Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File:                     eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier:          JVfUtodUPAXe/XrJcL06PUvTwQPIgNnh9igWYwrljvU=
Subject key identifier:   6F:9D:15:1F:F7:E2:1F:0B:F4:D0:DD:D9:CA:96:4F:30:28:1B:95:F3
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer:       /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial:       01962ECFB035F387EB7827292E69C271B89F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number:          1148
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (hash: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=)
                          2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: 0m+ne1us2IU65HyFgHQ8KlDSLlRWTlbIV7Vcfnug5Hk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b0:35:f3:87:eb:78:27:29:2e:69:c2:71:b8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=6f9d151ff7e21f0bf4d0ddd9ca964f30281b95f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:aa:85:02:ff:4b:cd:8d:97:3b:08:70:cc:9d:
                    0b:af:72:2b:29:15:9e:f0:df:6a:a1:64:b5:05:28:
                    ed:e2:56:74:e8:10:b3:3c:55:73:6a:69:13:74:37:
                    fd:44:2d:fa:fc:35:ef:0f:53:fb:7d:ab:c4:d9:66:
                    43:b8:22:1b:ce:6a:5f:24:43:ce:46:ea:96:75:6d:
                    e7:29:f3:2b:f6:a2:27:8e:ef:a0:f3:53:d9:c3:f1:
                    8f:8f:69:1c:ec:5d:26:f8:73:c5:46:74:09:19:42:
                    18:7e:f1:81:83:6d:bd:5f:76:f9:56:78:c8:53:49:
                    a4:f7:5c:93:4b:2d:ec:89:ee:13:8b:69:1e:ee:aa:
                    a0:01:76:b7:c4:4a:fe:15:5e:11:ec:eb:94:bb:62:
                    09:e5:f1:f5:72:3e:eb:1f:e5:76:ed:95:9b:05:88:
                    11:63:a6:9f:9a:df:f4:41:68:65:96:7c:b3:0a:a5:
                    15:8e:b1:c1:fd:00:13:81:3c:5a:c5:7c:5f:29:58:
                    7b:91:c3:c8:1c:ce:53:ed:38:40:58:15:62:c4:a3:
                    18:cd:5b:94:fc:04:5e:c8:ac:28:ef:1b:9f:27:59:
                    46:f6:af:a0:b2:37:42:98:11:f4:34:b3:5e:60:fc:
                    13:bd:7d:9d:f6:ee:9c:71:3b:45:dd:14:3e:fa:a1:
                    c1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9D:15:1F:F7:E2:1F:0B:F4:D0:DD:D9:CA:96:4F:30:28:1B:95:F3
            X509v3 Authority Key Identifier:
                keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7c:bd:73:94:4a:9b:c8:96:93:f2:8e:5f:cf:bf:7f:ad:a0:
         4f:37:f8:2c:24:aa:ff:b4:bf:1e:e6:54:10:da:17:89:93:9c:
         80:ef:ac:85:8d:8f:27:45:3b:83:2e:92:ae:f2:ee:d9:b4:43:
         9f:55:67:96:82:6b:31:4c:4b:6b:a9:01:e9:bb:ef:33:7f:45:
         19:b5:9c:3c:18:30:58:2c:6a:77:c8:82:e1:71:4d:26:a2:ab:
         00:f2:24:60:fc:83:ef:f1:1c:cb:6f:b7:81:83:4a:4d:f6:0c:
         2d:9d:c2:65:bb:31:39:8a:6e:f2:46:35:76:47:4c:6b:99:50:
         5b:06:b3:53:2d:b4:4b:c7:73:82:ef:da:30:57:de:63:a9:07:
         db:c0:e1:03:fc:38:ff:47:61:d2:4e:6c:01:cc:e1:e7:42:dc:
         f3:43:db:5a:2f:10:e9:60:da:de:f8:c1:cb:16:c4:37:52:4f:
         ff:89:45:d9:14:ca:76:17:45:16:1d:77:ec:7a:aa:3f:f1:c4:
         ce:26:7c:f0:a3:70:cc:0b:a4:93:a4:e1:36:5d:20:c7:c0:4f:
         16:24:e1:f8:d9:43:15:e6:8d:fb:81:4a:e8:38:fb:93:1a:13:
         f2:c0:bf:7f:d7:3f:fe:37:dd:18:ee:c2:2a:5c:5c:f1:69:b0:
         36:54:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----