Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
File:                     79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft (raw, json)
Hash identifier:          l9jz+bPbfoeUpLSll8AzCvSNrOkYK7eqewc9EUH2bcc=
Subject key identifier:   7D:04:DA:58:C4:D1:AF:33:6B:C1:DD:A0:DA:A5:0F:63:6F:AB:8F:95
Authority key identifier: EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69
Certificate issuer:       /CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
Certificate serial:       01962E2AF37EC4ED9B21225D5410376B2969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: 79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl (hash: WjzLOMiuw94ldJQniy2kKykxfMvfN3VQ6JwaFdCko6g=)
                          2: zHPhmmLDGByafp8E3VT46VQbn28.roa (hash: +VxtcUh5QNApX1IKUuR65fYbpYpFCHnfMHhjgpFPsbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f3:7e:c4:ed:9b:21:22:5d:54:10:37:6b:29:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=7d04da58c4d1af336bc1dda0daa50f636fab8f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3a:22:f2:93:24:0e:60:a8:ba:79:9a:5b:74:
                    4e:a8:17:d2:9f:ad:6b:f5:d5:f7:42:6d:a5:4f:2a:
                    86:09:65:e5:98:b3:cb:6d:89:a5:a4:ac:f5:1e:a5:
                    4e:42:94:ad:ae:4a:66:12:e1:2d:44:67:33:2f:ba:
                    50:f0:ab:cd:17:6e:74:9c:6f:e6:a5:41:de:e1:91:
                    10:05:49:e6:44:59:71:d3:33:d5:20:f5:11:0f:75:
                    3a:e3:d7:88:80:d4:b9:50:83:c6:77:f1:cf:58:19:
                    10:b9:33:fc:e1:43:90:2f:79:a5:9c:52:66:b1:1c:
                    dd:bf:bd:c1:47:f9:d6:b0:47:19:0b:95:61:1d:1c:
                    41:92:b5:79:05:5d:44:26:12:33:72:1c:5f:d1:90:
                    b9:ba:00:e4:3b:32:51:bf:40:05:b2:8f:a6:e0:71:
                    fd:af:9c:bb:dc:4a:e9:7b:c6:d6:0a:65:41:70:8f:
                    61:2d:5a:df:d6:2f:ac:80:de:14:71:99:c8:72:2c:
                    9c:b6:b5:cc:e5:c8:0f:aa:06:92:5d:70:95:a6:ce:
                    bb:5c:d5:22:c6:56:fe:3e:60:12:c9:ca:f9:67:d1:
                    17:9c:ba:c9:ff:e2:c7:e3:55:32:2d:35:64:03:1e:
                    59:71:c8:c9:69:a8:1a:72:4f:c9:0f:72:90:63:a4:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:04:DA:58:C4:D1:AF:33:6B:C1:DD:A0:DA:A5:0F:63:6F:AB:8F:95
            X509v3 Authority Key Identifier:
                keyid:EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:82:0e:a8:24:d0:cc:6d:fd:38:49:b3:b5:d7:b6:ac:3b:1d:
         4a:30:c2:b1:99:77:e7:89:23:45:c4:37:9b:e1:94:49:82:1e:
         e8:d6:48:5d:7e:92:fb:7c:c8:bf:b3:c7:ee:e9:e7:08:c0:0a:
         89:cb:30:06:fd:fd:69:8e:ce:64:0b:90:b5:cf:36:60:52:80:
         d2:ba:75:58:52:11:a7:be:d1:d2:14:20:77:5d:30:db:13:49:
         72:3a:16:69:7a:d7:d8:3c:31:e5:65:38:15:47:5a:bb:4f:b2:
         bb:94:73:ba:a2:1b:3c:ee:c0:98:69:dc:ae:08:9d:84:1e:11:
         80:6c:34:2d:37:e1:b1:13:ba:f1:03:df:8f:3e:fb:83:ab:19:
         3d:1a:a5:57:17:ab:dd:97:e5:33:7e:82:99:d6:d5:c0:79:90:
         16:da:ec:80:7c:02:45:53:24:b0:e1:9f:6c:cd:79:ed:29:77:
         30:f9:aa:fb:e6:e1:62:ef:aa:d1:78:5f:04:23:4e:1c:e7:c2:
         5d:9e:d5:a6:80:4e:e2:e7:0a:2e:84:df:b2:6f:e5:85:85:6b:
         84:ed:d0:42:cd:20:74:8a:87:c9:12:66:b7:5a:7a:a2:11:2c:
         86:7b:03:44:f2:05:79:34:f7:02:34:f1:7a:77:d8:30:1f:e0:
         31:54:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----