Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File:                     eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier:          lglgVaewWTzTf/31xfJ+C+fz4puJ5qAWufwyBdI2724=
Subject key identifier:   A2:4C:FF:7F:96:CC:C2:52:5E:74:19:68:CE:EB:F6:E0:F9:E9:B5:6F
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer:       /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial:       01962DF41D6CB51C359BFDD9C057922F056D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=)
                          2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: n+rJ4lzpvATMGNtkU6p/xUC0eCmw8nckDUE/MQCqpc4=)
                          3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1d:6c:b5:1c:35:9b:fd:d9:c0:57:92:2f:05:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=a24cff7f96ccc2525e741968ceebf6e0f9e9b56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:5c:13:b8:68:bd:40:de:88:8c:37:1b:88:
                    9d:b0:82:8b:d6:80:0f:f9:39:06:0e:a2:62:b5:58:
                    ea:51:ef:8b:67:ad:9f:8e:93:c4:90:fd:19:7a:b4:
                    18:3d:21:eb:41:6c:93:5a:d6:6f:ce:b5:94:1a:63:
                    07:f4:5f:dc:a5:20:ec:f5:60:60:e7:8f:9a:d4:49:
                    a1:12:07:63:e7:d9:4d:d4:22:ec:26:3e:e6:73:19:
                    28:51:d7:39:63:79:64:b9:ca:0d:6b:ce:e6:43:b9:
                    3c:d0:f8:b5:40:eb:4b:c8:f4:f4:36:c0:e7:83:b3:
                    fa:82:94:15:e2:0a:8b:e8:2b:40:41:19:26:f4:54:
                    59:1e:fb:a6:b1:3c:e2:67:1c:6a:a9:11:c5:7f:3a:
                    eb:02:8e:2b:ed:16:9a:7b:1b:b4:2e:e7:6d:4d:67:
                    c8:ef:ab:87:9b:49:b8:e3:ab:dc:3c:21:d3:a0:84:
                    d5:0d:92:eb:3f:a1:10:5a:af:54:b1:11:5b:c9:2b:
                    bb:d8:2e:e9:4c:bf:83:fb:61:ad:62:cd:b4:83:ed:
                    58:92:d2:b3:05:1f:f6:f5:cd:db:a7:dc:dc:9d:a2:
                    1c:16:bc:ca:28:fc:9d:50:dd:1a:64:86:b4:e3:cf:
                    5d:fb:6a:35:90:98:1f:49:fc:8f:1d:66:98:b3:c4:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4C:FF:7F:96:CC:C2:52:5E:74:19:68:CE:EB:F6:E0:F9:E9:B5:6F
            X509v3 Authority Key Identifier:
                keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9c:cf:33:5e:1c:06:7d:2a:e2:51:16:4c:1f:a0:fe:d2:af:
         12:ab:a0:57:76:eb:4b:25:ed:2c:50:73:c7:a9:5a:74:e7:63:
         1b:83:79:f9:55:56:42:2b:0a:53:f0:fc:4d:aa:31:5d:1d:a6:
         9c:11:d2:23:7b:39:62:32:ad:c6:4a:33:f4:a5:cd:c6:64:73:
         a7:75:97:b1:c5:1c:93:a9:53:bc:44:f9:95:8a:79:ea:d4:2e:
         78:02:5f:b3:a4:48:9c:37:be:0a:8d:7d:d2:72:c9:db:eb:85:
         28:54:e1:be:9d:9e:5e:18:b8:bf:1a:de:5c:84:3f:7c:50:f6:
         cf:65:e0:57:5f:db:3b:c4:ba:58:51:19:cb:4a:81:88:2f:a0:
         66:03:41:2c:79:c7:39:81:82:fb:ca:ef:9b:0f:a2:9f:f1:1f:
         10:40:d1:47:5d:95:b8:f5:c7:25:31:17:e2:52:df:82:58:3b:
         d0:6c:d3:d0:0a:43:d2:60:72:25:1b:4d:30:b0:b8:20:b1:09:
         9b:7f:b7:a0:29:91:75:67:cb:41:8e:d3:2c:3b:0f:e7:41:e0:
         64:74:07:e7:8e:1a:27:39:2e:46:b8:20:b3:da:fc:bb:95:d1:
         fa:5a:e6:f5:a5:a2:b1:0b:cc:10:6c:3b:d1:f5:78:51:ec:a8:
         fe:98:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----