Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
File:                     eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft (raw, json)
Hash identifier:          +VGH5M8JHWzuvQA07bApb9gdVDMNXTOeVmX0JOtasdo=
Subject key identifier:   75:6C:5B:E6:04:B3:60:74:9A:B1:8C:36:3B:D4:15:1F:C5:EF:63:1A
Authority key identifier: 78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
Certificate issuer:       /CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Certificate serial:       01962ECFA6A22072C84AD689CCBA089035B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl (hash: +q1Ow7eAt+MFj1Z404JaEVJB6pRx7mbAL1E6wVc/oH8=)
                          2: kvDA2uJCxtsf_iJspEUKkErzpBw.roa (hash: JEVQ/faqvkDHRCLDsyE8tNxf+ZkvCVkbrXJ5aSPcJrs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a6:a2:20:72:c8:4a:d6:89:cc:ba:08:90:35:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=756c5be604b360749ab18c363bd4151fc5ef631a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:bd:86:0d:fe:3f:78:89:e2:3f:5c:e2:3b:
                    b8:15:84:07:25:3b:ec:55:bf:55:84:6b:d3:71:c8:
                    61:ea:d0:d3:6a:68:4a:93:52:b5:5c:14:5f:57:21:
                    1f:5e:07:f0:5b:17:6f:f5:9f:4e:a1:cf:84:af:d5:
                    06:90:7e:aa:d3:55:79:b7:f2:95:46:10:ca:ee:97:
                    28:80:59:47:6c:2a:68:e2:4b:69:76:fe:98:c9:c7:
                    56:68:1a:3d:37:a3:e9:7b:3b:40:d6:5d:68:b9:59:
                    7d:7a:0c:a8:4d:ff:03:ef:e2:ab:c4:d6:58:64:d1:
                    f5:45:45:80:65:a1:db:2b:00:eb:dd:90:8a:68:8e:
                    2c:62:9f:fe:5d:37:61:4b:d0:3b:4d:5b:2a:07:d5:
                    a0:d6:ab:40:8d:c5:f2:4e:b5:04:9c:71:33:d4:9f:
                    f9:57:ab:8c:50:90:92:1b:f5:08:4a:b0:e6:4c:13:
                    20:77:e2:f4:26:5d:a3:4c:4c:be:4b:48:45:eb:d6:
                    a7:52:d6:bb:13:f2:46:c5:2d:f5:77:77:c9:c9:9c:
                    53:26:5b:2a:63:1d:26:87:4d:5b:47:b2:9b:5c:6d:
                    2c:fc:fe:61:63:1c:7a:a2:64:25:a4:19:13:bd:51:
                    4e:a2:57:95:70:44:9f:0b:7e:11:91:0b:cd:6a:4d:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6C:5B:E6:04:B3:60:74:9A:B1:8C:36:3B:D4:15:1F:C5:EF:63:1A
            X509v3 Authority Key Identifier:
                keyid:78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:26:81:d1:98:8c:12:03:ff:b0:61:11:2d:fe:1f:b4:13:58:
         ac:d3:a9:3c:bc:a8:5c:91:ea:a4:1c:a2:e6:3d:bf:89:86:51:
         29:f2:31:ac:f4:10:dd:a6:f2:5a:25:05:bf:a6:d8:6c:e6:ea:
         56:6b:9f:08:6d:0e:eb:8c:fe:d6:b6:b4:32:bb:ca:ab:13:9f:
         0b:8c:4a:0b:37:65:b7:94:cd:16:6b:f8:8e:13:69:9b:64:a7:
         99:5b:ed:cb:9a:ef:dd:fa:36:9c:7c:70:7c:45:63:9e:c8:ab:
         d9:01:dd:65:47:e9:ce:38:34:ec:09:3c:7b:01:01:59:66:5e:
         17:43:08:65:39:d8:ba:31:1f:55:37:6b:a7:82:c6:b8:95:a5:
         95:98:a3:99:25:1d:7c:8d:42:ac:59:77:b4:16:bf:2c:dc:32:
         64:da:66:70:ba:63:d8:6a:d5:df:f6:2f:2b:e9:c7:bf:db:1a:
         d5:74:9d:11:f6:c7:f7:36:3b:7f:d7:3e:c4:d4:4f:2a:1c:5f:
         3f:c5:f9:20:db:e1:6a:55:bd:a5:e0:aa:58:f0:d1:26:71:7d:
         fe:2f:90:bf:d5:9e:16:ed:64:33:26:d1:e7:3b:e4:d0:5c:67:
         bf:82:49:41:7a:c3:e5:83:92:e2:7f:78:63:1d:7a:7b:19:0c:
         a9:82:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----