Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
File:                     EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft (raw, json)
Hash identifier:          sxjWynqaMLG/3aTa5pOcm5VYdTS1csOKweLRP+6k2wU=
Subject key identifier:   22:05:37:2F:45:30:14:51:9F:8F:7F:B6:86:C1:A6:2E:6A:52:24:C7
Authority key identifier: 10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3
Certificate issuer:       /CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
Certificate serial:       01962F3D4D7E32AD14C85C86A5AD9DB7AB11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl (hash: Ssl0XI63D3Azk43ehCqqKLzwYwWvAC2KZOo8yabteME=)
                          2: WzbX2TdxGbXI_9q_gLWgwyGlxMk.roa (hash: 5pY3qGQoynaLtjRYUu9PW5osvIxNFNqy+79Pc3CkOzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4d:7e:32:ad:14:c8:5c:86:a5:ad:9d:b7:ab:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=2205372f453014519f8f7fb686c1a62e6a5224c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:dd:ed:5b:0b:ab:f4:39:93:4d:b9:84:e7:
                    49:cd:5c:e3:e3:14:1e:7f:73:c5:90:fc:b3:73:df:
                    0b:ee:4c:2c:e8:8c:a1:f4:f1:23:8a:c6:8d:40:1e:
                    d4:da:73:6a:d5:f6:ef:85:80:e7:88:cb:52:12:60:
                    76:a5:7b:28:3f:a6:48:2b:63:e4:17:fa:0c:71:7a:
                    86:85:5c:bd:84:4d:d5:ea:a9:74:3a:f3:3e:43:90:
                    9b:2a:a6:cd:ac:6c:b6:2a:16:73:f8:76:73:3d:87:
                    fa:c5:45:d4:91:2e:d8:ef:ff:2a:8f:d8:fd:6e:f6:
                    db:34:e3:91:95:8c:9c:b5:1b:cb:ed:34:cc:05:62:
                    f2:59:ac:aa:85:f7:98:81:57:44:e2:08:e1:f7:52:
                    b5:0f:86:b9:db:1d:8f:bf:2f:e8:cf:91:fc:2a:2c:
                    81:14:d9:8f:e1:01:be:a8:4e:47:16:6c:fa:9f:c0:
                    e9:02:3b:5e:67:12:16:16:76:ac:b4:07:ab:cb:67:
                    24:eb:31:97:8f:4c:d2:50:0c:2b:b1:0b:00:63:d9:
                    46:3c:a3:2d:47:72:f3:2e:68:34:c5:b8:16:c3:66:
                    e6:08:cf:39:23:dc:34:d0:1e:5c:50:e8:b4:2e:e6:
                    18:33:0e:f1:e7:13:c8:60:88:8d:0f:f8:aa:9b:9e:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:05:37:2F:45:30:14:51:9F:8F:7F:B6:86:C1:A6:2E:6A:52:24:C7
            X509v3 Authority Key Identifier:
                keyid:10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:3a:96:0c:6d:e9:08:7b:b4:02:54:42:ae:b1:19:53:05:d5:
         26:50:d5:4b:95:5f:b4:9f:09:d2:96:c4:03:d9:ac:04:8d:8d:
         2a:cb:cb:37:9e:fb:6b:21:10:93:9f:45:2e:fc:b2:bf:34:00:
         3a:6e:87:b2:e5:36:32:69:11:06:91:c5:81:70:05:ee:9e:6e:
         55:1c:b4:84:cb:d1:7c:03:d2:8e:b0:fa:ea:47:3f:db:f4:b1:
         e8:5e:89:2f:c8:9e:67:b3:3c:15:0e:8c:d1:fe:ac:f6:60:a2:
         94:4a:e0:93:77:40:13:95:1d:39:ca:e9:2a:8a:ae:d0:a6:81:
         fd:54:dc:1f:ec:16:23:4d:b5:51:f5:fb:1a:80:13:c5:11:06:
         82:d2:ef:1d:e2:e3:f1:34:72:c6:8b:6f:2d:eb:c1:6b:2a:8f:
         9b:c9:7e:f4:4f:88:96:4f:8c:e2:64:26:99:0d:dc:b0:0f:6d:
         00:93:5f:3c:4b:21:1f:31:af:74:d6:1e:8a:81:7f:6c:25:db:
         13:b9:44:91:aa:2e:fa:f9:c6:14:7e:04:73:84:22:62:49:1a:
         76:5a:fc:52:c8:66:19:61:b3:df:24:4d:f0:8e:55:11:2d:4a:
         f9:5e:41:b2:87:0e:e8:0d:79:e1:11:2a:91:d1:86:e0:f5:6f:
         b4:06:88:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----