Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File:                     p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier:          N7KbXFheKNBhOrVcBZkoAo3ZlZ3LBDpPD4U4MkSh59k=
Subject key identifier:   98:D7:D0:24:3F:5E:61:7F:DA:93:67:CB:66:43:06:23:07:D9:04:62
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer:       /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial:       01962F3D4BDD67CB675C7F0A185B0DF72D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: OgYJc9A280CynujJhuzMa0BI-4Q.roa (hash: MiNQpI1WP7M4DChXTEl99hg+v/DrVYZq8o6Yc8vjTOw=)
                          2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: EkZnapPvet55EN3KzYFT1CrvholPcYAkxqFh04EwgQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4b:dd:67:cb:67:5c:7f:0a:18:5b:0d:f7:2d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=98d7d0243f5e617fda9367cb6643062307d90462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:37:b0:50:04:38:cc:ea:d3:58:3a:ef:29:
                    7a:65:47:fe:5d:70:2b:b8:ed:ae:a0:de:94:97:7a:
                    96:36:f8:08:66:86:68:9a:9d:82:c0:05:20:de:0c:
                    be:af:dc:dc:2b:e7:d6:bf:08:40:27:11:a4:6a:82:
                    4c:3e:5e:52:e2:c6:04:6e:d5:21:e3:45:9b:58:15:
                    23:75:70:2f:8b:51:b2:5f:55:ef:78:53:cc:55:42:
                    a8:e8:6f:51:4f:09:13:a1:eb:6f:f7:a7:fa:85:74:
                    b9:ca:bd:d6:2a:5a:81:5a:98:71:17:8f:de:69:b0:
                    e0:cc:b3:9c:fb:d6:e2:c4:d4:1f:35:77:14:82:0e:
                    5a:73:8a:d8:97:13:86:8b:24:11:fc:15:01:85:00:
                    5c:d1:e6:a8:71:be:b8:65:cb:fb:4a:60:56:3f:57:
                    cc:e9:2f:7b:84:47:82:7a:b7:7f:75:14:13:05:c4:
                    27:7a:03:e3:e3:35:cf:e2:e1:c3:6e:ec:1a:0b:af:
                    71:54:b4:ab:96:0d:e6:86:22:ba:c9:da:f2:ae:85:
                    cd:06:a0:73:84:8c:18:65:25:dd:30:44:1b:13:ea:
                    b7:b2:4d:60:f8:5c:ab:87:79:b7:68:91:a5:72:a6:
                    e9:92:59:bc:43:d4:55:d4:4d:99:8c:2d:17:14:f1:
                    7a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D7:D0:24:3F:5E:61:7F:DA:93:67:CB:66:43:06:23:07:D9:04:62
            X509v3 Authority Key Identifier:
                keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9b:1b:f8:ab:bc:ee:26:ca:9d:ef:2e:d2:81:c8:b3:77:43:
         3e:a8:03:91:41:20:2b:98:57:30:5d:a7:4f:65:df:46:28:65:
         c6:23:f3:31:8a:aa:ed:6f:5f:86:a4:3f:85:ea:12:cf:00:4f:
         9b:58:1d:3b:a8:57:b6:c1:e1:16:44:66:12:41:6d:87:18:45:
         46:9e:c3:18:c6:ba:2f:80:16:69:f3:2d:99:59:b1:39:de:e3:
         96:e7:79:20:8d:49:06:6b:e7:07:ea:ac:ef:18:85:b7:65:a1:
         7d:70:0b:f2:99:90:47:85:3b:56:27:0e:0b:06:70:e6:cf:bd:
         d6:29:ea:93:24:b4:52:90:10:b3:18:5e:87:8a:cf:ac:af:14:
         3a:08:c8:c5:c0:ee:b1:0b:da:f1:e8:c0:e2:f5:62:fc:6e:b4:
         fb:3b:01:69:71:88:e4:6b:3f:4f:9c:3a:4a:ff:d1:75:1c:76:
         56:4b:c2:51:12:5b:92:9f:f5:e6:05:8a:e6:08:b0:51:65:89:
         35:81:a3:f2:31:68:57:1c:9d:db:07:da:31:82:55:52:d0:89:
         c1:c3:c3:9c:57:51:9f:24:7b:cd:9c:b8:3d:d7:a7:c6:40:00:
         5d:8c:83:2e:cc:f5:22:bf:e1:65:05:bd:88:d0:6f:62:f0:e7:
         d6:37:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----