Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
File:                     eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft (raw, json)
Hash identifier:          wnU6iZAnRM/Jeq1Kg8C/n9acF8xGkZJH/dsGt9Kw4ew=
Subject key identifier:   50:97:45:31:26:5C:E1:89:92:68:A5:61:80:42:BC:05:FB:E8:91:52
Authority key identifier: 79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
Certificate issuer:       /CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Certificate serial:       01962E98DFE1E144A3251643FE494FE18433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl (hash: SXTA2cSUxi64epKLc4n+1S1ENaA/MCs3zjpRR4GyiBw=)
                          2: yQAP9rAxN3jSiptdtGasvuqbR7k.roa (hash: jwuLoZWMrvVKlN8mNHV1G2VK8hE/jVPJU+HGrpMeIIE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:df:e1:e1:44:a3:25:16:43:fe:49:4f:e1:84:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=50974531265ce1899268a5618042bc05fbe89152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:b8:93:38:38:b5:27:f8:b9:89:98:5a:41:
                    69:98:95:9e:37:df:95:1d:65:94:38:48:90:b8:d0:
                    9a:b8:8b:e4:74:60:67:87:32:53:f2:2f:0b:70:a6:
                    1c:f3:15:91:8f:20:ec:0d:0c:4f:8c:28:7e:7c:c2:
                    10:52:14:4b:19:03:10:17:60:c7:d0:d3:6b:a7:06:
                    fe:95:4e:3e:d6:0a:47:46:95:9f:86:ee:0e:4f:99:
                    d1:8a:e7:98:fa:be:61:f1:a1:df:28:f2:9e:1e:ff:
                    12:46:0e:1a:0e:12:26:f0:56:fd:87:56:65:63:60:
                    56:95:e6:29:88:26:5e:b0:4d:d0:40:73:9a:1e:ac:
                    e8:1e:f6:b0:6d:67:52:de:f6:f4:5c:5f:e3:c8:4f:
                    8f:ca:df:73:98:28:2f:3d:08:c9:ff:f5:07:dc:f9:
                    0c:7f:53:0b:d2:c0:c9:ae:fb:c5:46:02:ca:43:cb:
                    ec:07:aa:c0:56:34:94:fe:6c:09:c1:9b:33:c3:43:
                    fe:31:0a:21:3c:10:52:c9:c4:1e:1e:87:fe:e7:a1:
                    61:a8:6e:2f:a2:fd:33:25:dc:04:42:b6:65:a6:40:
                    1f:f8:c9:03:54:6c:bd:09:12:c1:54:a6:56:b2:be:
                    71:e8:4f:4d:7b:d6:33:19:33:18:5f:9a:d4:ca:05:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:97:45:31:26:5C:E1:89:92:68:A5:61:80:42:BC:05:FB:E8:91:52
            X509v3 Authority Key Identifier:
                keyid:79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0b:5e:c1:e1:02:e3:0b:5c:2a:7a:b7:77:92:55:bf:af:da:
         7b:f4:b4:37:cf:cc:b8:72:c5:be:21:07:f5:fd:41:60:59:0b:
         70:a9:e4:ab:35:98:79:0b:d0:6d:d5:15:0c:30:4c:17:d4:78:
         5c:7e:44:f9:dd:9c:93:09:15:5d:39:1e:02:fa:b8:fd:99:be:
         91:33:eb:79:7f:34:3e:36:dc:5b:6e:01:a9:2c:e3:40:06:d6:
         b9:ea:7a:a1:89:e9:d7:52:a6:6c:a1:2e:7c:5e:3c:af:fb:42:
         a3:8e:f4:04:62:d3:fe:0f:c9:66:1f:14:ef:25:91:50:81:df:
         30:ad:31:10:90:85:fd:76:7b:82:4a:df:71:0d:77:6d:56:e4:
         56:41:96:76:c2:79:7b:2c:fc:97:cd:a7:89:3a:a5:5d:e5:fc:
         76:da:38:3f:ad:53:76:09:0f:22:41:d6:ae:36:61:f1:3c:27:
         aa:4b:fe:08:77:71:ce:49:87:19:ea:af:1e:fd:95:f3:d5:5d:
         3f:5d:d5:4d:fe:41:e2:5c:2e:dd:2f:a0:76:8d:01:5b:3e:ed:
         22:6b:9c:03:e7:60:07:6e:cf:25:b5:eb:e1:dd:7d:b0:d0:a3:
         f6:f8:7d:cc:65:d8:66:87:74:f4:ae:77:e7:d2:84:80:82:1f:
         ef:bc:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----