Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
File:                     ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json)
Hash identifier:          Quj832HmrdcwAuvSTSZ066G7c+tfErXvIkwYTYQ2tOk=
Subject key identifier:   BC:6F:0C:0D:06:F5:DC:92:90:D1:4E:24:66:A7:4F:CF:0C:CC:96:7D
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Certificate issuer:       /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial:       01962F74EC7928FBA27067F5CB6F38262B7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
Manifest number:          02FA
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: TqskwAdWwoLKl/Y/jcMtGpzGeeGD2avJjGwTYV8kuuI=)
                          2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ec:79:28:fb:a2:70:67:f5:cb:6f:38:26:2b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=bc6f0c0d06f5dc9290d14e2466a74fcf0ccc967d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:a6:e5:ec:08:3a:e9:87:15:3a:24:b0:8e:
                    5b:39:83:dc:8a:73:d7:3f:57:b6:06:e6:96:fd:0e:
                    6e:34:6a:03:87:c7:71:20:a9:77:bc:8a:63:a5:27:
                    84:8e:87:44:e1:74:2a:92:75:53:82:47:c7:d1:08:
                    02:59:88:db:73:ea:d5:37:fc:97:17:c4:7e:40:d2:
                    46:0a:96:41:59:93:8c:78:e8:d8:82:0f:05:11:27:
                    c3:5f:f8:49:29:d6:7d:2f:2e:bf:6f:5b:c1:5b:77:
                    43:a5:5d:8e:ee:16:31:90:88:94:c8:e6:59:ce:97:
                    19:c5:5f:c3:f5:d1:c3:e6:89:2a:fa:42:b2:67:2c:
                    9b:24:e4:db:6d:df:3a:ed:7a:3b:b9:8f:16:74:d1:
                    1a:cf:d6:40:88:4b:61:a9:28:22:9e:29:89:55:56:
                    41:db:38:81:02:f6:fd:0e:eb:a9:bd:ca:15:73:76:
                    06:8b:e5:10:cc:d8:60:95:a5:39:bc:84:ac:03:dd:
                    a0:8f:ab:39:3e:bf:b1:a6:fa:9f:e6:4f:50:f6:11:
                    b9:d8:a6:23:3c:79:a7:63:81:d6:b6:2d:9d:40:90:
                    44:7f:9e:ff:88:19:35:10:e4:9d:0e:c7:b8:8b:3a:
                    3f:66:15:32:97:26:fb:d0:ec:39:b7:2e:5e:78:22:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6F:0C:0D:06:F5:DC:92:90:D1:4E:24:66:A7:4F:CF:0C:CC:96:7D
            X509v3 Authority Key Identifier:
                keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e6:5f:e9:2d:90:e0:94:9e:67:3f:dc:69:b4:90:96:c4:aa:
         9a:3e:54:a4:45:17:70:c2:bd:84:e3:17:60:78:68:56:c2:c2:
         84:82:65:2a:98:a1:13:71:b2:bc:47:d8:3f:9b:87:02:04:e2:
         9f:75:f9:53:73:18:c7:e0:db:dc:36:63:d4:55:a6:0d:0d:0b:
         ff:e2:68:6b:1f:b8:00:e1:f5:81:45:87:04:49:1b:ce:11:a6:
         b9:c2:52:90:35:4a:10:b3:3a:54:93:34:3e:a8:fa:47:cb:3c:
         60:15:da:d0:69:ed:16:a1:70:8c:f2:ae:33:96:6b:64:26:81:
         b6:ab:79:4e:2e:bd:65:be:ba:36:1b:67:81:c4:13:f4:c5:aa:
         bc:5d:ee:47:a0:c3:8f:25:aa:21:49:85:fc:ae:93:3c:88:ef:
         82:30:fc:d7:d5:4c:fb:e1:f3:ee:d0:f2:e7:a5:44:f2:00:dc:
         e2:26:01:cf:03:f2:e0:d9:e9:ed:73:d6:ef:e3:20:6b:34:78:
         e7:f8:25:31:3d:fa:b9:0f:e8:51:e2:18:f1:97:36:f1:81:00:
         14:15:7b:e0:57:91:7e:80:e6:fc:c5:e0:6a:76:87:95:58:48:
         14:06:f3:88:b8:4c:b9:4c:47:25:d6:02:02:ce:50:ab:30:b1:
         98:dd:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----