Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
File:                     EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft (raw, json)
Hash identifier:          coJm2AFaoohHg8fn8dDrreOXhSvtC/yoTAZbvijvaR8=
Subject key identifier:   2C:C9:A3:53:60:49:B7:2F:04:1E:42:76:AD:A6:35:5C:89:70:BB:99
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Certificate issuer:       /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial:       01962ECF92ADE2E372A90C80552F9655A2F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl (hash: hFcX4jbmOGTRBuAz6CrFKktMawRmTODcZrGbrosJvQo=)
                          2: KxHo3PH5XqAW_e-4RbCvU_gAQWc.roa (hash: dw0fO1xhc9eufYQ0WpteBCztc0/BFVhz2enclISvMos=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:92:ad:e2:e3:72:a9:0c:80:55:2f:96:55:a2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=2cc9a3536049b72f041e4276ada6355c8970bb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dc:bf:cb:e8:02:54:fe:6c:09:c2:f2:d9:63:
                    84:5e:7c:03:15:33:70:3b:2c:f2:2b:35:9a:b2:14:
                    a1:1e:e9:a5:03:2a:df:1e:01:38:02:ea:39:f5:fb:
                    72:12:f5:bd:40:c9:48:9a:f4:ff:8b:f0:01:80:47:
                    61:93:93:ee:5b:9b:e6:64:6f:b1:c5:88:bf:7e:02:
                    6c:94:e4:2e:38:f1:a3:17:b4:af:7f:6d:ad:b0:3c:
                    81:25:d7:fd:18:5d:33:7b:84:2d:b9:27:9f:53:35:
                    2c:f9:2e:60:0f:ba:d0:0f:ac:88:87:1f:a8:41:d5:
                    80:16:ce:07:2f:ce:c9:7a:2f:f4:d8:14:9b:da:80:
                    02:59:3f:44:05:a5:73:53:35:ed:c2:44:13:8c:2a:
                    34:b0:68:eb:22:c6:1c:b2:7e:67:35:e8:5c:7f:a5:
                    ab:6d:62:00:27:1c:ef:c1:fc:46:51:72:85:e9:90:
                    5d:87:25:10:a8:e1:06:f7:ea:c4:3f:d9:61:b0:05:
                    81:01:1e:63:0c:8e:c1:f0:50:77:e3:73:3a:1e:51:
                    43:18:de:25:8e:06:2a:ba:dc:43:94:12:e0:44:c8:
                    2d:e4:4d:50:1e:e3:17:b9:ae:d4:b6:cf:d4:e3:b2:
                    e0:ce:00:4e:0f:07:45:12:41:e7:5e:e1:cb:6e:92:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C9:A3:53:60:49:B7:2F:04:1E:42:76:AD:A6:35:5C:89:70:BB:99
            X509v3 Authority Key Identifier:
                keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5a:ec:6e:ee:20:6f:76:89:08:47:9d:82:91:10:8b:4e:16:
         84:3e:b8:d2:12:10:11:9f:37:5b:06:87:84:50:12:ce:49:f8:
         cf:b8:cc:48:d3:5f:7b:fe:52:cf:98:5b:bf:0d:d0:be:8a:e4:
         01:1e:eb:ad:ff:fd:fb:a9:ef:3b:e8:2a:23:28:fe:d6:4f:64:
         e7:a4:2c:f0:5b:81:be:ac:c8:92:4e:9b:86:60:47:d6:b2:e9:
         30:c7:16:39:d7:c2:6b:8c:43:81:b3:14:60:d2:ee:40:86:6a:
         2b:0c:58:6e:da:45:be:bb:e1:81:7b:e8:9e:18:e0:75:ad:f0:
         3e:7d:7c:51:66:b6:e0:8b:95:d0:02:40:db:9f:d1:bb:d4:4c:
         8c:43:c9:0a:fd:fb:ea:04:c4:85:d7:b9:ed:32:ed:f0:7f:8b:
         48:53:7c:e5:69:a4:a9:fc:0c:f7:7b:4d:c3:75:18:58:d0:9e:
         ce:af:01:5f:0c:5a:50:50:f2:0b:90:ec:4d:22:4e:06:a2:fd:
         72:4a:34:34:2e:80:0c:41:4b:80:75:2a:a6:89:0d:fc:91:f4:
         10:6e:de:fd:cd:c4:25:f2:fc:b9:15:00:e4:ac:c5:ec:bf:95:
         f3:86:83:2f:93:6c:e9:0d:53:06:b7:14:98:fd:6d:08:8a:44:
         59:06:84:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----