Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File:                     EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier:          F0tMV9mttgfN2faMzCUzFem3qUvqVsDHkQr+O/KVoy0=
Subject key identifier:   EE:DC:2E:13:25:CB:16:68:F9:95:52:EA:EB:B1:02:18:CA:D2:61:74
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer:       /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial:       01962F3D45B0312DA2818FEE1DDE232F3F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number:          06E4
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 1-zD-VP--H8n0NROM6_MEnlnoArY.roa (hash: nJouFHvYIjsuEwuLWeuvNkKf+hqux6O1NRmsIOTPhUc=)
                          2: 1heB0YuNq-USGUveTj29qvEG1XU.roa (hash: 0NZHYUEHQ1C7qLoCH8KkLUBz6NfTEtAiQEDR0MzkAeo=)
                          3: CXfl0vZF1sbQq93reOXuNh2tfq0.roa (hash: ouJvYI4QUtdTBIQDtkd9tLF9CepiUn3okCMjYpiyZEI=)
                          4: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: Riii2TC0XYydCw1eIzDK/cyqrEMg7LOa6uIriJ7dE9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:45:b0:31:2d:a2:81:8f:ee:1d:de:23:2f:3f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=eedc2e1325cb1668f99552eaebb10218cad26174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fe:eb:51:a6:2d:bb:ee:6c:e4:a1:d4:61:66:
                    46:4f:fd:59:54:f2:0e:0a:bb:94:a0:55:37:71:e7:
                    40:eb:88:b0:f1:39:dd:a8:b8:ed:6c:f1:c3:a8:9d:
                    da:1f:ad:b5:1b:c6:67:80:fc:c9:c1:ca:2a:4e:08:
                    84:55:a4:67:8f:f1:19:95:8c:42:a3:31:cc:42:1d:
                    6e:e1:68:82:1a:d0:81:6c:0e:43:e0:2f:0a:01:3c:
                    2b:ff:97:98:18:50:30:40:c6:9f:47:0c:82:e9:bb:
                    90:ac:a8:ea:7c:3b:89:b3:cd:61:ec:98:46:11:5c:
                    d4:1f:e4:10:7f:49:1d:b4:51:2f:75:8c:17:ab:1a:
                    79:b0:f9:a2:ec:a6:4a:4c:8f:30:ce:6b:89:f2:93:
                    8c:f8:69:7a:4b:0c:08:ea:f7:31:6e:03:f3:ec:43:
                    fb:3e:6a:1c:d3:3e:83:4d:e4:97:25:62:dc:86:07:
                    87:80:a9:08:7d:f5:29:0f:d3:d7:4b:67:ed:e4:cd:
                    f3:17:0a:db:ad:c2:98:5b:f5:8e:7f:00:5f:bd:45:
                    66:b1:00:2e:15:96:a0:8c:fd:33:61:6d:22:a2:f5:
                    0f:2b:80:f9:3a:23:ab:2c:d1:4f:1e:26:20:07:83:
                    fd:37:9c:9f:76:a1:62:b1:59:92:ba:66:c8:61:d1:
                    de:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DC:2E:13:25:CB:16:68:F9:95:52:EA:EB:B1:02:18:CA:D2:61:74
            X509v3 Authority Key Identifier:
                keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:57:fe:bd:d3:7b:85:10:81:32:51:ab:3d:7b:de:59:ea:f7:
         d1:8c:ce:15:61:7f:25:94:ba:c0:a5:d7:bf:ab:8c:d1:d4:05:
         fe:41:59:0a:10:4d:c5:7f:1c:75:ab:4a:a1:15:4a:1d:bc:e4:
         07:d1:d9:ee:06:5c:e9:da:bc:b7:57:3a:fa:79:56:e1:7d:27:
         55:b2:81:b3:c1:55:6f:fb:56:7c:d1:c6:a2:33:8b:77:23:8d:
         dd:ee:ce:66:b4:1d:ba:79:ee:ab:9b:84:2f:8b:cc:f0:74:25:
         7a:25:87:ad:f0:b6:49:05:96:b2:f3:10:2d:d4:6f:7c:01:d0:
         30:b9:53:fc:9b:03:32:8c:fd:86:3b:b8:8f:88:f2:35:c3:67:
         27:a0:c4:5e:2a:49:14:ee:fb:6e:27:c0:3b:bb:d1:ec:ec:2a:
         38:c9:eb:70:41:1e:d9:0c:73:ee:e9:00:86:81:0a:5a:1c:34:
         90:f8:43:e2:83:c4:5c:f3:5b:5b:02:93:7d:6b:fc:a5:a4:3c:
         87:be:30:b5:cb:42:f0:cf:ea:19:9f:32:4c:91:5d:a6:e3:e7:
         f7:6e:5d:7d:71:27:dd:10:a1:e4:0c:42:7f:ea:28:19:ba:48:
         4b:3a:27:17:58:53:a9:19:84:71:4b:41:45:23:84:91:f2:c7:
         30:3f:ee:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----