Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
File:                     eaMEujS2GhXjeX_9TRrowhjBx78.mft (raw, json)
Hash identifier:          x4mzMdlNGTXvUnkECtuUYpSa7Mz3Bm0cFMhEUSk5W3M=
Subject key identifier:   C9:77:97:01:48:52:74:5F:C9:1E:7C:32:13:41:3A:14:01:CF:10:B9
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Certificate issuer:       /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial:       01962F06E3E2BA3F5B588C25FD44CE86A8DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
Manifest number:          0BF8
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: b0H5BIPWspFi043SM6fKEKW_8OQ.roa (hash: ThJ0L4hUOokOS85srPc80jBMsa+mo0OF59zs8lkKdbA=)
                          2: eaMEujS2GhXjeX_9TRrowhjBx78.crl (hash: Fadr7G1QIadyxdvXetlTxwwM/kLCmfI4i0sriVL+U1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e3:e2:ba:3f:5b:58:8c:25:fd:44:ce:86:a8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=c97797014852745fc91e7c3213413a1401cf10b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:32:cc:a1:d7:9c:47:36:7c:af:8a:fb:76:
                    a2:07:44:1f:b4:12:f9:66:db:f8:7e:0b:bb:ad:9a:
                    0e:f1:42:78:1c:c5:7f:e1:7f:c7:17:9e:25:d6:b4:
                    53:78:d2:04:59:ce:b9:d8:e2:e0:a9:92:9f:6d:52:
                    b6:50:07:57:42:95:6b:48:e4:35:65:d0:50:ad:b1:
                    df:61:6c:34:e4:53:b6:66:2e:23:09:6e:cc:c4:1d:
                    77:ad:72:f3:ae:8a:92:f6:f5:b0:5a:bf:d1:4c:0d:
                    a0:23:e4:85:6a:ca:0e:96:f1:92:4b:0a:16:73:eb:
                    6a:87:75:54:ff:b2:dd:f4:5e:c8:85:78:53:77:60:
                    b4:3a:03:a2:2e:60:c5:5b:3c:07:0e:3f:2b:e4:bd:
                    62:54:28:f2:2d:e8:a5:ad:cd:51:76:0a:13:06:43:
                    7f:ba:9e:83:1b:fc:a3:37:1c:ac:4a:8b:54:0c:dd:
                    0b:06:6b:ee:71:f2:31:bf:02:ec:55:d3:7a:e2:77:
                    9f:bf:1d:d7:d4:56:2f:cf:f0:52:ea:fe:62:f7:ab:
                    22:be:3b:54:4b:f9:d7:c0:21:06:6f:80:1c:8d:93:
                    74:7b:79:8d:03:48:ad:79:25:30:89:86:30:7d:a8:
                    84:b6:c8:61:1e:df:05:8d:4f:30:f6:b5:53:d4:94:
                    1e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:77:97:01:48:52:74:5F:C9:1E:7C:32:13:41:3A:14:01:CF:10:B9
            X509v3 Authority Key Identifier:
                keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:6f:ae:83:af:52:41:70:7f:f5:77:86:b9:03:79:f4:55:99:
         2e:39:be:2d:f7:56:80:d7:9b:d1:a5:62:35:dd:33:a7:5a:68:
         6e:29:1b:cb:82:b5:29:74:8d:2f:a8:01:ae:ba:c9:9e:d7:52:
         99:b6:4d:ac:80:af:92:b6:93:6b:aa:fd:23:ee:c2:29:55:98:
         d4:5e:59:d2:d2:f5:f3:ff:5a:0e:85:b0:da:a1:e0:56:39:0f:
         1c:d7:26:61:ab:24:29:30:9b:fb:54:30:b3:6c:d0:6c:96:a0:
         5c:b6:cf:68:c1:bc:de:eb:0c:c2:b2:de:f9:3e:9a:2a:f0:02:
         38:72:81:48:4c:57:ef:8a:a5:e4:f9:05:b4:ab:02:03:69:6d:
         bf:57:99:a3:27:7d:bc:75:2a:48:08:44:05:7f:c5:7c:2a:06:
         19:ad:ae:3b:2b:4c:6b:57:c9:82:92:e0:66:89:dc:59:0f:25:
         d5:8c:ff:bf:4f:41:9a:64:a8:67:65:12:85:16:01:f1:14:86:
         c6:3c:5f:83:a6:7c:c3:8b:b0:6f:93:c8:5e:f9:16:80:30:20:
         18:eb:45:de:cc:4b:47:51:70:23:34:5f:75:96:2a:d3:bf:73:
         c1:23:db:a5:9e:36:82:a7:61:e6:7d:7f:bb:f4:88:95:5e:07:
         f0:e7:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----