Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
File:                     Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft (raw, json)
Hash identifier:          RtrWQk71t3AeL3SCDFacK5BytMclZMZDcDIlmIGni2o=
Subject key identifier:   B4:C8:74:E3:E4:71:89:B2:63:1E:1F:8A:70:85:D6:1C:E4:CC:8F:73
Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66
Certificate issuer:       /CN=11dd0ebff5ba38a8758b794d04d62905194a3266
Certificate serial:       01962F74C8A8B15FA9438899381A0248FEE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft
Manifest number:          0FFE
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl (hash: vYJ5tNbT89Ox6p6V56l3WfWc9Pvib9NIr4M+QtHeilc=)
                          2: HfwZH-0Lv6Ty3b-JyanUXRcRv4M.roa (hash: tXi7iyniS0PtgxKru69nf5MitATyW1mHStve5TknjLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c8:a8:b1:5f:a9:43:88:99:38:1a:02:48:fe:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=b4c874e3e47189b2631e1f8a7085d61ce4cc8f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:de:ee:21:c4:54:cf:b9:88:67:63:d2:3e:
                    a2:c0:81:c4:96:e4:2a:0b:da:5c:e7:98:55:23:c0:
                    5c:2b:2d:d5:ca:df:e0:f4:fc:ee:3b:92:fd:b9:0d:
                    a1:80:1e:4f:52:96:8d:15:1e:25:9c:18:0c:b9:a7:
                    45:2b:af:ae:66:24:2f:05:48:b4:1a:0e:c6:75:67:
                    c6:22:66:78:f1:5f:61:fc:d6:16:06:85:d7:16:53:
                    38:ae:03:09:e0:f1:c8:f3:a1:2a:f3:b6:64:30:fa:
                    77:6d:5c:f7:d1:87:fe:4a:6b:72:9b:37:58:a5:dc:
                    90:5c:20:37:10:15:38:5d:db:aa:b3:86:66:3e:9f:
                    42:45:f7:12:73:1e:f3:43:78:d0:eb:63:9d:b7:75:
                    91:8f:ba:65:48:7c:34:7a:47:0b:c3:da:a0:f9:d4:
                    0f:c7:38:e0:7d:c5:a8:03:1c:b2:16:76:a8:3f:93:
                    f2:67:10:ab:2e:12:e5:fa:73:25:3f:c3:92:11:a8:
                    f4:f1:74:f4:c4:29:36:1a:8d:08:b0:e3:ef:a1:a1:
                    63:6a:63:07:1c:c5:b3:ba:b3:5e:31:ea:ac:f2:14:
                    e0:11:cc:31:8f:03:be:95:1b:80:83:91:c7:fd:01:
                    b4:25:66:c1:5b:00:16:1b:97:25:f8:9f:d1:a7:49:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C8:74:E3:E4:71:89:B2:63:1E:1F:8A:70:85:D6:1C:E4:CC:8F:73
            X509v3 Authority Key Identifier:
                keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:24:db:29:5f:f9:1a:00:ee:bb:44:bc:36:6a:aa:ba:9e:9e:
         06:3a:4b:3e:75:71:75:62:56:37:83:f1:8a:8b:ee:ee:34:c2:
         1d:cd:6d:b8:71:5b:8a:df:e8:66:a9:d9:30:aa:bd:a8:1d:d7:
         36:bf:92:3a:84:11:a5:9f:e6:8f:f5:c5:a2:28:08:fa:84:25:
         e3:90:aa:9b:79:b3:00:2a:ee:be:46:6b:e8:e6:bc:79:fb:74:
         1e:81:5c:30:18:51:32:60:4d:5e:ec:5e:bd:7a:8c:21:ac:61:
         43:a2:db:72:2f:59:d2:46:bd:ff:9e:da:09:9f:54:b5:36:0d:
         8a:35:cb:79:85:1f:ef:d7:e0:01:5e:84:53:ab:62:21:0f:2a:
         da:ee:ea:2e:49:07:3a:58:fd:2e:ea:26:c6:8a:f9:27:17:3d:
         ab:e9:2b:20:da:4f:41:b4:33:28:de:ae:f7:ad:fd:37:8f:57:
         7a:80:a9:3d:8a:eb:c5:20:9b:3c:f6:47:d5:81:8e:c3:a7:9c:
         a4:b1:66:b6:06:de:ac:aa:fd:69:d7:46:e7:7f:fd:46:6d:40:
         be:ae:18:82:b1:d5:6c:82:ef:4d:35:91:e0:d6:68:18:c8:d8:
         c2:c1:8a:b6:9f:8a:ad:61:25:a7:c1:43:20:9b:e0:3e:2a:4b:
         6c:5a:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----