Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft
File:                     ejClouMyTV5BJmf58pb1KvKXu00.mft (raw, json)
Hash identifier:          Igq+n4CZMYQV3cs3H+rk14vcodssmZZIF+unbnrLowc=
Subject key identifier:   E6:D2:E1:80:5F:F6:FB:45:7F:30:EE:42:06:B1:F1:94:1C:D0:4E:C2
Authority key identifier: 7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D
Certificate issuer:       /CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d
Certificate serial:       01962ECFA598EC8F4EE81FAE037033C1AFC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft
Manifest number:          08E0
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: 1-6iDPGf7DcWOOF8Xk0MfjYVDa_U.roa (hash: 6Eeuw1USF7e5maHoVBqaoYLNV7brdUnH0K/WXFWdKYw=)
                          2: ejClouMyTV5BJmf58pb1KvKXu00.crl (hash: 9wd6feMZN3SrgML/596OFlIYRiHOVhwZQ/D49Q+qE9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a5:98:ec:8f:4e:e8:1f:ae:03:70:33:c1:af:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=e6d2e1805ff6fb457f30ee4206b1f1941cd04ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:2e:48:1c:c3:61:d8:fa:56:d7:95:67:90:
                    85:cb:7f:46:40:69:d1:52:c2:c8:eb:94:d6:16:aa:
                    0e:af:7c:a8:79:fa:91:29:6a:63:93:d5:bc:b6:35:
                    23:e2:68:6f:71:fc:1f:47:b6:0a:0f:48:02:49:99:
                    54:56:94:84:f8:8e:91:7d:33:15:11:4d:da:4f:b9:
                    4d:61:5b:24:49:2e:3f:a2:f0:ee:a3:0b:8d:74:6e:
                    f6:1c:ea:06:4c:b7:72:28:fb:ed:49:b7:b4:38:62:
                    0b:15:f9:69:02:89:3b:2f:65:d9:08:39:59:e3:84:
                    3a:0e:33:e3:bb:e7:c0:4f:ca:c7:89:44:d0:2e:a8:
                    e7:a8:f6:bd:21:a8:f3:8a:e1:45:0a:48:ac:f5:15:
                    37:d1:c7:79:40:aa:f9:37:93:69:86:08:8a:b3:58:
                    54:0d:8d:be:17:b4:d1:48:0d:ad:2e:77:96:68:65:
                    7d:32:02:d9:aa:7b:0d:65:87:1f:61:44:a9:6d:d2:
                    ef:8a:07:fc:52:f3:b3:4d:bb:ba:11:b8:f0:fa:2b:
                    64:35:e5:95:47:c4:05:0c:0a:0d:14:c4:4e:35:31:
                    55:d3:4f:69:e7:fa:ad:49:95:99:b3:f3:4f:cc:45:
                    66:c2:c2:bf:ce:2d:16:62:0c:ab:fb:e4:3b:a6:9c:
                    32:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D2:E1:80:5F:F6:FB:45:7F:30:EE:42:06:B1:F1:94:1C:D0:4E:C2
            X509v3 Authority Key Identifier:
                keyid:7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:75:b0:71:90:74:a3:f7:a7:78:4e:67:c6:e2:62:d4:03:73:
         d3:cf:c5:51:c3:6d:49:14:41:8b:34:f8:75:1d:57:64:0a:b4:
         ee:e7:85:6e:6b:ef:e8:eb:40:fc:12:d8:d9:cc:48:70:53:6c:
         4a:e9:5d:6a:12:67:00:07:53:0e:e6:0f:c1:88:4e:74:d4:17:
         43:e7:34:a3:01:ad:dd:6d:f8:d8:34:25:03:a3:8b:d7:e9:99:
         b8:0c:d1:0a:33:bd:d3:e9:43:26:e4:f7:02:1f:25:90:b9:7e:
         e4:89:16:6c:f2:5b:70:a1:e4:17:be:15:10:f3:36:36:41:fd:
         82:94:03:49:a8:b5:d6:08:46:f1:26:e6:07:f3:bb:3f:75:cf:
         c7:28:58:04:3d:ce:32:0b:48:49:06:7e:ed:d7:7b:a3:62:7b:
         80:e0:27:c1:7d:5d:d2:f2:c9:68:d8:7f:81:aa:f1:1a:8f:81:
         30:57:b3:02:db:d1:f7:84:5f:ce:75:62:51:fb:de:95:b7:9f:
         04:b6:ca:3a:a1:dd:2d:26:c3:93:ab:77:9c:fb:34:28:d5:6a:
         ff:d2:81:ab:51:76:9d:6b:9e:8e:95:6d:39:da:10:55:8c:8c:
         84:50:58:dd:4f:b8:f4:52:64:4b:ee:4b:81:5f:e6:fa:b3:36:
         61:c5:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----