Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
File:                     EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft (raw, json)
Hash identifier:          4r+Tx0yCxuK+r43iOd2VXDeNj0bPMogDSfuyu3NKjVw=
Subject key identifier:   60:85:90:35:51:7A:D2:76:AA:B7:B7:E8:7C:E7:0E:AA:3E:D9:89:39
Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
Certificate issuer:       /CN=11e512976b91a2967ebce10ed4052ece12b14155
Certificate serial:       01962E9988A1902A25FB4EEF9AF34916975D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
Manifest number:          0847
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl (hash: XoctD01kRWCkcWRSfJ5pjilJ03U8/pqRQUcN93YqPqc=)
                          2: cTTyZG3sGYW4--iA37L_e4KKCac.roa (hash: jAHavpEeqSxn7Wz6qgij8QBMxDH2bPHO8CwBbW3Q6eI=)
                          3: jOfgwbHFHsIIF0LL75vu6P_Fe8s.roa (hash: dWpwGB2a9oIdE7pk2wUUzH1wz99i3EaKumQo1e/dHRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:88:a1:90:2a:25:fb:4e:ef:9a:f3:49:16:97:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=60859035517ad276aab7b7e87ce70eaa3ed98939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:05:3d:d6:0e:97:b1:e9:0d:7f:a2:47:06:
                    60:7d:99:b3:26:bb:c2:7d:5d:59:1e:33:e3:f4:35:
                    ff:23:a8:96:8b:3a:ed:4c:91:8b:19:44:6c:cc:84:
                    0a:ae:6f:c5:4e:a4:be:97:73:ea:67:50:3e:61:30:
                    71:62:79:ce:e3:07:72:ff:4e:10:39:be:7a:6f:67:
                    bf:9c:1c:9f:27:1e:9a:9a:a5:f9:28:ef:11:aa:c0:
                    42:11:77:04:dd:ea:da:58:be:82:14:ba:f3:e8:e5:
                    c1:fc:2c:da:77:5f:da:76:27:fc:b6:ae:c4:98:3b:
                    5a:d0:63:31:88:66:3c:d3:9f:02:af:88:b0:24:11:
                    c8:7e:fe:21:7a:53:af:4e:1b:68:a2:d9:ce:89:a1:
                    1a:e9:90:c2:96:31:ca:7d:98:bb:81:b6:d4:81:88:
                    92:c6:48:8a:34:da:04:06:73:ab:c1:94:5f:13:39:
                    13:3d:4e:ea:fb:65:19:64:51:56:8a:51:75:41:b5:
                    7b:57:ff:a5:51:67:84:78:3c:d2:3f:4d:83:5b:74:
                    f3:a6:49:c9:2c:6e:aa:9b:ef:1b:b8:f3:f3:39:dd:
                    18:5a:42:19:81:e4:9f:fd:e9:ea:3b:0c:47:7a:93:
                    6c:8c:7e:22:f1:c9:68:b5:48:43:90:55:76:39:d0:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:85:90:35:51:7A:D2:76:AA:B7:B7:E8:7C:E7:0E:AA:3E:D9:89:39
            X509v3 Authority Key Identifier:
                keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:7c:ad:b0:b0:e1:b3:e3:9b:42:68:de:5c:93:77:71:28:88:
         3d:d2:70:8d:1c:49:ca:1a:5a:72:86:d1:80:f5:b9:45:d9:1f:
         97:e5:13:11:0f:ba:e6:75:12:e9:40:f3:dc:1d:09:52:35:8c:
         47:a2:ed:41:21:0a:91:22:6a:af:87:84:be:cf:9a:66:53:13:
         51:0a:f3:de:4a:72:6c:d1:b1:26:1e:73:9e:e0:ea:31:0d:33:
         44:7d:8d:3c:4a:3b:5f:aa:b6:68:b1:db:d4:aa:30:f3:08:1c:
         af:6a:35:8e:c0:42:81:e0:ee:e7:66:75:b1:8f:ef:22:00:73:
         64:c8:c5:b0:c6:11:96:f0:a8:38:b5:fa:43:29:08:de:ce:1d:
         06:3c:1f:43:d2:18:a0:07:30:2d:7f:f8:ea:1b:1f:c6:06:ac:
         f9:fa:76:fc:c6:ce:af:d3:44:5a:64:9c:0a:9c:06:eb:85:44:
         f6:2c:7e:86:56:ce:22:39:ed:e2:98:cf:7b:6a:4f:1e:14:72:
         3f:13:3e:00:67:96:02:39:d4:3a:d4:f9:b7:b5:f7:fd:b0:58:
         fb:24:88:e4:8e:8a:b2:c6:bc:40:36:b4:9c:2a:75:de:09:0d:
         2e:8e:67:11:e7:6d:f1:c5:15:73:1f:26:33:72:c1:2b:ed:0c:
         85:48:bf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----