Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
File:                     EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json)
Hash identifier:          R/dH3mxVP4ZE1dPt3cUm/Xt+tYysthffhRP+1XRCADo=
Subject key identifier:   CC:2C:4A:71:D2:B2:FF:28:EB:EC:44:D4:57:A9:3A:6F:C6:0C:75:9D
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Certificate issuer:       /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial:       01962E61EF7E0A625228FA0E4C3E938C0E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
Manifest number:          0672
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: Wd4IcFcj+QmmSC/05XKmhr+B9e99JA8OlpHauooazEM=)
                          2: s4gZLWdCbjdScQy92lhU1qj4INY.roa (hash: xkF7VCE+qi9EQz5A3LDxMLzmcYX7S6EBBQO/VGtQ7OQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ef:7e:0a:62:52:28:fa:0e:4c:3e:93:8c:0e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=cc2c4a71d2b2ff28ebec44d457a93a6fc60c759d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:07:ec:d1:9c:60:ac:c5:c2:1e:ea:e4:47:
                    b0:50:eb:22:f2:0f:99:b9:33:38:9c:f1:d0:ad:55:
                    94:ba:30:22:65:9a:33:4c:82:e0:5a:54:aa:ca:1c:
                    2e:48:a8:17:ba:83:18:91:1e:2e:17:87:ac:f2:2a:
                    38:64:0e:7a:d8:85:9a:00:67:d9:71:79:30:02:12:
                    6c:43:71:a1:50:de:45:c7:97:72:c1:8d:9a:6f:20:
                    91:4a:11:34:1d:0d:20:13:d9:0c:12:e2:a7:c4:4e:
                    eb:f8:ff:36:6c:ae:e3:59:19:c3:4e:d8:d4:8f:ad:
                    fd:34:71:6d:9f:be:db:33:88:6e:82:a7:71:bb:8a:
                    d5:1a:94:37:24:09:51:2d:40:3c:89:50:60:83:10:
                    b5:5f:86:08:b6:66:a8:7b:db:0c:51:bd:9c:e0:cc:
                    f2:19:35:4a:bf:07:b6:ca:c7:c7:3c:65:8f:53:ea:
                    7f:92:dd:51:28:a5:e7:ff:14:5d:1b:1f:3c:77:d0:
                    f3:5b:44:51:cb:3a:fa:ef:9a:02:86:a4:a4:f4:15:
                    03:a1:77:14:91:96:a4:55:78:d0:77:a1:f2:9e:6b:
                    f5:c0:29:6f:ee:31:8c:3e:d4:e9:17:c7:18:4b:45:
                    ba:30:fa:86:bf:4d:a8:ea:2a:71:f1:a7:6a:36:95:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2C:4A:71:D2:B2:FF:28:EB:EC:44:D4:57:A9:3A:6F:C6:0C:75:9D
            X509v3 Authority Key Identifier:
                keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c2:0e:f8:9a:b4:55:17:f0:ef:fe:e5:b1:36:05:cd:e0:8d:
         e8:68:34:98:d4:b5:56:42:a3:60:50:38:29:57:46:2b:ba:e7:
         22:02:17:4e:6f:15:06:81:1e:c4:78:6a:76:65:b3:4e:20:ff:
         41:1e:b7:3e:86:ff:c9:7f:4e:93:a8:a6:75:9b:ee:82:16:66:
         c8:46:14:fd:bb:40:e8:7f:81:88:5c:9a:ea:e8:b0:eb:74:7c:
         49:fb:67:87:88:24:da:b6:ab:d3:d9:5f:56:d3:5a:43:9d:3a:
         85:6b:cd:85:d7:27:e4:a4:dd:f6:88:ab:c4:bc:c6:43:57:15:
         71:ad:be:82:a5:71:80:4c:4e:6b:b6:ca:b1:b8:78:48:fe:fd:
         0d:ea:da:55:09:72:a2:7c:9f:b7:f0:0a:ed:36:48:fc:cf:2b:
         f0:4b:95:a1:ac:2b:3e:1a:f2:c7:b8:f1:37:49:7e:34:d9:e3:
         7f:08:34:41:b6:0c:51:0e:bf:7b:59:5f:b2:c0:a6:9a:d5:32:
         37:dd:2e:58:fd:73:19:43:17:d5:a7:d7:64:ab:5d:29:60:67:
         d0:6f:a9:8a:3a:f6:46:45:03:a1:45:a7:eb:54:fb:db:30:95:
         22:23:78:16:8f:2e:b7:0f:3f:26:5d:89:4d:5c:57:b4:b0:90:
         a4:0f:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----