Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File:                     EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier:          xo+Sny1A5QqJl9OXaJah1cdBuW19PVI14fwNtnjgv8k=
Subject key identifier:   0D:55:A2:0B:40:E4:4D:A7:D9:FF:B5:D7:46:E2:18:15:7E:9D:38:C5
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer:       /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial:       01962ECF628C7C6608F555251CCF7990791E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number:          1441
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: ugCz2DY6c7RzY3Wk7CPyZJved4B3zPNPA71Xpl3sFSE=)
                          2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:62:8c:7c:66:08:f5:55:25:1c:cf:79:90:79:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=0d55a20b40e44da7d9ffb5d746e218157e9d38c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:b6:62:f2:2c:b1:dc:0b:83:33:e1:84:27:
                    e8:7c:4d:c3:cd:be:b0:d6:ee:81:b0:97:52:68:5c:
                    fd:a0:80:80:48:6d:b2:5e:11:bd:aa:e1:d3:d4:6b:
                    a2:7f:0f:a8:bb:da:85:93:94:e6:34:1f:ee:3c:36:
                    ab:4f:01:6c:a4:b2:f0:7d:6a:2b:ca:c9:5a:29:24:
                    e5:19:2b:c6:20:22:4c:39:c8:af:5f:25:44:72:86:
                    e3:56:96:83:d8:e4:fd:7c:8b:62:0b:ce:67:b1:07:
                    dd:d9:22:cd:03:a3:3f:a0:fa:04:aa:a8:24:1f:a0:
                    36:f5:5b:68:83:74:1c:b2:79:92:38:aa:89:40:7e:
                    ec:bd:72:f2:9e:b5:83:cb:67:fb:28:e1:1d:b9:f1:
                    19:49:b1:cf:6c:1a:17:08:92:d1:1b:34:d4:a2:19:
                    31:df:9a:0a:57:1d:5a:c3:c6:f8:0b:59:d5:6f:b8:
                    0e:21:bf:c8:c9:28:8c:af:71:43:f2:c7:f5:2e:27:
                    8d:48:73:b6:d6:fc:9a:f1:1a:7e:fa:93:be:0d:34:
                    1f:ad:a0:6c:a4:fe:51:20:9d:d8:c8:ca:9f:f4:0e:
                    c8:b3:bb:6c:fc:9a:9f:14:92:cb:90:2a:7c:8a:84:
                    f3:92:f5:29:ad:ab:9a:17:e4:12:8d:8d:20:94:70:
                    53:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:55:A2:0B:40:E4:4D:A7:D9:FF:B5:D7:46:E2:18:15:7E:9D:38:C5
            X509v3 Authority Key Identifier:
                keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:15:15:c3:12:11:d5:da:e7:89:49:89:2f:c3:6c:a6:99:77:
         12:31:85:a4:28:9b:c3:0a:c1:bc:1c:5c:1b:60:79:b4:fe:b5:
         f6:c2:cd:b8:3e:bc:0c:51:da:28:63:b2:ee:e0:7b:28:cd:71:
         4a:9f:55:6f:fb:03:72:10:fa:91:c5:2e:13:39:04:be:94:9c:
         61:6b:b2:27:a7:5b:e6:aa:16:8e:80:73:19:69:82:e8:66:33:
         ec:a0:66:30:0b:20:e3:5c:bf:5f:fe:e7:89:56:d6:df:fa:ba:
         23:a7:1d:dd:26:6c:ea:c4:e7:c3:c8:c3:ea:7d:64:96:5e:ec:
         a5:58:85:17:3d:ff:7c:0c:0a:3f:69:d4:87:bc:27:70:0b:8a:
         90:e0:d7:4f:80:ce:e0:2e:4a:c9:0e:0b:98:24:dc:0d:c6:ea:
         b3:59:04:0c:fa:90:98:21:6e:2c:d1:65:c8:ba:9b:c9:8b:d1:
         3c:cf:aa:60:64:f5:bf:62:47:17:01:fb:3f:1f:2c:a8:51:be:
         70:6c:6c:dc:09:f2:10:39:59:a1:c3:34:5e:97:b8:41:20:bd:
         0b:ee:bd:59:3d:00:5f:1e:fc:a1:84:61:3f:d5:c1:0a:70:3e:
         f2:21:11:ae:db:3f:4e:93:20:0a:6e:df:09:73:6d:bc:4a:6d:
         43:ba:65:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----