859B2A55123170A14227D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
Manifest number:          8F
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: Priav2qavuR1jaic59HJb/5nNmXqWGtYFV9aL09DUNo=)
                          2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:73:d8:48:59:b2:a5:51:23:17:0a:14:22:7d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=8f92e8aafc0d2e1a57893508c8da787e98871666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:9a:66:45:02:25:c3:1f:b9:e1:70:37:ea:
                    3d:1a:90:ec:cc:e3:5c:59:78:1e:4e:f4:69:46:6c:
                    ed:73:ae:ae:5a:48:5c:ba:88:85:77:bb:7f:56:b5:
                    d0:17:13:44:3d:d3:af:9a:36:6a:70:ff:bc:15:9f:
                    75:61:08:7f:c9:b1:0f:71:66:d9:6d:11:ae:72:32:
                    1f:fd:aa:42:e6:10:f9:6c:50:2d:e3:13:9f:11:5a:
                    26:d1:81:5e:3a:ce:bc:dd:a6:9f:3c:d3:9c:90:33:
                    cc:b8:b8:af:e1:91:a5:99:3e:14:5a:97:1d:90:20:
                    77:ad:f5:cf:b0:a7:44:02:7c:ac:62:3b:ad:28:0c:
                    c8:b2:25:a9:ea:85:da:75:ae:89:4b:a3:e7:5b:e5:
                    eb:5e:89:18:5a:a8:e1:bb:64:15:a2:1a:bb:c1:c9:
                    a9:79:cb:a6:81:47:20:e5:aa:e6:85:c6:55:32:6d:
                    d4:08:b5:46:ad:4f:f2:1b:cf:87:e1:ed:6d:e5:95:
                    68:29:80:e7:ed:93:00:15:55:b8:9f:11:be:73:87:
                    7d:47:b3:d4:4c:8d:e5:90:23:4f:f7:b2:2a:a0:de:
                    8b:e4:89:51:5e:6a:10:89:3f:e5:10:e6:06:3c:ac:
                    20:0b:fd:7d:9a:e0:ad:6f:a2:0e:e0:e4:80:dd:11:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:92:E8:AA:FC:0D:2E:1A:57:89:35:08:C8:DA:78:7E:98:87:16:66
            X509v3 Authority Key Identifier:
                keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:4a:0c:1e:76:73:44:5c:35:e2:80:4c:48:c2:e4:c9:e0:
         b6:61:bb:f1:af:30:79:cf:35:4d:86:cb:60:ce:7e:2c:4b:cf:
         66:09:8e:2c:60:45:cc:66:70:11:83:3b:d4:9f:0e:8c:71:95:
         17:d3:81:f6:1a:0e:01:b2:42:bb:b8:e2:26:b2:26:b9:9e:c2:
         fe:f1:6f:99:c2:4e:2b:52:ff:ed:d1:cc:0e:96:5b:0a:9d:de:
         59:3a:22:37:5f:bc:f1:66:e0:67:ba:ed:f1:d7:b3:96:a3:0e:
         4a:11:b1:77:93:06:65:13:f4:17:3d:30:89:fd:81:e7:ba:ac:
         d6:e9:f5:8b:12:3d:80:72:03:e9:1f:aa:c9:b4:41:8c:77:f6:
         53:83:b2:05:69:0f:e8:ef:68:bb:fa:41:16:ca:9a:b3:e9:2d:
         53:f7:4c:4a:db:17:84:d9:c2:d0:5b:a8:09:2c:56:80:30:34:
         63:b0:fe:04:e4:60:9c:d1:7c:9a:24:7d:8c:58:9f:82:59:75:
         da:57:2e:1e:53:81:a6:8f:b4:6a:2b:6d:ba:3d:bc:3c:8a:46:
         47:90:7b:eb:b9:84:76:c0:9f:91:16:07:3f:88:e7:e1:a9:a5:
         d2:fa:3d:12:ac:3e:11:34:73:8e:17:23:4a:c4:9a:d0:59:c9:
         21:8c:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----