Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File:                     eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier:          PdiDfjPF0HtSjEYGdoY+XibUjYP2qc0E/pogekEV4y4=
Subject key identifier:   C6:D8:0B:20:5C:59:70:9E:C2:74:DB:C0:D5:CC:C1:27:79:F7:17:CF
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer:       /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial:       01962F067032AC73244CE3F3CE3D3F49096B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number:          0391
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=)
                          2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=)
                          3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: HJ0vIV6cB1TMxwSODbmkdEMZiJMJr1PFvjge1KkRWvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:70:32:ac:73:24:4c:e3:f3:ce:3d:3f:49:09:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=c6d80b205c59709ec274dbc0d5ccc12779f717cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:fd:6f:96:a8:04:a2:84:ad:ba:61:23:c4:
                    f9:50:b9:f5:b0:4b:ed:8a:72:ad:f2:98:50:9b:01:
                    99:30:9f:a7:1e:0f:15:26:b2:a1:09:f6:09:e4:d0:
                    66:20:ed:6e:5d:eb:bd:60:59:aa:2d:56:0a:6e:04:
                    c5:2e:9d:fb:6e:64:f1:f8:c5:ad:c1:1d:99:4d:d9:
                    af:3d:1d:85:b0:f7:57:80:6c:49:51:36:c8:96:5e:
                    98:cc:c5:28:ba:e1:3c:28:4b:7b:ae:2a:cd:40:26:
                    62:5b:f4:5c:56:b2:92:4d:7d:dd:3a:bc:05:4c:91:
                    a0:cd:2e:f4:61:71:fd:cc:90:02:0f:28:e2:e7:b6:
                    d5:97:76:10:39:62:67:6a:38:2a:39:fa:1e:7c:20:
                    3e:fc:43:af:67:9a:8b:4e:15:0f:cf:c2:04:4e:4e:
                    ca:f5:7e:87:de:d1:1d:cd:6f:64:35:88:f3:58:cd:
                    70:57:06:b9:6e:3d:dc:a3:46:ee:5b:9f:bd:7b:20:
                    58:0e:10:20:0f:44:02:51:15:ee:1d:a0:3e:28:6f:
                    f4:c9:cd:0a:0e:3d:7b:fb:1e:39:a1:8a:9a:19:7c:
                    15:dd:ec:63:78:48:cd:19:e2:87:00:45:20:c6:89:
                    f4:a8:03:91:96:0d:2a:12:7c:b0:62:4d:03:f7:c7:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D8:0B:20:5C:59:70:9E:C2:74:DB:C0:D5:CC:C1:27:79:F7:17:CF
            X509v3 Authority Key Identifier:
                keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:9e:06:fa:79:f1:ea:36:aa:eb:38:05:ff:0f:c5:1f:b9:7d:
         70:30:54:6e:87:86:5e:97:b9:f9:dd:ef:4d:9f:46:73:0e:f0:
         35:07:e7:74:5e:47:b9:e0:a7:7f:93:3d:3c:71:78:55:e6:1b:
         26:01:66:fc:d7:d7:bf:d1:1f:c0:5b:d2:59:a8:cf:29:8d:b6:
         88:bc:1f:52:98:eb:a9:9e:7b:17:98:36:62:34:3e:27:da:99:
         90:6e:f6:23:e2:5b:c5:19:c9:f6:56:c6:7d:12:75:00:9a:19:
         1b:94:33:80:a5:8e:3e:12:e2:88:0f:b1:e4:34:01:87:95:3d:
         55:17:88:c3:98:06:0d:03:eb:14:51:45:e8:c6:19:31:78:a3:
         06:35:af:cf:cd:b1:a9:3b:b1:36:e5:64:31:d0:c8:6a:d4:cd:
         59:f8:52:e9:1e:39:cc:42:e5:f2:03:0c:5c:35:1f:62:b6:35:
         fd:aa:63:cb:ed:4c:36:ff:8f:df:ba:d0:80:f4:7c:2b:c6:e7:
         bd:cc:b2:2d:63:73:30:b4:4f:4f:69:9c:2a:9d:f0:1a:33:ec:
         c7:2e:ad:47:d0:bc:20:2c:da:79:3e:88:e4:bf:10:78:da:0b:
         61:13:e0:53:d6:a9:b6:9c:b4:58:4e:a3:a7:52:ce:52:39:03:
         70:5f:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----