Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
File:                     ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft (raw, json)
Hash identifier:          S127cSC9wXNiBB+bXbfZH+nddzSJpDEG+hHohdJh1b4=
Subject key identifier:   95:08:17:83:9B:13:FC:2E:33:BC:77:06:D4:D3:06:5F:07:56:EE:07
Authority key identifier: 10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75
Certificate issuer:       /CN=1024e66d7cba77b977685559c2481bb9044c5b75
Certificate serial:       01962F3D5600A90F8A580A485CED4DA13E16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: AqNcisECeia8r42sdVkCO6MArLA.roa (hash: 18o7z7bmdzyzqumEyVAcE9Q6zGKgPT0KV/iWQ82M7jg=)
                          2: ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl (hash: 2LFoY2Nez5R2Pmdh3vVpkjrUETqfRQnyUM3MEVBQ7zM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:56:00:a9:0f:8a:58:0a:48:5c:ed:4d:a1:3e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1024e66d7cba77b977685559c2481bb9044c5b75
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=950817839b13fc2e33bc7706d4d3065f0756ee07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:94:c9:52:80:b4:1d:7d:dd:fe:15:12:b1:
                    a8:5f:b5:90:5e:e3:46:fe:a2:ae:59:19:e2:aa:54:
                    28:03:6d:fa:a8:5f:b9:56:d1:ad:f8:7c:21:ae:c1:
                    21:f1:1a:21:0d:7b:ac:b8:76:48:ac:a6:71:0f:df:
                    7b:9a:f9:6d:66:dd:74:15:d9:b6:be:f1:7f:2a:54:
                    5f:86:66:8a:2b:68:96:35:1f:49:51:8b:05:cd:f2:
                    48:44:3f:0b:ef:c4:96:e7:6d:b3:e2:2f:43:21:ad:
                    74:41:33:85:b0:19:c8:c6:92:8b:3f:b6:13:1e:88:
                    b0:b4:cf:35:bf:aa:4d:9d:43:bc:07:84:22:1b:ca:
                    e6:41:71:10:f2:2c:a2:12:2d:38:7a:a6:ac:5a:41:
                    5c:36:d5:6d:2d:a5:0a:42:2d:65:9b:4e:46:ee:64:
                    e5:2b:d7:4d:8b:3e:0e:a4:62:2c:2f:76:a3:02:b2:
                    b3:ff:14:cf:ec:ee:52:d4:f8:b2:c5:21:d2:18:6f:
                    61:d8:e2:e7:6d:89:01:fa:e5:c0:d6:00:6c:8a:7f:
                    6f:7d:51:39:d4:e6:ce:69:e4:85:ce:60:fc:66:ac:
                    67:67:4b:53:64:8d:62:ef:4f:ac:75:a2:fc:3f:e8:
                    bd:a9:08:29:81:46:f1:6c:68:ad:aa:9b:99:15:ef:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:08:17:83:9B:13:FC:2E:33:BC:77:06:D4:D3:06:5F:07:56:EE:07
            X509v3 Authority Key Identifier:
                keyid:10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:6f:0f:b6:0d:53:56:74:e2:78:49:41:9a:90:83:25:9d:
         5c:f3:f7:04:f9:11:46:d1:36:8d:1e:e6:18:e8:94:8a:bf:41:
         c8:07:4e:53:55:25:71:ad:47:02:70:85:c2:ce:c9:19:f1:10:
         c2:cd:41:67:d6:eb:63:3b:be:50:eb:b5:4b:1a:0f:de:c0:d7:
         c7:e8:65:5b:d9:2b:44:06:50:90:d0:b3:5f:68:d8:39:88:22:
         b6:b1:3d:0e:6d:c7:5b:47:59:a1:fa:56:ab:2b:72:8a:60:9c:
         56:f1:86:01:3a:5d:c0:99:b8:0d:5a:0e:48:2b:f0:bb:e6:40:
         3a:3d:e3:60:69:65:21:56:de:6c:6a:5a:52:62:1f:dc:84:8a:
         4c:9a:c4:ce:7b:27:76:8f:d3:89:6a:22:a6:25:da:02:d7:27:
         f9:9d:12:46:ee:2b:21:02:63:66:2b:ee:34:52:48:0a:3e:09:
         87:06:a7:d0:a7:c0:36:6d:96:ca:fc:17:1a:e6:16:bc:7c:1c:
         29:9b:c4:c4:f6:c1:9b:e3:12:e0:c4:a8:ef:f3:dc:f7:51:3f:
         bf:d2:2f:6e:c9:23:67:4b:29:c6:73:8b:a4:5c:23:f4:37:31:
         72:25:19:f2:e5:7a:54:b8:3b:0b:4e:90:68:84:41:2c:45:5a:
         cb:94:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----