Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
File:                     EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft (raw, json)
Hash identifier:          gEITAUlAqWOuuXV9VDyuBxr29R9HTqj3UNLiJCs8mbs=
Subject key identifier:   EE:FD:C7:1F:A6:13:71:D5:C9:F9:A4:37:93:0C:22:22:AE:22:A7:96
Authority key identifier: 12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82
Certificate issuer:       /CN=12868f5e34eefefce655c1bb8383299fa56c5c82
Certificate serial:       01962E98AEDEC7228F5200F3DA778AEE5693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
Manifest number:          1067
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl (hash: Lr/d1wuXwmHpv32/P3fupA2yRi5FTwNp/GHxTlwqvTc=)
                          2: VxIYrmkfaudMi3uvOgmfLEYS9i4.roa (hash: HVOJKOfT05YM4fO+NpvciBLZRFLtFXYsLyo0g2RCD3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ae:de:c7:22:8f:52:00:f3:da:77:8a:ee:56:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12868f5e34eefefce655c1bb8383299fa56c5c82
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=eefdc71fa61371d5c9f9a437930c2222ae22a796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:69:83:3e:8c:84:18:f5:1e:07:7c:d9:80:ca:
                    aa:1f:fc:a7:75:4d:2e:bc:8d:a6:03:52:0d:7a:1d:
                    41:65:cc:87:9c:f5:07:a8:bc:22:c0:af:ff:26:9e:
                    44:84:61:42:e8:6a:ca:2a:cf:f1:f5:a0:7f:b9:f6:
                    42:a0:38:d1:df:02:ab:9c:55:68:48:41:64:b5:b2:
                    44:e5:91:e9:c8:f6:11:bf:57:61:54:e1:84:db:03:
                    b7:9d:db:04:2d:da:13:3d:0c:f3:5c:15:83:0e:10:
                    0e:d2:ab:e8:67:54:9f:0a:1e:16:34:76:7c:81:0a:
                    ba:99:d1:12:e3:9e:f4:e8:be:af:06:3e:5d:8f:12:
                    54:7e:e0:38:d0:ef:82:cc:1c:4e:af:da:5c:77:d6:
                    8e:70:4f:0d:95:79:10:ba:af:43:ea:c1:b2:25:c4:
                    4b:13:55:62:c1:6a:a8:e4:8f:cb:05:63:ce:d4:8e:
                    e8:1a:d6:28:60:51:f4:9c:a4:dd:c3:bb:16:4c:b0:
                    01:6b:9f:ac:9f:70:9b:72:3c:14:14:17:0f:6c:4d:
                    2f:c1:e8:80:1c:66:21:75:78:21:2f:13:71:ae:37:
                    6d:ab:a7:99:e2:2b:c3:5b:4e:8e:36:71:ca:75:c2:
                    c3:0a:39:7e:a0:b8:71:57:f7:5c:47:89:65:c1:96:
                    75:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FD:C7:1F:A6:13:71:D5:C9:F9:A4:37:93:0C:22:22:AE:22:A7:96
            X509v3 Authority Key Identifier:
                keyid:12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:27:d6:a1:54:65:bb:09:82:69:1c:63:39:5a:ac:ca:0b:d4:
         18:e0:06:57:a3:1e:98:ea:20:26:94:d0:bf:0b:28:8d:44:94:
         bc:23:af:8c:5f:5b:82:b2:8b:d6:47:93:2e:63:73:4c:53:54:
         73:5b:fb:9a:b3:84:6f:37:7d:dc:d9:c9:e8:90:c8:70:90:41:
         37:4d:ff:a0:f7:4d:e1:27:b2:ee:f9:ea:73:53:e7:2b:3a:91:
         90:07:43:c6:54:e4:6e:03:a4:17:20:62:4d:39:58:a9:9d:98:
         32:47:ac:15:d1:17:ed:9f:8f:bd:89:b4:34:93:00:51:e7:ac:
         d8:91:f3:bc:45:c7:15:b1:b9:07:38:e3:f4:15:0e:4e:01:ab:
         0d:80:dd:d5:8b:cb:ab:5f:2e:56:3d:df:4b:e0:74:9b:c2:5c:
         fd:85:8c:b4:ec:76:c9:41:ec:77:ca:37:7c:89:a1:74:26:4e:
         e0:21:6d:5b:1c:1a:e7:2c:29:4e:53:be:9d:88:d6:f2:ce:a4:
         9d:ec:64:ca:f8:19:13:f0:59:66:ae:73:c7:f1:a3:5a:a9:83:
         42:68:40:38:c3:eb:2a:ce:55:9e:ea:b1:3d:61:f3:0f:35:14:
         eb:1a:21:d6:15:b4:ea:6a:ed:19:ac:d3:10:4f:94:96:a8:82:
         62:f1:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----