Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File:                     egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier:          2JzgpAZHu/2iwWv+gc2W9EFqJFTaWoFvfxQIUyjHAxI=
Subject key identifier:   18:41:30:7B:ED:FD:E7:3B:EE:C6:D6:83:EF:DE:BA:64:AA:98:04:36
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       01962F0741A94E4AA0A97CD93BFD15861132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number:          0E49
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: BkC382kbRID_J9MdHf3y_ZWlEf8.roa (hash: ts/8AAif8Jl4mhcHO6WxEGvpSqp2TwktqqlEa+sbGTU=)
                          2: ONKHpYimKuwzn77m9LydYFbzpRY.roa (hash: 8J246+Nt2Y+QpfgD1sKVEVeqnWKlH8aPvihNQisvlT8=)
                          3: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: bgVeR5SOUySaQgUVlToWtIiCEffLqmdFMaF9ddKxhuk=)
                          4: k2qVus75QweqwVLaTzgWKFt2l2k.roa (hash: FHRO2hiAAv4cLirtut9emqOb7BfOEUoCLYXrQqlQbt0=)
                          5: kBFDTimH0wXzN6bZHwFh18BZ9YQ.roa (hash: gXdNyTqShsEpC9gTq8XtRziYkmToBDMK/+q0FeGIxLk=)
                          6: utnanlwrMPvqo9oUFO7C-isrnws.roa (hash: hoqvLMB2exZaW3zQIo0VGKfu9n9CN2+OhypTj5cWUUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:41:a9:4e:4a:a0:a9:7c:d9:3b:fd:15:86:11:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=1841307bedfde73beec6d683efdeba64aa980436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:5e:c7:39:cf:08:82:72:5e:ec:ef:e3:88:
                    43:25:03:fe:a5:0f:c0:95:76:b2:0f:c2:8c:38:ba:
                    e2:40:bf:d9:ad:73:4f:d3:be:3e:a4:ca:d9:88:24:
                    c1:25:51:b0:fd:b5:6b:cf:31:8e:f9:2f:38:de:7e:
                    53:11:fb:12:09:05:70:bf:7d:db:37:d7:93:4b:56:
                    f4:5d:c6:9b:0e:9c:85:8e:57:d8:21:cb:73:2e:71:
                    d9:ee:ce:8f:d7:10:2a:6b:e2:09:cb:bf:eb:35:2b:
                    c0:4f:73:dc:c1:96:49:73:db:11:49:54:97:92:cc:
                    cd:89:97:f7:7d:56:f3:9d:7b:37:e6:04:24:70:85:
                    ef:94:c7:73:0c:58:0c:66:61:f0:a2:74:5a:f4:7d:
                    7a:c6:92:4d:47:80:0d:b0:04:55:81:9e:d9:a1:75:
                    8a:6c:c6:33:d2:d4:c5:d4:14:41:5c:4c:ad:19:41:
                    20:10:30:25:b5:08:67:aa:47:17:c8:30:0f:42:bf:
                    f2:9e:b6:b6:cd:d2:e7:ea:4b:e0:69:50:ea:8f:67:
                    fa:7f:3f:39:a8:ea:a7:ac:8f:86:b7:2b:fd:b4:54:
                    da:e3:f5:24:c6:ed:06:8e:ea:15:84:75:97:61:ff:
                    14:d8:11:2c:b3:c0:80:56:3d:78:24:24:87:37:17:
                    a5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:41:30:7B:ED:FD:E7:3B:EE:C6:D6:83:EF:DE:BA:64:AA:98:04:36
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e8:3a:84:bf:5d:c2:8b:8a:10:0c:f6:c9:d2:77:6c:ce:16:
         8b:cb:69:ff:c9:7e:4c:08:1e:a2:87:50:45:a0:98:23:00:4f:
         75:9b:ca:6a:a7:c0:af:8a:29:6c:b0:cd:26:6b:83:5e:2e:42:
         ba:bc:e1:88:15:4d:f2:ef:1a:27:3a:ef:03:ee:bf:84:7d:0f:
         b3:95:25:2f:47:6a:3e:19:02:4b:9c:f3:3e:6c:ec:99:00:45:
         d8:35:27:ed:d8:b9:5c:56:50:11:60:8a:be:35:ee:ca:8c:e1:
         53:c1:3a:08:e9:0e:74:68:37:5a:db:e7:a3:a1:7e:45:fb:62:
         b1:af:a1:92:fe:d5:10:a0:bd:02:c9:2b:94:9d:eb:c3:7a:34:
         99:55:3f:06:d0:30:3c:32:b5:89:c4:1d:d7:ab:2f:d4:ae:f3:
         dc:6c:1a:59:e1:b4:e5:76:4f:e6:2a:90:24:7b:83:a1:3a:d7:
         2d:0a:b9:a5:8e:d7:63:c7:b0:a6:ce:6f:df:4f:42:8a:a5:a3:
         14:82:b6:27:1d:74:64:88:da:35:e4:3c:18:cb:b6:3b:52:c7:
         10:a9:ec:4f:4a:f8:90:97:5b:fd:50:35:6d:11:90:6d:6e:d3:
         96:26:51:87:42:43:20:bd:f7:fa:89:61:08:06:d3:dc:e6:6f:
         9a:54:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----