Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
File:                     eWXNFQMEg9EUsAQZwluZNABY1SA.mft (raw, json)
Hash identifier:          ie975Jjp3WZmX9sHRToQGH9hWnw4eBPXTx0WYwrBbCc=
Subject key identifier:   57:F3:0B:86:C5:45:6A:48:58:29:8B:87:8A:E9:D4:00:E9:53:F4:E2
Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
Certificate issuer:       /CN=7965cd15030483d114b00419c25b99340058d520
Certificate serial:       01962E2B38BA98FB5C9C13C3FB69C5FA0091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
Manifest number:          0B18
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: NjtRv5Q_0eZIY70ytziif3lPISQ.roa (hash: /6raoHgUbdMd0T7X1w8hUg8mjsKg/piCtJBKivMkkxU=)
                          2: eWXNFQMEg9EUsAQZwluZNABY1SA.crl (hash: i+C/N3xZJFUPGr50zT2Rq7RCssPXX6CSJruhGqYjDLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:38:ba:98:fb:5c:9c:13:c3:fb:69:c5:fa:00:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7965cd15030483d114b00419c25b99340058d520
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=57f30b86c5456a4858298b878ae9d400e953f4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e3:41:e6:8f:d9:dc:6a:f6:74:a3:12:58:ca:
                    ff:96:eb:db:27:1c:0d:98:49:fa:f5:f1:ff:0e:62:
                    78:ed:40:38:e7:6c:dc:e4:0b:16:b5:97:1d:d4:6a:
                    7c:98:8b:a5:80:f3:e2:f7:3d:fe:27:89:41:fc:14:
                    5b:95:85:6b:a2:eb:b7:7d:ce:c8:68:11:b3:0a:8c:
                    c1:a8:f3:67:9e:51:a5:95:8d:69:19:24:ce:ea:67:
                    0c:2e:19:2b:28:a3:f6:1c:fc:23:e3:c3:e6:99:53:
                    41:95:65:5c:8b:f9:70:1c:bf:44:a8:b7:a8:cc:b0:
                    cb:48:76:91:57:eb:2d:e5:5f:f0:ed:13:a9:02:7e:
                    7d:07:74:8c:e2:96:d9:23:7b:e6:c1:ee:a9:43:e9:
                    98:d4:41:d8:a5:3f:0e:62:e1:dd:2e:7a:c1:24:a7:
                    f7:13:08:3c:14:cd:78:b0:8d:53:e9:4f:82:0c:86:
                    39:8d:44:2c:34:9a:cc:e0:40:0a:4f:47:c6:f2:ed:
                    e8:27:04:95:39:a7:72:71:ce:ab:7b:5e:78:34:e7:
                    e9:9e:fe:0b:eb:40:80:18:38:23:35:1b:3c:a9:06:
                    4f:29:bc:fb:f2:13:43:10:73:95:be:33:95:c7:71:
                    1e:cc:41:b0:56:c5:37:44:36:00:50:02:2d:ec:2e:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F3:0B:86:C5:45:6A:48:58:29:8B:87:8A:E9:D4:00:E9:53:F4:E2
            X509v3 Authority Key Identifier:
                keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:12:c3:cf:cf:21:09:6c:3d:8a:fe:a0:86:f4:bd:8a:42:cd:
         fa:0e:16:29:0b:82:32:d0:c3:73:48:66:ce:a9:d8:3b:42:41:
         01:c5:74:bc:ee:3f:2b:d0:5f:60:e0:fc:73:27:9c:a2:1d:9a:
         f0:60:f0:3a:fa:3e:44:48:a0:f9:15:1c:da:5d:f7:29:b0:c6:
         3d:4d:42:69:e5:94:d2:63:c2:7d:a5:83:d1:7d:82:83:9e:3e:
         db:32:ab:27:91:c3:1f:f7:cb:1b:38:86:ba:4e:19:f8:06:dc:
         01:4f:2d:53:7b:92:8c:f2:9e:08:bb:30:ec:c1:89:c8:28:31:
         a6:68:52:73:80:85:7b:7c:1e:43:f1:10:ba:bf:d4:4d:5e:63:
         1a:b4:0d:ce:4c:f6:36:61:f9:53:39:56:0b:03:5f:4b:b5:29:
         c5:e4:de:4e:fa:9f:af:2f:7a:c7:0a:1e:40:d7:76:1f:2c:88:
         4b:f5:6c:0d:dc:e4:83:59:d0:7a:3a:3c:40:4c:0e:02:1a:a5:
         9e:22:63:8b:48:5f:1e:81:ca:e0:c0:c2:f6:b4:e8:fd:5a:62:
         b8:b7:11:a9:22:a9:e6:ae:d4:3b:b1:10:6c:43:f6:63:ad:c7:
         f7:fb:d4:76:6f:7f:04:6c:fb:77:18:d8:d5:9d:94:1e:72:bd:
         91:31:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----