Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File:                     egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier:          nJPY/94jLxnk3ILINnvDPtOM3P9O7flrMnxe7tTOSlQ=
Subject key identifier:   F8:3C:6C:A8:57:D2:4B:63:EB:DE:06:5F:22:58:F5:FB:FC:CA:D4:42
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer:       /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial:       01962E61B12B024CA6C1ADC6AB917D5217E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: RHlWpFi-cDo-cyvs-sRaiXiZbg8.roa (hash: 1PWadJWZ+l1enHDdWPnllLiQPr55+3WUCTN9xqnYDuA=)
                          2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: Thso2fq0Lx2ijl8P0UH+nTYebAiXnBaNkeubI3a/Ohw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b1:2b:02:4c:a6:c1:ad:c6:ab:91:7d:52:17:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=f83c6ca857d24b63ebde065f2258f5fbfccad442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:13:97:7f:63:f7:4d:39:d7:1c:6f:1a:cd:
                    92:8f:0c:ed:14:69:47:88:41:c6:07:47:9c:61:7f:
                    18:9e:74:36:7f:cf:17:0e:a5:dc:bc:6a:e3:9b:be:
                    a3:42:2b:4c:aa:c8:77:0d:8b:4d:ee:f3:b4:f6:27:
                    06:1f:c2:c1:48:d5:5e:38:24:fc:e9:d3:76:a1:41:
                    19:25:3b:c3:1c:d7:85:1f:61:83:68:84:8a:dc:34:
                    8e:9e:b5:fb:ee:9b:db:d9:58:7b:67:8d:5b:7c:3e:
                    7f:21:87:64:b9:c0:dc:a1:c4:d6:f6:4d:42:69:ee:
                    cc:3e:ca:56:4d:45:fe:2e:a0:ba:b6:1d:6f:96:7a:
                    d7:b9:18:1b:72:6c:54:d3:f7:b6:72:d7:8c:ae:ff:
                    22:e9:6a:ed:d5:a1:6a:51:42:c7:7d:de:62:6b:6a:
                    f7:75:b6:34:21:54:1b:b4:d2:1e:d9:4e:12:5f:3f:
                    41:65:1d:a4:e1:11:6f:f8:cb:5d:99:e3:7e:cb:38:
                    b5:76:cc:42:3c:2d:f8:37:af:b3:6b:b5:b2:e5:d1:
                    ff:09:ec:52:6e:3b:c4:6c:94:80:c6:40:e4:d0:07:
                    12:ff:dc:3e:34:57:fe:4a:26:d9:ca:f8:f4:25:6c:
                    6e:62:25:0b:91:5f:c3:47:39:c8:e2:0e:31:e2:43:
                    eb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3C:6C:A8:57:D2:4B:63:EB:DE:06:5F:22:58:F5:FB:FC:CA:D4:42
            X509v3 Authority Key Identifier:
                keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e7:bc:12:5a:ee:81:e0:e6:c6:92:06:1b:c1:1b:a9:bb:4b:
         e6:3d:c4:50:1f:f1:75:15:12:05:ff:ef:0b:34:84:55:1f:e5:
         ad:48:e4:a2:0b:4e:0b:77:dd:16:8c:2d:9f:43:f3:f5:93:26:
         38:f0:d0:f2:e3:fb:0a:87:54:ec:ac:38:4c:cc:94:61:a9:79:
         c6:22:2b:dc:a3:3d:f6:99:b0:5a:70:aa:cc:0f:4b:34:ba:53:
         8c:ed:21:6a:d8:8b:21:18:c5:49:5c:17:69:e0:8d:ed:25:bf:
         e3:26:ab:58:13:1e:d8:98:e6:dc:b4:31:e3:b2:a9:52:27:b0:
         2b:7f:ca:2c:58:d3:21:2c:94:b5:8d:79:03:07:6d:1b:88:f0:
         c2:fe:59:0d:4e:ee:82:4b:fb:c9:c9:ff:fa:c0:54:7a:5a:d9:
         51:28:f8:82:37:12:81:b0:a3:55:d8:ba:69:7b:d9:4d:bc:f9:
         73:6d:56:12:fd:51:42:51:d3:1e:f4:ee:0e:82:f4:4a:ae:f1:
         e3:72:9c:3a:8b:a6:ac:cc:0c:af:68:c5:1a:32:f3:0a:51:04:
         ee:62:64:fd:2d:ad:d4:07:5d:7f:86:75:41:6f:80:be:d3:e7:
         a1:82:e4:7a:f2:cf:79:82:2e:b4:8e:a8:90:e3:a8:39:c2:3c:
         f4:55:3a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----