Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
File:                     EVNfj6S19RUz1yTq-Q26mXFfxvw.mft (raw, json)
Hash identifier:          vCJeKf1A03NUO40B/CNNjxpWotO/m0IuJ3DIeKgAKPU=
Subject key identifier:   E8:D7:1F:5D:E0:CF:A4:16:8E:3E:03:4C:16:6E:51:E4:38:8C:28:E6
Authority key identifier: 11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
Certificate issuer:       /CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
Certificate serial:       01962F74E10A66B4E9B25D869E9FB5764E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: EVNfj6S19RUz1yTq-Q26mXFfxvw.crl (hash: lkUePW5nosyc6ZaDK6yXv+bz0fhziR5BfRGSo0EI3oU=)
                          2: Qpu6vaOAY5n2mIT4E3Vh72x5kkE.roa (hash: P0y6XucznI/69rbHwQvBGeYNmc4RVWARo9Yt1RUz3AY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e1:0a:66:b4:e9:b2:5d:86:9e:9f:b5:76:4e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=e8d71f5de0cfa4168e3e034c166e51e4388c28e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f8:e8:1b:5b:62:7e:a9:af:55:f7:21:65:3f:
                    b2:2c:90:a8:bf:88:06:8c:70:e0:6c:1a:dc:7c:c1:
                    1a:e3:40:ba:d4:85:a8:aa:f2:7d:62:5e:11:b3:d0:
                    a1:04:49:6e:f8:64:7c:41:2f:1d:44:f8:21:ad:09:
                    00:02:0e:67:b8:1a:ee:5d:98:4c:98:ac:3d:de:16:
                    1d:2f:5a:de:7a:1b:a3:c2:65:35:91:97:a0:37:26:
                    17:67:4a:43:6d:8f:54:a7:62:5b:79:ec:c2:5d:08:
                    2d:20:4a:86:16:df:b6:32:61:6c:5c:c9:cf:69:dc:
                    65:42:dc:05:1c:4e:6e:bb:22:f8:bc:ba:dc:f4:04:
                    6e:f1:0a:9c:1d:8e:59:85:70:78:2d:6c:ff:c0:b2:
                    86:4a:bc:4d:f8:c3:6e:08:14:0e:61:dc:86:f6:28:
                    39:d3:fd:b7:82:09:40:1c:2b:40:83:ea:3f:9a:11:
                    2b:36:e9:14:95:f6:30:99:61:b9:54:6c:04:40:9d:
                    9b:3e:04:d8:3a:71:90:46:a9:92:20:f8:d2:05:83:
                    8b:25:7c:f9:e2:73:12:bf:89:9e:dc:ee:74:54:e9:
                    ad:7c:39:6c:88:82:0f:83:6e:a0:44:39:44:d8:af:
                    30:8e:08:c9:3b:93:24:51:9b:d7:7a:0d:a5:d1:7c:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D7:1F:5D:E0:CF:A4:16:8E:3E:03:4C:16:6E:51:E4:38:8C:28:E6
            X509v3 Authority Key Identifier:
                keyid:11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8d:ff:d0:fd:a1:fc:6a:27:f2:eb:9c:a5:0c:62:81:9f:fe:
         92:b0:af:32:a0:68:63:67:d3:c9:f4:a9:4f:05:bf:1a:f7:42:
         c4:11:61:e4:b3:50:12:c6:9d:ca:3c:3e:f6:97:46:11:89:49:
         c4:e4:bd:fb:84:ed:24:f6:c7:87:9a:93:96:26:d8:c9:3b:43:
         4d:ec:25:9f:f7:69:c0:10:a0:07:f8:5f:c1:2e:d6:54:9c:d1:
         7a:1b:98:26:ca:d7:8e:eb:b7:9d:e6:ce:37:b3:dc:49:6f:03:
         37:a9:10:65:17:52:e6:65:2f:f6:f3:3f:54:e0:7f:29:54:5d:
         c3:a1:33:9a:db:63:38:16:a8:c2:c2:25:a9:a3:c5:4c:fe:77:
         b2:ac:fd:ca:be:c9:74:da:1a:1d:be:f6:68:63:22:b3:c4:01:
         31:76:db:78:0c:57:c9:33:59:1c:41:81:d0:ea:51:c4:2a:5e:
         ee:b9:58:38:8f:64:b7:71:30:f0:59:9e:e4:ec:fc:5e:77:49:
         ad:cf:b7:60:a5:52:f1:7d:2f:5e:4d:79:20:3d:cb:c0:0a:90:
         77:04:e0:c4:38:d3:84:8e:bc:c6:e5:a4:ea:c3:85:6a:ae:17:
         23:14:f2:07:14:02:0e:55:1d:6c:53:b8:2d:b2:76:c5:4e:7a:
         e6:4a:16:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----