Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
File:                     iEZAW_zHgGbFGSyz6-csRDxVcog.mft (raw, json)
Hash identifier:          ak0sfa8H6ZVPhZO6AalQGL7uqulQ4mwZYhIFCnCkWXE=
Subject key identifier:   AF:EF:84:99:EF:0B:4A:73:BC:21:A8:FF:44:EA:74:0B:70:F9:C8:50
Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
Certificate issuer:       /CN=8846405bfcc78066c5192cb3ebe72c443c557288
Certificate serial:       01962FAB2590AD719A5AEA28E4B0A1A718B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: 1wukbEM_Z2cOLmS317mkgQWPtlY.roa (hash: mynvXYceF8nnYoZdEmhOk8iYDpjkXUz62HUCHGcK8Wc=)
                          2: iEZAW_zHgGbFGSyz6-csRDxVcog.crl (hash: IYrWcGxd1B7GXE/cqxvA7Sq9/g9sSc/3VhTv8OfBIJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:25:90:ad:71:9a:5a:ea:28:e4:b0:a1:a7:18:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=afef8499ef0b4a73bc21a8ff44ea740b70f9c850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9a:ad:74:f3:30:d0:e0:52:bc:2d:1e:73:b8:
                    47:85:c2:6a:c2:10:8e:2e:2f:f9:ec:b1:69:4a:1d:
                    74:9e:c5:73:77:7f:27:89:61:ec:a9:67:05:d5:f8:
                    38:81:03:fb:c7:b8:a8:7c:3f:04:58:73:e5:ce:d9:
                    26:ba:30:bc:13:20:3b:43:f0:fc:08:f9:42:72:bf:
                    88:1d:87:40:77:e4:5b:a7:91:40:4f:7c:e0:5f:c5:
                    ce:f0:e8:7f:d1:9e:42:ec:36:e3:80:94:ad:53:01:
                    6c:f5:61:2a:6b:b7:64:25:57:d1:85:83:10:f3:59:
                    9c:c0:1b:85:81:e7:a2:36:85:02:cd:f6:e8:7b:c3:
                    e9:89:8e:de:de:42:1c:60:a6:44:56:f2:1b:c5:4c:
                    8f:e9:34:b7:ac:fc:b6:c2:45:dc:db:88:ed:79:5a:
                    b1:7e:d1:a9:73:15:e8:09:ed:26:ac:60:1f:a2:65:
                    5b:18:9f:1f:b9:39:88:49:78:dc:d2:ab:6f:bb:76:
                    bd:e9:2a:ee:25:7f:fe:a6:ef:22:4d:bd:b0:50:1f:
                    f5:ff:79:ae:ac:15:77:ce:e9:10:ed:f0:5f:83:36:
                    f7:86:bd:4a:c1:1d:27:13:b0:58:01:08:17:dc:80:
                    46:e3:a0:48:3e:3d:f9:b6:31:7c:f1:c6:ca:2a:0a:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EF:84:99:EF:0B:4A:73:BC:21:A8:FF:44:EA:74:0B:70:F9:C8:50
            X509v3 Authority Key Identifier:
                keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:29:e6:22:e6:71:d5:5e:f2:e9:2a:c4:5f:5c:d7:da:43:65:
         26:d7:50:4e:ab:43:df:39:b6:45:2e:f7:62:fc:3d:bb:8d:c0:
         3d:a9:3f:9d:a7:b3:f0:80:cc:4f:ee:62:bb:9c:d8:e6:b6:c1:
         33:7d:6c:90:16:06:41:51:4d:f9:80:09:2e:92:54:8d:16:dd:
         5a:ed:41:ba:e8:e3:d9:29:1c:1d:1a:7a:97:e9:38:5d:eb:78:
         12:0b:bb:26:bf:56:a2:22:98:54:7f:0c:3b:2f:94:fb:b4:b8:
         d3:4e:f1:c3:fd:ee:d7:1b:ea:ef:bb:86:1c:91:91:5f:a3:f8:
         31:5a:e7:05:ac:cc:b1:da:b9:ba:f3:d5:31:de:91:3a:93:f2:
         dc:64:ed:fb:92:8f:99:71:d9:e3:b5:f3:46:8e:1f:d2:d5:3b:
         0b:4f:f2:ab:4f:cf:a2:9e:49:4b:af:47:0e:a6:15:6b:5e:68:
         5c:59:17:3b:b4:91:c5:d6:ab:1a:ef:06:3b:66:1b:60:2e:03:
         9f:91:e8:a3:6a:a6:e7:2c:29:59:95:86:dd:e9:9c:7e:4f:cd:
         f4:e1:60:2b:ae:bd:99:08:e4:74:17:43:19:2b:ed:5b:63:a5:
         33:01:d3:91:eb:54:b8:b6:f4:a8:28:ff:e7:44:9b:89:a6:b0:
         46:36:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----