Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
File:                     eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json)
Hash identifier:          CgfKdltzGW43g3qk++wgJLTTjQoo4mEqNYN4Pf4aiQY=
Subject key identifier:   06:4A:E7:E0:35:0B:7E:CF:9C:45:0E:86:F1:1B:EC:ED:69:3B:FB:09
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Certificate issuer:       /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial:       01962ECF5B0B531351F020EE2CC8EC1B0DAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa (hash: jeQ6CR9o4kjg+lITTYhPycLMezjSSuHW+WQ2edSSAyQ=)
                          2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: Cqeu9huj1hnxxKErUgjOaGa6RUzfmnOqYa5jjWPQcu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5b:0b:53:13:51:f0:20:ee:2c:c8:ec:1b:0d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=064ae7e0350b7ecf9c450e86f11beced693bfb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:12:60:b0:84:de:71:95:82:74:b8:9a:9a:
                    01:54:a7:c8:44:64:ab:b6:3e:9f:ac:90:40:91:c3:
                    63:cf:97:a1:34:97:a6:0b:40:59:cc:3a:f4:82:37:
                    05:0f:65:b4:ca:e6:f6:37:68:33:28:48:05:7b:f4:
                    cb:0d:63:6e:c5:90:51:fa:28:11:64:c2:56:0e:4a:
                    e3:05:d4:5b:a3:85:fd:8a:ee:9b:bd:40:5c:ab:87:
                    c3:c3:d4:9c:2d:d9:70:80:a9:2d:19:9e:e2:34:dd:
                    31:e5:ca:e9:81:8e:b5:b0:fb:9f:dc:66:cc:c8:fe:
                    0b:90:19:fa:e9:c4:81:f6:5b:57:4d:93:36:d9:64:
                    11:37:7b:90:71:67:34:9d:2e:8d:43:63:c0:42:b8:
                    69:a0:be:45:ec:e1:1e:60:fc:89:a0:91:4f:64:74:
                    d7:c3:73:6b:e5:b1:f3:95:23:44:19:83:b6:a1:7a:
                    83:ed:43:6d:6f:96:a6:3e:74:9f:00:fb:3c:30:1b:
                    f4:f5:a1:d5:3e:ca:d0:40:08:00:99:be:7b:9b:51:
                    d4:7f:2c:22:62:b8:40:12:36:be:08:0e:c5:c5:7a:
                    9b:87:03:07:55:e2:21:29:16:ca:a1:be:77:3b:0d:
                    ea:ac:bf:13:ba:e6:72:16:4a:94:04:7b:5e:8f:08:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4A:E7:E0:35:0B:7E:CF:9C:45:0E:86:F1:1B:EC:ED:69:3B:FB:09
            X509v3 Authority Key Identifier:
                keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:88:c1:ce:6c:34:af:45:6e:3a:d3:4b:9b:7a:fd:db:e0:10:
         47:63:99:4b:05:b3:94:cf:56:b3:5e:62:9f:cc:6f:5f:76:8a:
         11:4a:a7:44:0d:58:60:f6:66:0b:83:55:66:12:a0:58:c5:fd:
         63:e4:f3:8d:7b:71:8f:06:21:b0:bd:48:97:8c:2e:e1:1c:3f:
         5a:77:dd:3e:b5:49:a7:81:0d:bc:0b:82:9b:87:0f:89:c6:4e:
         d3:9b:f7:72:3c:9b:36:90:32:51:98:68:69:40:a3:50:96:16:
         3c:56:d4:a2:99:03:a9:e0:43:db:5a:d1:49:0d:f5:1c:ac:7f:
         9c:4a:7f:59:de:3f:ac:ea:31:8d:0c:9d:86:1c:40:fd:6e:05:
         c7:d0:65:3a:fa:ff:c5:be:46:5d:5b:f3:8a:c2:83:69:4f:53:
         b8:5d:50:40:cb:0b:39:61:e5:cf:58:07:cb:4d:c9:79:63:c7:
         5b:1c:1e:3b:7d:1a:b7:7d:c5:d2:a3:4f:3b:1f:b0:dc:16:3c:
         e6:3c:9f:ff:3b:17:81:a5:ac:79:71:68:45:39:ab:15:9d:b4:
         44:21:04:ec:64:01:06:24:9f:3f:55:d4:80:3f:aa:b5:88:4d:
         0e:c1:f4:3c:d9:71:cb:2d:9c:c9:be:bc:86:a4:91:35:9a:9c:
         f0:ce:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----