Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
File:                     EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json)
Hash identifier:          KTQn/uW0z87zcR5jMMhXnqzoEHMKqZY6xtcjVBfVVeo=
Subject key identifier:   0D:73:FD:B0:B7:29:F0:21:60:A5:82:F3:43:6F:54:22:99:BE:D5:BE
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Certificate issuer:       /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial:       01962E2ABA35D11CD3BDB843E54783AFF2F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
Manifest number:          1506
Signing time:             Sun 13 Apr 2025 08:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:13 +0000
Files and hashes:         1: 2ECEgaeyvSYmg3L6KVDmtq3QuD4.roa (hash: Rjau37FJBuKqQPy7bdPwgLw6zQ6xQsvpgd1mKIZXcFU=)
                          2: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=)
                          3: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=)
                          4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: 8aKsDk45Ex4ORSRX8UfIOxZ8dkjG76giQVhhFYzl7iM=)
                          5: FiSCmdKJRr-YPjxcFigpeVUFVps.roa (hash: acaY8ohPIqVg5UZOHMawmFt422sokwSlIOa32vVbDkM=)
                          6: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=)
                          7: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=)
                          8: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=)
                          9: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=)
                          10: h_uvtBb89v86Ot0rZM5k7wf9t3c.roa (hash: wRsRpB1TywlOMa0+6dhzZ3BVy/WX6GDrbpQr+SBFVlM=)
                          11: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=)
                          12: uR1ciNLiC41HyQnLFmxXdlFLi4c.roa (hash: DjsKRDrWt/FFBB561o4tq8q/9xsxFnlJ8tTN6CI64L0=)
                          13: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ba:35:d1:1c:d3:bd:b8:43:e5:47:83:af:f2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
        Validity
            Not Before: Apr 13 08:01:13 2025 GMT
            Not After : Apr 14 08:01:13 2025 GMT
        Subject: CN=0d73fdb0b729f02160a582f3436f542299bed5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:f0:db:35:1b:8b:d4:84:0d:0f:67:34:26:
                    cf:de:67:a5:7a:a5:ac:7c:e6:b5:73:bb:b8:0e:d9:
                    b6:b9:51:7d:10:b2:1d:ab:30:f3:fc:ae:20:4f:30:
                    e7:9c:7d:e7:c0:ae:87:54:48:9e:15:c0:82:e6:5b:
                    0b:91:ee:3a:2f:5b:1d:68:85:89:0f:7b:64:02:a6:
                    6d:ee:b5:6b:20:04:45:be:eb:ed:1b:b4:1d:39:c6:
                    30:9d:ad:08:5d:e4:ad:0c:5a:fe:42:57:93:54:20:
                    33:a1:a9:c4:ba:8c:b1:5b:9a:69:de:3f:d5:65:66:
                    b1:97:89:68:bb:50:79:1e:cd:c0:2a:2f:89:78:5b:
                    2e:08:92:77:e9:60:a6:88:5d:bf:ef:b8:4f:6b:f6:
                    2c:1a:28:48:40:39:91:4b:d1:a5:ef:89:5c:7b:4a:
                    f9:64:7c:8f:b6:24:44:b1:78:b9:60:3b:c7:3a:bf:
                    8d:a1:bd:64:cc:1e:29:52:d8:f5:0c:49:9f:92:77:
                    0d:13:79:82:18:27:0e:67:07:07:da:d8:09:2d:04:
                    21:09:38:2a:2f:74:63:a8:5c:70:e6:0d:10:2a:14:
                    16:58:f1:01:04:60:51:35:77:70:d3:79:4d:79:ab:
                    ad:5e:a5:a1:c3:de:39:59:87:f5:5b:f1:95:1b:bb:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:73:FD:B0:B7:29:F0:21:60:A5:82:F3:43:6F:54:22:99:BE:D5:BE
            X509v3 Authority Key Identifier:
                keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0a:9a:37:d4:de:ea:4c:f9:c9:bd:58:ba:22:96:54:12:53:
         ab:65:0b:56:13:5c:03:3f:00:7b:5e:5d:f8:5d:d1:c9:bd:7b:
         33:ff:e1:a2:87:be:95:a9:39:5f:5f:3e:70:9c:4c:2d:dd:36:
         07:88:b9:06:98:0c:6c:94:5f:36:a3:43:45:af:b7:dc:ef:a0:
         c2:92:47:b8:46:db:da:2e:b3:52:82:b5:97:85:66:cb:10:68:
         b4:0c:b0:1e:c3:fe:17:79:4a:62:e6:38:58:7d:93:cb:21:89:
         77:63:a5:10:c8:29:cd:5a:d9:54:95:bf:55:63:ea:8d:b8:64:
         2f:04:42:ec:8a:36:65:1b:de:86:8b:f0:21:b9:f4:2d:8f:be:
         40:72:fd:7d:fa:3b:4e:18:6e:71:7c:79:c1:03:5f:7d:42:fd:
         39:fb:94:bf:26:c8:52:37:0f:74:84:41:cd:b7:ec:54:cd:49:
         4e:d1:b8:e7:be:0a:57:e1:12:85:74:6d:c1:02:42:44:bf:e4:
         88:d3:ea:09:fb:c4:82:ab:b5:5a:37:70:3d:7d:82:69:2b:54:
         6a:d9:38:5b:43:25:b6:e1:c9:48:25:5c:2a:f1:98:dd:bb:64:
         b7:45:a8:a8:12:57:95:3d:ba:dc:21:83:e8:e7:d2:27:8f:82:
         71:ae:85:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----