Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
File:                     EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json)
Hash identifier:          KHcbB9h3vmVmywote+GKKU54flE4/IYHTW7ImygcQI4=
Subject key identifier:   9E:C9:18:BE:F6:55:F7:FB:2E:17:75:7D:A6:F3:E9:4C:56:53:5F:D2
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Certificate issuer:       /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial:       01962ECFE1FD1ED3CB1BE6AC8B1E09BA5D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: lP0hFurmMER7HSBi2DkOvxmlVc/yGfsoBLw2mHJpiMw=)
                          2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=)
                          3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e1:fd:1e:d3:cb:1b:e6:ac:8b:1e:09:ba:5d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=9ec918bef655f7fb2e17757da6f3e94c56535fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:47:dc:d5:5f:7d:10:65:aa:3b:04:a9:d3:8c:
                    f7:6a:09:36:29:6f:0c:d1:ac:55:ee:3a:85:36:fd:
                    bc:61:65:4d:bd:e6:b4:48:6e:66:38:8c:f9:65:14:
                    ab:29:54:66:2c:d7:d5:ef:2f:61:11:9b:32:e9:e5:
                    bc:7e:e6:1f:64:86:3b:57:c4:ed:f4:d5:eb:a9:ea:
                    da:75:37:20:f9:c5:19:c6:e5:a3:21:d5:e9:f2:ff:
                    df:2f:ea:ed:10:d1:52:41:7c:13:df:67:42:a5:2f:
                    60:da:30:8b:ee:f0:fe:6a:a3:38:50:a1:a8:53:2a:
                    69:50:cc:89:d5:ff:12:64:10:a7:39:27:89:10:d6:
                    4d:1c:4a:86:0d:df:ee:50:6d:fd:64:a4:4a:fa:21:
                    60:03:f9:e8:80:13:13:96:0b:b0:0b:cf:e9:c9:ef:
                    8a:20:26:9f:8b:e9:48:9f:e3:5a:2c:92:20:45:14:
                    49:67:f6:23:7d:55:be:6f:63:c9:44:fe:54:8f:71:
                    bd:5c:92:ab:ce:d1:22:e1:56:71:80:66:35:ba:69:
                    37:c0:96:85:d1:b4:6f:80:1f:df:2b:95:d5:40:63:
                    35:79:7a:b2:20:78:64:da:2f:d3:d2:bf:d3:f2:8c:
                    01:15:ad:7b:5b:a9:89:23:bf:fb:5d:18:7a:2e:27:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C9:18:BE:F6:55:F7:FB:2E:17:75:7D:A6:F3:E9:4C:56:53:5F:D2
            X509v3 Authority Key Identifier:
                keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:36:2c:97:74:de:d4:14:e6:78:47:cb:49:d5:85:af:b2:cc:
         5c:c2:b9:32:a9:15:7b:cd:c1:45:2f:8e:91:77:62:67:68:97:
         fb:f0:3a:d0:76:6c:10:ad:11:cf:97:a2:f6:07:2b:d2:86:d2:
         1d:4c:c9:c3:dc:f2:d0:24:41:41:35:93:f9:c4:d3:63:e2:7f:
         20:b9:db:e0:5d:b8:45:50:85:f7:83:b0:9e:47:b8:9f:dc:59:
         20:50:a1:53:9b:6c:4f:80:67:6f:84:c3:ee:4e:07:6c:33:ee:
         99:36:4c:9e:ef:41:be:7a:5d:78:24:52:be:89:8d:71:29:4a:
         43:0c:04:5a:81:23:f5:4d:f7:ba:29:ec:14:6d:5e:d1:1e:19:
         c8:7b:58:7d:63:ab:58:bd:43:45:5d:a4:ee:59:a8:d0:84:8e:
         ba:23:88:cc:90:91:e6:12:8c:44:fb:f0:ae:eb:77:8d:a6:94:
         f3:12:d9:3f:b7:94:ea:ff:df:7e:59:3c:e4:6b:50:ac:fe:7a:
         f2:f6:c7:71:37:c7:41:95:56:c3:c9:3f:d1:22:55:68:f2:c6:
         f4:5a:74:44:8f:6b:9c:e7:5b:7b:6b:14:a5:35:db:25:2f:95:
         95:0f:59:12:21:42:b0:fd:20:5f:b0:ce:d1:96:f7:d2:1b:44:
         8d:a4:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----