Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
File:                     eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json)
Hash identifier:          vGNpsHqQ5EQqN5wVgU7EHyRsess1SpzodPErfn837KE=
Subject key identifier:   92:6C:4F:DF:6B:E7:76:C7:95:7B:1B:5D:30:8C:FD:87:0A:9B:FE:9D
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Certificate issuer:       /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial:       01962E2B27F474646AAF97819D3FB334E14A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: 3FcBSSiJh8aVrK9iYZdzbMgTqW4.roa (hash: 6RoiwnIQu/6s++wuEChPFYXGvNvnIKo47xh4stLwSlQ=)
                          2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: d2aQjwrYXA4tn2Eljmid3SuWe9uSnYMHiTWyh3MOkSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:27:f4:74:64:6a:af:97:81:9d:3f:b3:34:e1:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=926c4fdf6be776c7957b1b5d308cfd870a9bfe9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:26:dc:ec:02:8a:2d:83:62:f3:2b:e5:1a:
                    43:13:3c:a3:3c:a9:67:b8:d9:53:7e:d8:50:32:1e:
                    48:be:3c:fb:e7:9d:c9:f0:82:92:9c:e2:45:de:53:
                    2f:47:b5:42:dc:bd:3c:4e:f0:6b:9f:1c:a3:6e:eb:
                    59:26:68:6a:a2:46:e6:37:7f:9b:55:08:e8:78:fa:
                    3f:cb:c8:55:63:b3:16:64:92:e7:5e:3f:32:fb:7c:
                    a3:43:be:0f:86:c2:4a:04:45:34:5e:dd:c0:aa:88:
                    dd:b6:3b:ec:04:60:ed:50:06:03:e7:cc:44:da:36:
                    e1:cf:bc:6f:ae:88:05:3f:44:79:55:91:47:c9:41:
                    1f:5c:ac:6b:59:80:c4:b3:21:0a:fb:43:0e:21:15:
                    d4:ad:49:b3:0b:c7:f3:81:bc:5a:70:d8:f9:25:5e:
                    cf:ad:fa:dc:d7:02:ef:d0:af:13:c1:4c:fd:6e:bd:
                    90:1a:a9:4f:78:fb:66:8e:ee:aa:e1:0f:ff:5d:94:
                    a3:f9:65:5e:a2:b3:54:f6:e5:d4:e3:35:15:33:29:
                    17:21:7d:dc:e0:1b:17:90:da:6d:0d:76:3e:4d:7f:
                    4a:c5:a4:a1:00:13:ba:33:01:ce:a8:12:b2:e9:6a:
                    2a:83:14:67:2b:93:2c:89:15:6c:36:f5:17:7b:fb:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6C:4F:DF:6B:E7:76:C7:95:7B:1B:5D:30:8C:FD:87:0A:9B:FE:9D
            X509v3 Authority Key Identifier:
                keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:15:f2:43:e8:3a:0c:be:a0:6b:5c:f6:c8:20:67:02:24:43:
         6c:64:f8:58:9f:f1:67:34:d4:3a:ad:70:69:4f:3c:13:7e:af:
         3f:80:5b:02:44:b3:a1:6f:3e:f5:9b:20:5c:15:00:ff:44:52:
         7d:2c:6a:35:0e:52:00:1b:6e:e1:a5:92:3b:55:1a:37:19:c8:
         f9:ab:6d:76:c9:ba:f8:c0:e1:b2:6e:37:f0:45:a8:48:99:3d:
         9d:25:f5:02:6b:10:21:67:8b:6b:fc:4e:38:60:a7:09:b3:ed:
         98:79:97:1c:e5:a7:fd:ed:82:c4:09:2d:f6:d7:b1:15:94:44:
         95:c2:63:74:f5:2b:0c:d2:5f:8a:84:0b:5e:84:db:59:59:55:
         4a:a7:07:86:fd:a4:4f:2e:cc:cd:83:b1:d1:64:19:98:32:f0:
         e7:bf:f5:3d:b7:24:d9:5b:3b:65:b6:79:7e:21:78:55:37:c2:
         20:f1:0f:fe:cd:34:d1:13:b7:2e:65:ff:54:2c:69:c6:f7:fa:
         75:b7:c2:27:ae:30:58:0c:0e:53:74:2a:be:c2:30:4a:79:97:
         95:55:93:f5:18:0f:1c:bd:bf:83:f5:ab:92:28:b8:d8:7f:9e:
         45:b9:34:e6:2f:9f:ff:f8:c8:e1:4d:98:ad:9b:83:d4:39:83:
         95:d2:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----