Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
File:                     eYKALOcYMFkLJquplx4S9q4Y3O4.mft (raw, json)
Hash identifier:          bM5BNqCDDXEiJ+ML6WIyqq+zkj1loqBzDLHLWcUpj44=
Subject key identifier:   0F:50:B0:32:F3:B1:EA:89:01:4D:97:E3:8B:F0:BD:FE:50:3D:33:D2
Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
Certificate issuer:       /CN=7982802ce71830590b26aba9971e12f6ae18dcee
Certificate serial:       01962ECFCD1E7A6BCCDCFB0D650DD845F185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 4MQBhzW6p5UOyqP-hbDAFP6drKQ.roa (hash: ZKT/8JUqtRAisTydFecUdHw72JiTE01MYJo6LVg8rWw=)
                          2: eYKALOcYMFkLJquplx4S9q4Y3O4.crl (hash: hbvyRDDJCAOLAd2GstqSJiBWiKNQgYL1wYq0GKVfVik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cd:1e:7a:6b:cc:dc:fb:0d:65:0d:d8:45:f1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=0f50b032f3b1ea89014d97e38bf0bdfe503d33d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:2d:5e:a9:09:c1:fb:49:33:89:a4:68:27:
                    20:64:06:4a:09:2f:c6:a4:ae:a1:b8:ef:1c:15:44:
                    00:d3:49:7d:84:8b:b4:66:16:b3:c8:57:12:88:45:
                    83:8b:5d:4f:c0:47:f6:00:f7:a3:74:d7:ce:57:36:
                    40:e7:ce:ae:77:27:e9:ec:0d:8d:ca:89:b7:f0:48:
                    4e:4b:6a:9c:e0:ea:54:a4:16:7e:f7:b7:0f:5c:2e:
                    d5:7d:90:bf:6c:39:08:0b:c8:f4:60:74:25:ec:17:
                    c7:92:22:dd:22:30:1a:9e:bd:c2:5b:84:7a:0d:b5:
                    14:a1:4f:7b:d5:9d:0e:3c:d0:e1:c1:0d:13:12:95:
                    1d:52:54:1a:33:ca:03:81:50:21:d0:3f:1c:0d:39:
                    5a:2e:30:e0:f0:b8:ac:0c:3f:20:3d:6f:ef:21:92:
                    57:87:94:06:32:31:bb:48:b6:54:d9:ec:57:79:7d:
                    40:2f:bd:41:f8:ef:2f:13:ec:c1:48:81:1e:82:47:
                    f7:ea:fb:42:3f:be:50:81:05:8e:d7:26:e6:ab:41:
                    14:be:9b:c8:a1:0a:4b:74:ad:78:47:91:dd:3f:5e:
                    99:5a:22:f4:61:7b:70:d9:54:bc:1b:6d:c1:b8:df:
                    5c:db:7b:0b:5b:40:f3:3b:10:f6:51:61:ab:01:31:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:50:B0:32:F3:B1:EA:89:01:4D:97:E3:8B:F0:BD:FE:50:3D:33:D2
            X509v3 Authority Key Identifier:
                keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bf:81:af:be:cf:2d:2b:fe:a6:f0:0e:70:a5:4d:92:e4:97:
         e9:75:59:bc:ee:2c:9e:6a:8f:7a:b8:77:d1:a8:a7:3a:f7:66:
         b2:12:e1:22:e2:2b:c0:d9:8d:8b:d4:ea:fa:3d:17:e8:33:28:
         2c:70:76:72:07:15:8f:e5:cf:df:b5:e6:1d:28:db:12:63:56:
         23:97:60:e8:8e:32:55:00:b5:87:69:09:f3:65:0f:bd:13:4c:
         ad:43:2c:13:1e:92:40:5a:86:8d:b0:ff:68:9a:ae:06:3e:a2:
         67:25:1e:3e:44:d6:4c:f5:77:4a:95:40:b1:4b:a4:db:98:19:
         f2:54:1f:4c:a7:e3:5a:c4:6b:53:82:97:77:24:9c:7a:51:5f:
         29:bf:cd:b2:2c:c9:55:02:dd:83:3e:e1:08:a1:bc:75:f7:24:
         0e:a0:4b:12:69:66:7c:45:cb:b4:4e:d3:54:fd:a3:0c:88:4a:
         fa:93:41:5b:b1:3d:ab:ae:bd:62:02:c7:39:3f:ed:f8:70:de:
         41:8a:ef:cf:68:8a:e8:6c:03:73:53:4b:32:cd:8c:80:38:f9:
         27:a9:8d:47:0c:7a:fb:68:d6:a8:a9:00:e9:20:5a:cd:75:b1:
         75:2c:cc:b9:ae:63:12:44:99:48:c0:17:e2:96:27:22:76:91:
         0f:29:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----