Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File:                     EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier:          kuPmNZjPG570JIb9YzZ/2VK9Lp6HXYQ/TGbh9brHeRg=
Subject key identifier:   0C:C3:E0:03:01:60:C1:A3:CC:BB:B6:AA:A9:60:24:CC:08:DC:DE:4F
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer:       /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial:       01962DF3B12DA6EAFD0F8920C9EA96A6878B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: bxt1xTNlszePawxjc5rhDax0m4WJZrwR0ByByxhdetY=)
                          2: hUJ0JgMLTl6DaNpa_6-3XqSGCm4.roa (hash: 5zuqR91vkYspzPXhPdWjldTSLonIqkx5t3d++X9qoRQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b1:2d:a6:ea:fd:0f:89:20:c9:ea:96:a6:87:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=0cc3e0030160c1a3ccbbb6aaa96024cc08dcde4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:c1:13:9d:24:b8:82:66:e0:96:fa:14:b7:
                    a6:90:34:34:36:9c:32:d1:7d:e3:a4:fa:b6:97:43:
                    74:ae:8c:b7:21:ba:e4:f0:b5:04:83:f0:68:db:64:
                    c8:e5:c8:68:f6:a4:3a:d7:93:44:fd:94:35:74:18:
                    10:13:74:90:2e:29:13:c0:be:c6:e3:37:5f:1d:d4:
                    2c:54:4e:4f:d8:81:48:be:d3:36:90:56:e0:1c:8a:
                    9c:ec:33:97:5f:2c:08:cd:9b:75:d3:dd:97:83:05:
                    ad:d6:11:0e:bb:fd:c9:eb:b5:61:9b:74:cc:a2:4e:
                    90:fc:81:a7:46:a5:49:15:97:c7:df:a9:6b:b6:a8:
                    db:77:8e:f0:ce:7f:0d:92:e6:3d:a1:7b:bf:05:d0:
                    ec:ff:d6:f0:ea:79:8e:16:0b:f7:10:17:e5:15:70:
                    e7:0d:7a:5d:63:7e:90:54:72:84:3c:5a:19:49:e5:
                    1c:b4:00:5c:0f:cb:ab:c2:bf:68:72:ff:be:02:bf:
                    54:b3:44:db:0e:03:c6:df:0a:64:36:6c:4a:fb:1f:
                    eb:c9:fa:02:4a:4f:8d:6a:f1:95:4d:bd:58:aa:d2:
                    f9:0f:9d:0e:8b:a2:bb:32:c8:10:66:2b:a1:7f:74:
                    77:68:2e:d6:71:81:58:8d:02:04:08:ac:41:7f:15:
                    e8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C3:E0:03:01:60:C1:A3:CC:BB:B6:AA:A9:60:24:CC:08:DC:DE:4F
            X509v3 Authority Key Identifier:
                keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:67:20:6d:6c:e6:d0:4e:ba:6d:90:fb:a4:cd:7f:dd:90:e1:
         d5:53:56:9a:c4:01:79:1e:49:4c:be:cd:2c:70:8a:6d:80:30:
         1e:76:09:20:55:a9:95:68:f2:8a:4f:60:d1:c4:98:ff:f0:67:
         61:bf:a5:e9:95:22:96:a9:5f:66:85:da:ea:f8:61:d0:f6:a7:
         61:b0:25:cc:00:16:19:e8:df:ca:eb:0e:df:64:ff:d0:f0:7e:
         c9:26:d9:c3:4b:eb:60:82:f7:a9:62:3c:21:ff:d4:67:7b:6d:
         3d:a1:73:3e:21:69:11:1e:9a:66:88:22:02:7f:25:d4:15:d4:
         a8:66:15:da:8b:3c:4f:e0:58:8f:e3:49:96:0a:ce:b9:32:92:
         eb:c6:c4:89:75:b6:1a:9a:16:23:84:c9:5a:54:d3:e3:89:75:
         8f:4c:3b:17:8e:45:03:8d:8a:0c:a7:42:61:2f:67:0f:88:d8:
         f1:1a:71:6c:2e:ff:9d:c6:a9:f6:62:b6:d3:fb:71:97:79:b6:
         c6:4c:61:03:f0:82:df:31:c2:93:0b:ab:36:36:82:c6:f3:d6:
         fb:2f:cd:95:fd:a0:d8:67:68:38:1b:26:89:8a:bb:75:bc:8e:
         a7:f3:69:aa:f9:80:0a:a8:98:a7:ea:e7:ba:94:fa:91:cc:fb:
         3e:a2:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----