Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File:                     Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier:          8ZV6opBkvuSvl0Y+v4o6ogdEMSVsc0KbaTDkZHUDhBE=
Subject key identifier:   BB:A3:FC:1D:45:BB:CE:85:2D:01:F7:B3:73:58:DA:CD:3F:1B:27:9B
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer:       /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial:       01962F071878D3E5B3AF148C62B096C837B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: XmaKdfy1V5yGCEKhl51rm7npd3kV1o6jR20tOrvMzgM=)
                          2: fLHIwzW8_cNrLeapZHuAdIZBYcw.roa (hash: F9/ou7Gahs7dJNLzKSXF7urkWawKPkOsFDiFbBFZxLc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:18:78:d3:e5:b3:af:14:8c:62:b0:96:c8:37:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=bba3fc1d45bbce852d01f7b37358dacd3f1b279b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ad:90:78:09:4f:ad:fa:0a:97:d6:51:4f:18:
                    b8:93:d4:98:19:6d:60:3b:a5:93:96:44:34:47:01:
                    d4:33:53:b7:89:c5:d9:fe:d1:24:02:43:b4:5e:7c:
                    86:45:9f:c2:c3:9c:be:54:72:12:09:61:55:75:c4:
                    22:53:46:1e:cf:03:21:c6:16:c9:4a:f3:f5:8d:0e:
                    a5:48:fd:c1:df:0b:d6:e8:a8:0a:ef:49:58:d2:56:
                    47:b7:70:38:b5:17:10:89:40:b8:63:d2:8f:e3:b6:
                    a3:e8:7d:23:d5:4d:36:2d:4a:cb:e0:9d:93:0b:a6:
                    b3:0b:24:97:5f:a6:d3:22:af:70:99:e1:c2:9b:d8:
                    71:7d:4c:65:94:93:50:e8:8e:7a:e0:f0:5d:9e:0c:
                    2b:1e:a8:ed:13:6f:80:aa:30:e3:01:c4:3b:9d:2d:
                    e7:11:e3:79:b1:fa:4e:39:16:0e:c7:a0:5a:17:cd:
                    f0:e4:b0:93:3c:4b:fd:46:6b:1f:a6:2c:8b:6b:c3:
                    e7:b8:b8:db:f4:f7:c6:a4:b3:fc:7e:79:25:84:0c:
                    07:93:28:97:f3:d4:1a:c5:7c:df:f1:fa:5a:df:db:
                    ea:62:5f:4f:f2:e9:c2:27:4a:a8:e6:fc:66:8a:4a:
                    1a:93:14:e6:f1:3b:8b:4d:34:58:20:1a:70:0a:27:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A3:FC:1D:45:BB:CE:85:2D:01:F7:B3:73:58:DA:CD:3F:1B:27:9B
            X509v3 Authority Key Identifier:
                keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0b:3e:dc:58:40:3a:d9:9e:b3:85:66:7e:76:d0:d3:43:e2:
         7e:1e:26:a7:64:7b:ed:7e:97:77:87:00:68:67:76:e4:a4:23:
         38:b9:53:4a:bc:a9:92:7a:96:1b:fd:bf:70:c9:6f:62:24:4c:
         25:9a:8c:98:59:5d:a1:08:36:b4:99:ff:2a:70:76:3c:94:78:
         a4:d7:82:b6:81:f3:63:e7:a6:f1:3b:1f:7c:d7:ab:7a:93:56:
         e1:29:ac:7b:36:90:1e:d9:eb:5e:71:4c:18:39:b0:f8:6e:71:
         84:9c:d7:06:bc:97:3f:aa:3d:70:c5:78:8c:4a:dc:44:88:c0:
         80:4d:00:82:17:8e:3c:14:ce:ac:21:6d:9d:ff:7d:31:df:55:
         00:a3:a3:42:06:ed:39:e6:1c:58:31:2a:e6:16:60:15:03:31:
         e5:b1:02:de:47:e0:d7:ca:0f:8e:0c:af:c4:7c:9c:9f:24:dc:
         d7:0f:28:84:43:43:8f:50:27:d2:c2:5c:b1:62:27:79:8b:40:
         e8:a3:9c:3a:42:df:4d:5f:34:8f:d9:cd:76:4a:6a:45:66:ed:
         0b:3a:de:7c:51:fd:48:ba:2c:99:7a:e0:a6:5f:45:bc:1c:a1:
         73:7a:56:60:17:4a:17:06:8a:1b:9b:32:7d:19:c3:e2:f0:f0:
         bf:45:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----