Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
File:                     DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft (raw, json)
Hash identifier:          Go8HeJO++38eHOwHgEuMe9eIup0tyE7JDJJgMUaRi3E=
Subject key identifier:   53:35:D0:E7:72:F7:0D:65:EA:44:5A:84:1F:36:BF:B1:3A:37:72:A4
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Certificate issuer:       /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial:       01962ECFAF8B552726F47B9B1A22FE84736B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: 27P-M6RaZradAhI02XRCxNJRajc.roa (hash: tTsvmnH5D7n+aX14SSx07+7ZXmYT0c1J8AfGLOoiThg=)
                          2: DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl (hash: rsyWeRtkvx1pl5geJkvGiIbZD7qyBkXmfS5OqiaLr8M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:af:8b:55:27:26:f4:7b:9b:1a:22:fe:84:73:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=5335d0e772f70d65ea445a841f36bfb13a3772a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ba:35:69:07:f7:7b:28:9f:a9:06:43:9e:de:
                    d2:88:46:21:91:51:24:2a:05:ab:50:43:cc:d7:91:
                    d5:4a:78:e0:e5:5d:cd:f2:67:8e:79:e3:04:32:07:
                    0a:4d:f3:ae:45:a7:aa:0a:9d:33:fc:05:4e:17:6b:
                    c6:a3:02:5f:ec:b1:91:f4:4b:1a:51:3d:ee:9b:3b:
                    9a:7b:90:52:04:9e:4a:ce:f5:20:44:a2:52:f7:90:
                    c4:80:1f:d6:01:6a:c4:03:c6:0b:9d:34:68:23:59:
                    13:7f:aa:77:12:2c:e0:37:0a:54:9b:a6:f8:86:e0:
                    a3:29:9c:90:68:74:22:b2:78:69:26:61:19:16:0e:
                    24:50:3c:30:7e:83:18:62:21:14:1c:cb:0c:a0:f4:
                    12:b9:78:44:85:8e:9e:bd:f0:fe:63:8a:89:cb:61:
                    42:cb:81:1c:08:96:75:ce:2f:71:d4:9a:3f:97:d5:
                    cd:6a:b3:ca:0e:22:41:9e:6a:a5:34:59:33:aa:03:
                    69:e3:39:39:60:e2:61:8e:30:f9:00:74:3f:5a:5a:
                    2d:70:61:31:90:67:ef:f4:a9:d5:99:f1:dc:b9:94:
                    bb:98:9f:5c:32:20:24:5d:f7:1b:55:0f:d4:da:03:
                    3c:ff:5f:f1:9c:72:17:9e:4a:00:82:99:0f:8e:ae:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:35:D0:E7:72:F7:0D:65:EA:44:5A:84:1F:36:BF:B1:3A:37:72:A4
            X509v3 Authority Key Identifier:
                keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:59:e1:92:1f:d1:67:38:3f:e0:33:d2:7d:bf:51:9d:9d:
         c0:87:3e:5a:42:b7:53:f3:d6:0d:40:68:fa:82:df:de:f6:fa:
         f2:a8:b6:7d:37:b1:a4:b1:a1:5a:ca:17:2d:84:a7:09:87:c5:
         70:02:f2:d0:34:b7:b4:9f:cc:89:5a:76:bc:dd:6f:76:5d:d1:
         24:62:b5:85:80:0f:14:2c:62:07:34:5f:ad:82:84:bd:7b:d9:
         f1:dc:17:be:bd:f9:c1:02:a4:83:34:5a:d8:bd:85:82:43:77:
         97:9f:c1:2e:5c:67:67:c7:94:ac:2a:15:53:6e:47:5a:bd:40:
         64:d7:f7:78:a2:8a:09:93:e2:95:fa:4c:c0:61:eb:ab:15:bb:
         62:6a:17:92:00:65:5c:cb:41:b2:fd:bf:3a:1a:30:15:64:09:
         22:fc:17:f4:42:8c:35:39:c1:18:05:72:8b:98:a7:2d:bc:ef:
         2b:a2:69:ff:41:6d:2e:e4:54:86:16:94:6c:3d:de:fc:2a:af:
         ed:a5:0b:27:e3:3e:f9:fe:a1:84:51:3f:7d:cf:c8:23:33:42:
         f2:97:8a:db:e8:2b:0b:da:65:2e:03:58:9c:2b:0b:a3:ec:4f:
         4b:52:ac:77:4b:75:6b:19:e7:7f:7e:7b:ee:48:87:99:16:e8:
         fd:bc:55:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----