Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File:                     epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier:          Y8wFn+kgLuIEc+ieCMfsgGGDDyaheIk9yf1M0BJJ5Rg=
Subject key identifier:   C3:D3:88:13:3E:AE:33:B0:50:6D:5F:F6:AD:BE:81:03:1C:46:73:B7
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer:       /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial:       01962E61796C0A337342291ED2454E088720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=)
                          2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=)
                          3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=)
                          4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: 1SIBMqgbPKIjSegaBCEBoKxVYmSsKYHP3llD8UB+uTE=)
                          5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:79:6c:0a:33:73:42:29:1e:d2:45:4e:08:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=c3d388133eae33b0506d5ff6adbe81031c4673b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:4c:62:d4:56:5d:3d:00:d1:8b:5f:7f:c3:
                    73:c5:0e:87:25:00:c6:94:08:b4:6f:94:03:ee:c4:
                    23:80:2e:5a:08:1f:5b:a2:d2:ec:e2:1a:29:a5:3e:
                    fe:1f:d2:8d:2e:b1:6f:17:26:60:4a:f9:69:f0:50:
                    cd:6d:49:17:95:2a:71:c3:ee:58:10:17:e3:4b:bc:
                    d1:5c:3e:44:2e:10:f0:93:31:05:79:8a:ef:72:17:
                    f3:cb:ae:83:e6:3b:80:d5:4b:7d:ac:ef:bc:2c:5b:
                    e2:0e:8f:bd:3e:18:d9:ee:d7:96:97:a4:39:4e:38:
                    56:32:6f:30:27:7f:d5:04:01:49:de:68:9a:26:47:
                    c2:d9:73:36:ba:1f:e7:7e:e7:2e:6d:86:00:db:65:
                    d0:2d:b7:66:d0:06:ec:3a:6d:8a:fb:d2:e9:36:26:
                    2d:31:00:cf:10:d6:0c:1e:78:f0:a9:26:2d:21:b3:
                    3e:a1:8d:79:50:56:f6:a6:42:c4:c3:bd:6b:6b:94:
                    11:ae:3c:1c:41:cd:20:0c:f0:3f:20:00:85:9e:70:
                    c1:29:60:6f:70:38:66:02:0e:21:02:b7:df:09:1b:
                    9e:c2:ac:6c:f4:70:17:ea:53:91:91:c7:d7:3a:09:
                    2d:fc:e2:bd:4d:7b:86:08:06:c0:49:af:ff:a6:18:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D3:88:13:3E:AE:33:B0:50:6D:5F:F6:AD:BE:81:03:1C:46:73:B7
            X509v3 Authority Key Identifier:
                keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:91:92:2b:d7:4d:92:37:da:06:6c:38:0d:41:b9:20:a7:e8:
         5e:2b:1a:43:2c:3a:ad:e0:da:fa:31:50:aa:34:96:2b:9d:03:
         90:a0:d1:dc:dc:18:49:64:61:d0:9e:ce:97:9a:30:64:dd:f6:
         d5:e8:5c:46:a1:6c:f2:40:85:19:a9:b5:2f:d7:c1:d8:da:a4:
         36:3e:68:ae:b2:99:b4:22:ed:c2:7a:ac:6f:b5:8b:04:93:01:
         78:f5:56:ed:62:d6:d6:87:59:fb:6c:30:a5:e2:2d:fa:3f:32:
         fe:b2:a2:b8:e3:2c:c6:3f:1b:9c:fb:97:94:71:5d:ef:9d:15:
         89:f1:8c:fe:0d:fe:f2:a4:2b:05:21:80:50:ed:d7:1e:7e:dd:
         b8:05:ab:cc:d1:75:3e:d9:01:fc:e7:77:92:76:c9:0c:2c:45:
         8a:35:44:60:52:7b:a4:92:71:d3:ad:99:f5:d7:23:34:35:3f:
         aa:dd:22:5e:18:a2:ad:62:e3:37:12:b3:f3:45:84:2f:44:89:
         66:45:3e:56:58:ca:df:d4:ef:d4:60:1e:47:07:8b:a1:d9:fc:
         49:da:0c:4d:5f:a2:ec:3f:76:1c:b1:15:4c:89:8a:08:ea:40:
         4d:a9:9a:1a:42:21:21:59:44:93:81:ae:2e:e8:85:39:2c:33:
         3c:87:8f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----