Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
File:                     EFQ6UZfrJUREfp02s-vxRFLHd-s.mft (raw, json)
Hash identifier:          N7ndg3aIQ1/XMKpd6u2BRImpTe2tZFjUzdfwnMmYlf4=
Subject key identifier:   C2:2D:75:BF:6F:C7:82:B4:C9:A5:FF:55:12:55:98:E2:B0:2E:96:D7
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Certificate issuer:       /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial:       01962ECFDD687AA5E55808547FF90E5D79D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: EFQ6UZfrJUREfp02s-vxRFLHd-s.crl (hash: OrMoBaPiDp4pwr1K62Npvc0e8eeIhjKbtBp74Lfo/B0=)
                          2: O7lEAqmJ6RVW6ZUznCOtA8Wqr_U.roa (hash: 1bSxYn5Oc7EjOQaFfznp7ul3zLl0SKUWaiYKT6AxWVI=)
                          3: USGB4EfibArvmHzd6YayMlE_4Ts.roa (hash: QP2OBD46ZcKAmd7iDiZKVRRwOA0LwH3cIZJcmun1SiE=)
                          4: WfSIoxcGiNbq5oGvcE0eiwRzwaI.roa (hash: 4+ITlETEk/svEAAS/Kisuuoh14YPCP7V8PSGJ6x5Okw=)
                          5: lnnez22JWNJd2WeZ5gJhM-lXVrk.roa (hash: /nXGCYPW3MVBYSZbtf5SJkkLnnjwK5da+GKvEPkj/WA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:dd:68:7a:a5:e5:58:08:54:7f:f9:0e:5d:79:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=c22d75bf6fc782b4c9a5ff55125598e2b02e96d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:eb:22:c0:17:ae:b8:df:5f:10:15:18:41:
                    41:f1:0f:08:18:ca:d5:6e:63:05:22:59:98:21:8b:
                    6e:79:a5:03:59:12:a6:24:a0:93:81:cf:dc:d0:1b:
                    f9:aa:8f:79:4d:3a:83:43:9e:2b:e3:1b:23:00:f3:
                    9c:1c:18:17:9a:d7:db:60:06:fe:45:8b:21:68:49:
                    0f:4b:63:6e:c8:1e:b0:7f:e8:34:40:f3:29:53:b3:
                    25:38:1f:69:63:d1:cd:0f:49:42:68:17:14:2e:40:
                    45:0e:aa:83:a7:db:35:fd:ca:08:05:2c:6f:83:5c:
                    b5:a0:0b:29:1f:ab:d6:79:b4:54:52:78:08:cb:25:
                    5e:d2:c0:41:83:02:c6:49:5f:43:d7:e3:ee:0a:2f:
                    a7:1c:ce:34:18:07:e6:dc:74:7b:5f:e9:c5:e7:f6:
                    2f:59:b3:3a:ed:37:3c:b0:de:a1:69:c6:e7:a1:9a:
                    bf:c0:55:00:da:e2:e7:72:a1:a7:c6:98:45:b2:46:
                    f0:9f:bd:20:db:c1:69:90:9a:77:c1:d1:2f:33:2e:
                    71:8d:7a:f8:71:28:55:9f:cc:ed:be:b3:9e:81:da:
                    bb:b2:c8:ab:8c:fb:d4:cb:fd:94:54:ef:2b:5e:27:
                    e0:26:fc:8c:34:50:f9:fa:d0:84:3e:fd:d8:13:f2:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2D:75:BF:6F:C7:82:B4:C9:A5:FF:55:12:55:98:E2:B0:2E:96:D7
            X509v3 Authority Key Identifier:
                keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:06:6d:02:35:09:5d:c3:fb:e7:72:e2:fa:61:0f:37:f8:5e:
         65:cd:9e:c6:cd:81:ac:ac:07:b4:53:28:40:42:33:4a:91:3e:
         6b:a4:2c:f1:dd:76:93:88:b1:f2:d3:6c:dd:f7:70:e9:57:c0:
         b6:72:75:a4:b1:be:50:23:c0:c9:c4:3d:fe:e9:b1:e1:a1:22:
         af:f9:12:da:cf:76:ca:bb:d5:a6:ed:96:bc:d2:a8:ef:f0:fe:
         c8:8f:14:59:44:cd:10:88:71:4b:0c:43:9d:73:f1:bb:ed:6d:
         3a:27:63:4b:33:49:ff:33:70:3c:97:55:1c:67:79:15:62:e4:
         7d:a0:20:fb:a3:7b:b6:82:3f:67:6d:0a:fc:10:3f:b5:8d:f3:
         cb:55:ff:4a:19:80:65:45:8d:01:77:00:fb:eb:63:6d:ee:a3:
         b4:9c:a0:c2:e0:8a:d6:f0:2f:fc:77:18:4f:b1:30:fa:2a:fe:
         48:56:00:ce:af:f4:a4:0e:e6:39:e1:8a:02:ae:58:47:f4:a0:
         a8:f9:cd:4e:e8:14:86:77:bb:fa:1a:09:e2:2c:66:e8:2e:d5:
         b8:4b:f3:f8:fb:5c:6c:b2:63:36:44:a5:1f:d4:cc:23:4f:3e:
         f6:cb:6f:55:4b:09:e2:dd:38:53:c1:fb:3e:94:c9:d6:25:dd:
         db:bc:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----