Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
File:                     EN06cveQsl7j0imsmfaacb8dgpQ.mft (raw, json)
Hash identifier:          3aydwuO4d6YeWShc/krjjkZWmiuexxGqbrvWXYfzc2o=
Subject key identifier:   25:D8:69:9A:57:CC:0A:66:2A:83:78:B8:8C:49:81:C8:34:B1:62:91
Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94
Certificate issuer:       /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
Certificate serial:       01962DF3E73640D26E9E83BCE975F84BBB83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: EN06cveQsl7j0imsmfaacb8dgpQ.crl (hash: 9u5urDHGA+D3L/90ORTZGyRzKSIpGKgUNc3S4CiDckY=)
                          2: c5PalyNSyST_aAI1KT3QGDFOwJs.roa (hash: mO2ZdsVC3fTegCqI2v7PXch94it/WJD1mL1+9bQtLsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e7:36:40:d2:6e:9e:83:bc:e9:75:f8:4b:bb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=25d8699a57cc0a662a8378b88c4981c834b16291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:ea:11:0c:77:14:7b:b1:01:45:bb:8e:cc:
                    72:d7:e4:d4:98:f1:e3:29:aa:ff:5d:ab:05:aa:a6:
                    f9:eb:fb:29:68:c2:35:b0:c6:05:dc:a8:93:7a:ba:
                    e3:5c:3c:95:fd:8f:f8:ba:44:dd:6c:64:d8:03:09:
                    a0:1a:91:07:a6:a2:56:07:07:ba:c4:f0:b5:19:3c:
                    89:5f:68:6a:d8:0f:88:ab:99:e8:dc:67:9f:4f:b0:
                    3c:e2:2f:b3:a8:06:d3:e2:b9:a8:c5:a0:4d:0a:ab:
                    43:e3:44:82:06:84:54:09:16:86:4d:e3:97:cc:8b:
                    8a:68:c8:a8:07:df:e3:8c:18:31:f1:d7:75:05:e3:
                    a2:2c:78:a3:62:8b:eb:bb:2b:e8:45:90:3d:ca:af:
                    5e:5b:8f:d0:3d:a0:f5:ab:e5:eb:6c:ba:49:c2:71:
                    4e:ba:42:61:56:65:11:7b:b0:40:16:eb:b9:f6:ee:
                    07:cc:e4:65:a1:49:cd:73:01:5f:a3:dd:7e:21:37:
                    41:50:2a:0e:1b:a1:4e:44:2e:9d:10:36:74:2b:b1:
                    c2:e5:da:77:85:b6:4e:28:16:bd:1e:ec:7a:d6:c6:
                    2e:35:11:86:4b:d4:b0:ad:ea:46:ee:f2:29:1d:62:
                    1a:9f:65:d4:da:55:6c:06:54:ec:11:4b:06:31:e8:
                    ac:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D8:69:9A:57:CC:0A:66:2A:83:78:B8:8C:49:81:C8:34:B1:62:91
            X509v3 Authority Key Identifier:
                keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a7:b2:76:9f:70:56:22:fd:b0:84:74:f2:b9:36:60:fc:24:
         a1:8b:f6:af:c0:de:0c:e9:ab:e0:5d:80:5f:91:cc:be:5f:7c:
         62:c0:76:c0:50:2e:13:2b:e7:7a:42:da:7a:44:99:5d:09:dd:
         d0:28:c3:8b:44:da:47:55:29:7b:6b:26:ff:f4:29:2a:9f:1b:
         ba:a6:55:76:5a:a1:6f:0b:99:9b:6d:4c:0c:ca:65:c1:1e:a5:
         3d:f1:a6:e4:75:c0:48:16:04:0e:d7:c0:7e:ad:1c:43:f6:be:
         a9:ba:cb:a1:e1:52:d8:68:a4:a2:43:f1:cd:4f:e6:d4:e3:10:
         a0:7f:19:f6:67:7f:fe:9b:88:a6:4a:94:8c:41:9a:22:5a:b3:
         2a:36:46:e5:72:77:75:c6:88:5d:f2:59:50:e1:60:04:cf:87:
         36:92:f7:64:b7:f7:24:12:33:5b:36:f7:03:31:75:93:cc:4e:
         0c:9f:58:2e:14:2f:2e:3c:88:a1:06:ad:2a:45:75:8d:5b:4f:
         e0:a5:53:ed:f7:6d:3c:0c:65:b3:20:ae:88:3f:bd:10:0d:f1:
         4e:db:06:03:21:69:20:a4:e7:b7:6d:0e:19:62:1b:e3:49:31:
         d4:fe:ed:e8:56:9f:22:5b:7f:40:34:31:1c:d8:94:e1:12:44:
         df:87:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----