Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File:                     ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier:          1vKj2c4+5hZPD5YgcsqEsemAah2G0RVKbd1K3A16SIk=
Subject key identifier:   33:A6:54:F4:75:E5:E3:B8:73:90:98:5C:6A:19:7F:CB:AA:00:70:C8
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer:       /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial:       01962F06BA452EC0A61E2D4C2A0E1CFE98A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=)
                          2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: t8BehUeCHqE3BoTPfAYGA8ocHF2XezCxUvQ1FbGMbu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ba:45:2e:c0:a6:1e:2d:4c:2a:0e:1c:fe:98:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=33a654f475e5e3b87390985c6a197fcbaa0070c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:03:0f:7b:25:3b:aa:a6:38:b8:40:f2:23:2d:
                    27:18:34:55:26:3d:c8:58:7e:09:87:1d:66:01:7c:
                    c9:86:70:ba:67:9e:f6:19:89:29:36:03:d4:b0:6c:
                    16:b1:a2:7d:81:3d:13:7c:cc:25:aa:9c:63:57:85:
                    ee:73:c6:f1:46:46:f5:fb:90:a5:d0:aa:c8:a2:01:
                    ee:29:6d:01:17:dc:cd:08:45:9d:25:71:e8:65:74:
                    5c:a3:16:15:7d:96:34:00:0f:60:c4:19:87:41:da:
                    bf:3b:09:36:58:95:19:90:0e:ae:7b:f8:5c:9f:3e:
                    15:e4:c6:5e:0d:14:58:14:cc:90:3d:33:1d:88:f4:
                    80:fe:c4:4c:74:86:98:3f:3c:67:30:e2:a5:ef:d5:
                    a5:ac:5a:15:b6:54:04:bf:f8:64:14:6a:8e:68:16:
                    55:b0:97:b1:8c:4e:cf:ac:25:de:64:d7:f4:47:6c:
                    c7:16:f3:3c:8c:07:00:b9:f1:4e:da:a8:37:ad:ae:
                    66:9e:d2:39:eb:57:7f:6b:e4:99:0b:bb:34:59:06:
                    df:42:4d:93:c9:eb:b8:8b:ff:72:ec:49:46:2d:13:
                    05:2f:df:f8:b5:11:5e:61:e9:81:ca:19:8b:5f:85:
                    58:2a:67:da:34:e8:96:4b:7a:8f:63:7c:f8:af:d0:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A6:54:F4:75:E5:E3:B8:73:90:98:5C:6A:19:7F:CB:AA:00:70:C8
            X509v3 Authority Key Identifier:
                keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:17:76:87:9c:04:9d:7e:dc:25:13:4f:b2:27:71:f2:3d:ca:
         3b:41:7d:d8:eb:59:cd:38:7a:01:bd:e8:1a:04:97:48:1e:6b:
         ea:73:1e:bf:51:b3:8c:e4:96:a9:6f:03:ea:e1:3d:6e:ac:09:
         d3:30:b1:94:68:cc:0a:8f:61:79:4a:66:96:0b:99:2e:ee:b7:
         4b:14:4a:9f:b6:6b:bb:43:ed:3d:5c:15:c6:90:11:e4:27:f6:
         93:36:b6:38:04:f8:45:8e:29:d9:b2:54:e9:49:7f:25:90:f0:
         61:43:16:72:fa:8a:51:6a:ea:bd:30:56:2e:61:c3:85:6b:eb:
         38:96:b1:e4:be:6d:fd:b6:8f:e5:bb:9e:90:0e:e6:b1:a7:9a:
         d3:c6:e1:81:8d:1a:7f:a0:ba:dc:e5:ee:03:7f:4a:e1:74:d6:
         c8:00:d6:72:28:99:4c:dd:ec:f0:02:ef:6e:f1:5d:5e:47:ca:
         9d:f2:5b:04:c0:1d:c3:69:a4:b9:b9:b0:c8:b9:18:e4:08:1c:
         64:3e:b1:30:64:5d:a7:a1:1c:f2:c3:ce:1c:7e:16:7d:64:16:
         6a:7f:e9:29:8d:a8:50:f9:0c:3a:1d:be:2e:71:cb:4f:01:4d:
         48:37:80:00:6b:65:88:aa:52:a3:0a:03:40:c7:fc:39:7a:47:
         17:3b:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----