Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
File:                     eooeg2-pIdKa-JxKbtagRQADkzw.mft (raw, json)
Hash identifier:          Qd/Z80bLgTQXAr9D0AuApB6xQsCigt3cADa3BzmfkfE=
Subject key identifier:   AA:47:DE:87:DC:BF:6F:AA:E4:19:02:11:F0:A8:4D:53:0B:27:EC:2F
Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
Certificate issuer:       /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Certificate serial:       01962DF3B610126D91107BE82692D79219C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: Y8nuK40q8gspzKEGKdATD4upfew.roa (hash: CdjEN/345b+LYc2PCW9vPxbHq+U9gwN+vvetp06PKuA=)
                          2: eooeg2-pIdKa-JxKbtagRQADkzw.crl (hash: 5QfXk8ZMSO1jZRaJFvamq51bzCEfpeq9klSxbEHc1aQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b6:10:12:6d:91:10:7b:e8:26:92:d7:92:19:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=aa47de87dcbf6faae4190211f0a84d530b27ec2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:4e:c8:36:11:71:bb:eb:5e:32:93:1e:04:
                    1f:98:a9:9a:66:3f:75:81:d0:c9:8b:b6:df:e7:33:
                    f4:71:c2:84:d1:12:68:44:33:9c:47:ff:ad:0e:e6:
                    85:64:34:2b:54:bf:31:e1:ea:27:74:5e:58:05:c6:
                    e4:24:e0:50:79:68:b0:de:25:7f:08:9d:66:a2:19:
                    bb:52:cd:17:8a:7e:79:e2:eb:57:4a:46:48:e3:10:
                    7d:28:74:eb:e2:5e:fa:85:be:bc:ad:89:d5:28:7b:
                    9c:8c:10:e1:5c:3c:c1:ed:64:37:83:38:9d:29:5a:
                    d5:55:c4:76:33:40:84:23:9f:47:1f:b5:ce:82:47:
                    8a:f6:63:f6:91:00:4b:26:60:da:3c:5d:30:28:87:
                    d6:e5:64:18:a6:5f:2a:8a:4d:95:ac:18:53:8a:83:
                    51:07:f1:da:09:a8:4d:bb:86:fe:f0:76:9e:f3:2a:
                    cb:14:f8:13:10:a3:45:d1:10:c2:be:2d:54:a1:78:
                    ad:d0:50:2e:7a:b7:f9:62:7d:41:10:4f:a4:f4:3e:
                    b8:d8:6b:e4:d3:da:e9:dc:af:3e:ad:9b:23:b2:7d:
                    45:61:01:a2:d3:ea:6c:6a:4a:d6:1d:86:f0:70:12:
                    4a:66:99:bc:e8:72:6b:78:14:55:9f:94:84:27:7f:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:47:DE:87:DC:BF:6F:AA:E4:19:02:11:F0:A8:4D:53:0B:27:EC:2F
            X509v3 Authority Key Identifier:
                keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:46:1b:cd:17:4c:93:03:80:d7:d6:73:33:f1:bc:4f:96:fa:
         33:52:ac:21:36:dc:08:d2:e6:e7:b7:b5:f6:59:4d:b0:a4:c4:
         d0:84:25:f1:2f:c8:7a:93:89:4b:fb:87:cb:5d:25:c9:38:28:
         96:55:f2:86:f8:4b:79:75:4d:2d:b8:35:f3:3c:2d:35:b7:44:
         68:ca:25:d3:f6:6c:29:33:4c:a2:75:e6:f1:7b:f8:1d:47:ff:
         eb:1a:e8:89:53:0d:bd:d2:2c:01:3a:49:0a:9f:cc:eb:71:cf:
         18:f6:12:f7:e2:2b:db:35:ff:4f:0c:58:48:f0:9f:7e:0c:ad:
         ac:6e:b0:37:f0:5c:02:0e:c3:93:98:f7:01:a3:74:0b:bb:51:
         44:c0:a1:28:23:9f:18:93:c4:f6:39:96:3b:d6:21:92:f9:9e:
         d5:b1:74:5b:14:8a:6c:6c:3e:27:df:8e:7d:a6:4d:fa:8d:2c:
         95:d9:89:ce:82:a8:e5:be:01:ef:14:78:3b:e2:cd:3a:27:92:
         da:10:16:de:ef:b4:f8:11:15:77:19:c3:e3:48:e6:b5:11:2a:
         09:22:9b:42:90:1e:1f:93:13:eb:20:68:3a:bf:bb:ed:15:88:
         71:70:d2:6a:a3:96:a8:de:32:31:bc:0f:3b:57:db:04:40:1f:
         9b:09:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----