Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
File:                     eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft (raw, json)
Hash identifier:          tfjCajlBB5+1LJWFFGi6/YIQwcErkDp3ljVLTWp3d48=
Subject key identifier:   D7:13:81:6B:8C:B7:8E:D6:97:6A:B1:CB:B6:18:63:99:65:67:21:91
Authority key identifier: 79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
Certificate issuer:       /CN=7938dfb9eb924079bb706cb616eda572864a9e13
Certificate serial:       01962F068321B42CFC9800D5A0AB5A27865C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: EcvaRl1iw5Fob5jLrMM5EQhbGk4.roa (hash: LgQKet+vbUGnquoaPqj1LFUwk12nwLR01mm8VtlBXOg=)
                          2: XrmbTB36f6No7HgE2Qb2I31Dcv8.roa (hash: HGfAozR7O/ZB1GS1OfPuLa6dsGtZ660AMEUXLcdHqKM=)
                          3: eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl (hash: NutobcBNSYfFFvdmKg0ktx4s2df1L4QvpCxwrUGfaPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:83:21:b4:2c:fc:98:00:d5:a0:ab:5a:27:86:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7938dfb9eb924079bb706cb616eda572864a9e13
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=d713816b8cb78ed6976ab1cbb618639965672191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:1b:fb:7c:7a:f3:60:38:8f:5d:56:f0:f7:
                    af:85:d0:4f:62:f6:41:54:a5:8d:4d:41:84:c7:eb:
                    85:37:c2:35:cc:73:38:ea:74:1d:f6:4d:60:04:26:
                    56:a0:b6:23:98:c6:df:04:63:6b:bc:d1:13:6b:45:
                    bb:09:f3:73:9b:0a:18:ca:44:03:7f:54:5c:92:ed:
                    17:13:9a:c3:2c:2d:8a:fc:24:d5:37:c7:e4:f6:9e:
                    01:00:f8:65:85:f8:cd:e9:4f:85:df:d6:04:7e:d1:
                    ce:23:03:72:73:4b:37:aa:93:90:ac:d9:ff:b6:82:
                    fd:76:18:70:86:db:0e:b5:27:66:b1:50:da:be:ca:
                    86:26:3b:47:78:76:47:3d:9b:34:c3:51:bf:28:8e:
                    fb:51:1c:e0:72:12:f7:07:6d:e5:26:5a:9b:de:27:
                    51:9f:2e:5d:d3:11:3f:eb:79:e9:c5:5f:e8:02:63:
                    db:df:08:bd:6a:c6:6f:ce:07:53:33:cf:4e:af:d1:
                    94:bd:b6:11:09:bd:b9:6c:78:b8:68:c7:6c:cf:80:
                    81:30:a6:e6:08:ef:6e:3e:c0:f5:27:7d:88:13:a3:
                    7a:00:53:99:ea:4c:e1:9a:85:ab:21:fd:dc:a2:e8:
                    5c:9b:59:1e:45:55:9f:ee:82:67:bb:23:cc:d6:58:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:13:81:6B:8C:B7:8E:D6:97:6A:B1:CB:B6:18:63:99:65:67:21:91
            X509v3 Authority Key Identifier:
                keyid:79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1a:18:fe:77:75:ab:4b:0e:43:bc:8a:34:31:ea:c3:23:b4:
         6a:d7:a2:7b:5b:5e:68:65:8c:f5:24:41:60:ae:d0:cd:50:0f:
         f2:dc:f5:12:4d:31:b1:f7:18:0e:78:e2:d4:fd:1a:8d:9d:db:
         24:d5:dc:50:46:4f:22:ff:b2:6a:47:df:4d:fc:e7:be:db:80:
         98:bb:f6:81:c8:85:20:cd:a0:b0:44:f7:e2:bb:bf:f3:69:ce:
         e7:ad:17:4f:96:88:0f:75:02:89:f1:4d:98:db:ce:51:84:ca:
         eb:26:24:d5:60:71:98:f9:ee:94:f2:cb:f2:5f:09:2f:07:02:
         0a:3b:53:a3:f3:02:08:84:3f:a6:94:09:55:6c:93:19:86:23:
         74:aa:57:59:63:ea:56:1c:4a:d0:ef:15:28:2a:b0:c0:0b:aa:
         2c:96:ab:8e:97:2c:dd:a7:3c:fd:80:e0:6a:d4:12:9c:35:f7:
         dc:76:39:d8:bb:5e:58:01:20:8c:1e:a2:45:58:45:3e:ef:0c:
         ce:3d:f2:e6:6a:b5:6a:63:b3:9e:6d:3f:a5:46:96:58:5e:0d:
         25:1e:03:54:c1:d6:11:19:af:7f:ac:33:b6:60:4b:f1:55:51:
         20:0f:e9:9d:a1:3d:b5:b0:d3:78:57:1a:ab:77:f2:91:3f:01:
         ba:e9:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----