Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
File:                     59eZrg792Ybd53-zWtChCCPLly8.mft (raw, json)
Hash identifier:          kCyZJ1ehmeykQsjL4aB/Wkovu2OATWYHyFky7pUdmbo=
Subject key identifier:   C1:EF:80:80:FF:4B:CB:7E:E0:8E:B7:D6:A2:08:9B:04:8A:E1:E9:F3
Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F
Certificate issuer:       /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
Certificate serial:       01962ECFD431CC116FF57C6B5C38C4675A8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: 59eZrg792Ybd53-zWtChCCPLly8.crl (hash: DDCTrUlSWZ+2/jXWNMN7ywJbxuzB4scQYh5+YLbE4Us=)
                          2: Kvx8CFJShgrk9zFYI0lUsh--CwU.roa (hash: PVmg//o7LkW03D9ltn/laGXzfCJ6cNBsJDyBEL8Jj7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d4:31:cc:11:6f:f5:7c:6b:5c:38:c4:67:5a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=c1ef8080ff4bcb7ee08eb7d6a2089b048ae1e9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:d0:5e:7b:01:15:75:17:b6:d7:ad:a8:7f:
                    05:75:39:4a:57:e0:dc:0d:a7:f7:c6:c6:96:ed:f7:
                    a0:70:61:78:8a:44:06:7e:d3:5f:ed:29:1b:02:3a:
                    85:08:0d:7f:38:1e:b5:dc:ce:88:10:0e:49:26:59:
                    ec:b7:ef:92:e0:7e:51:47:37:d1:3a:1e:8e:5d:a5:
                    fe:95:9e:94:df:dc:e5:74:1f:ee:5a:0f:a5:c4:81:
                    6c:bb:9f:ba:4b:41:97:33:6a:85:1c:ec:7a:f1:10:
                    63:e1:24:b5:74:c4:78:ba:4b:ab:87:6c:c7:62:63:
                    37:d2:4c:96:24:4b:24:f1:39:e5:0f:2d:8e:51:fc:
                    b8:59:97:3a:64:19:b9:51:d9:2f:66:3b:5a:69:be:
                    42:c8:9a:70:ac:a3:96:c0:b1:b3:f9:c0:44:4d:a7:
                    62:aa:1f:3a:2a:ed:bd:fc:59:9d:a1:a4:63:f7:12:
                    86:a9:7b:98:2f:52:8f:cb:f7:97:ec:f4:e8:b6:4f:
                    4b:6d:98:9a:de:a2:4e:77:1e:be:27:c3:d7:de:d4:
                    bc:44:0f:df:ee:09:65:7a:5c:c6:98:99:34:3a:c7:
                    60:fc:d0:97:8d:8c:ef:c2:7b:09:c1:a3:f1:12:ec:
                    91:e7:65:d3:19:3d:fb:69:83:d9:57:ce:22:57:fc:
                    a5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EF:80:80:FF:4B:CB:7E:E0:8E:B7:D6:A2:08:9B:04:8A:E1:E9:F3
            X509v3 Authority Key Identifier:
                keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:45:f2:15:f9:25:7c:dc:42:95:08:76:6e:7a:62:ac:69:fe:
         5d:2c:1d:07:7c:c7:a8:2b:e0:3d:cf:9c:9e:6e:23:f5:2a:bb:
         e3:bd:2b:f4:7b:c6:d0:ab:8e:c6:d8:60:8e:24:f5:34:32:fd:
         34:38:11:1f:2c:86:dc:11:ac:66:62:fa:94:78:f8:9c:30:ca:
         1a:32:7e:49:ac:d4:5c:b0:23:58:98:92:bf:87:23:16:28:2f:
         34:08:3d:83:35:c7:08:e1:eb:5a:f7:22:db:be:df:7d:9a:c5:
         2b:82:48:64:9f:42:d9:6c:4c:ba:80:aa:f7:ce:02:9b:17:34:
         62:30:20:40:df:bf:66:ea:9d:6c:b6:6d:2c:0b:b7:c5:4d:4f:
         f9:5f:ff:85:c2:a0:89:b4:f7:f7:4d:67:15:bf:68:ba:ec:6d:
         6b:29:4a:ff:56:65:35:95:b2:42:80:58:8f:8a:01:53:33:b0:
         fd:9b:38:66:b8:de:6e:e4:1e:e6:9b:0d:f0:6c:4e:e8:1e:88:
         5b:21:16:bb:c9:4c:6a:64:fb:13:62:c0:e6:d6:fc:79:fd:52:
         66:2d:1a:db:86:29:5f:21:f7:58:f4:cb:9b:ca:c8:c7:6f:85:
         ef:ac:60:9d:42:24:4f:c9:a0:cf:51:6c:c5:f8:d4:c3:e6:9e:
         92:10:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----