Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
File:                     eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft (raw, json)
Hash identifier:          Yww0uLS8JilQzzQW6OoKgZYR5vay4fPnkzUxUEa+Ck4=
Subject key identifier:   61:35:0A:E2:91:85:CC:EB:3C:70:CB:07:E4:84:6C:DF:C4:52:3A:E3
Authority key identifier: 78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
Certificate issuer:       /CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Certificate serial:       01962ECFA329447F2D8BCE5BAFF000131FA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
Manifest number:          05AE
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl (hash: 8Vy3coBkZlowksMRJeAryjuvbCiWSe6XvhDYmyg1gzo=)
                          2: q-rEMrzcCLKSVC0BBkFH6PEOzdU.roa (hash: Gog+17gwzclnNwGlh4/AMdyY5c+5OZ3UEQLglik+gVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a3:29:44:7f:2d:8b:ce:5b:af:f0:00:13:1f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c580769d521c89cc797ff699cacf0ba43da9bf
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=61350ae29185cceb3c70cb07e4846cdfc4523ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a4:07:66:ed:07:85:15:6c:3e:13:5d:68:a2:
                    66:44:97:0b:31:3d:7c:a6:62:d1:7a:cd:05:6f:5f:
                    52:9f:86:b5:57:06:a1:cd:c7:05:56:7a:2d:51:40:
                    f1:ea:e7:0b:a4:60:41:28:37:3c:f8:8d:31:36:4e:
                    f5:4b:22:39:3b:c5:5e:ff:9c:46:30:4d:0f:4b:73:
                    89:ae:c2:18:4e:d0:e5:c9:6f:41:b7:24:f5:4e:4a:
                    81:bb:6b:fc:ae:e6:8e:c9:2a:b4:0b:d3:e4:13:14:
                    85:b4:64:33:ba:da:92:23:5e:3f:47:37:54:67:07:
                    28:50:a4:5d:ab:01:ac:f4:95:ea:79:8a:f5:59:8b:
                    a1:58:01:e3:22:e4:f2:64:8f:b5:d7:2a:22:e1:e7:
                    f9:74:f4:88:f0:68:33:4f:84:ec:bc:16:b3:90:59:
                    48:d1:76:95:fa:49:9f:b2:f9:88:25:52:90:e4:9b:
                    48:f1:f9:90:8c:8c:27:ad:1d:9a:c8:0b:f0:36:3e:
                    fa:8c:b9:ff:f3:7a:64:0d:4f:3e:5a:40:cd:0e:5c:
                    7a:08:db:92:1d:df:28:ec:39:cf:6f:8b:6d:7c:54:
                    b8:b9:0a:d5:d8:fb:e1:41:16:30:67:4b:29:e0:54:
                    13:40:ff:37:55:2c:92:70:f2:a8:5e:b9:e8:3d:ae:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:35:0A:E2:91:85:CC:EB:3C:70:CB:07:E4:84:6C:DF:C4:52:3A:E3
            X509v3 Authority Key Identifier:
                keyid:78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:53:35:e6:89:a7:a6:ab:e2:b9:ea:9b:08:2d:76:30:70:0f:
         31:2a:d5:a6:2a:55:64:e5:a3:56:85:cb:8a:1e:7d:ae:1a:db:
         1c:fd:ee:aa:de:99:1c:5e:6d:f0:24:c3:60:74:32:7d:51:83:
         2f:8f:c8:35:ea:f4:93:81:33:1b:75:6e:c7:bf:a8:65:c7:e8:
         a2:b4:ca:62:d9:0b:3d:20:32:ee:f8:ef:01:7a:dd:6b:37:e4:
         6b:f2:47:9b:c2:c0:33:37:7f:3d:54:0c:a3:9a:44:fd:c2:0a:
         89:41:8a:e9:44:19:eb:b9:4b:06:65:78:c2:fb:f8:5a:1a:0c:
         87:dd:c6:34:d1:ed:50:21:16:0c:a8:b0:98:35:88:e0:32:24:
         ce:4a:db:62:bd:c3:10:0b:61:8d:d8:17:28:ff:d8:d9:54:2c:
         24:e7:74:45:99:b4:de:a4:e2:a5:0b:7b:d9:e2:f7:66:09:60:
         6e:bf:e5:16:36:fe:47:e0:dc:ca:6a:bd:b1:38:41:7f:21:3c:
         ef:38:7d:cc:95:99:b9:79:5e:89:1e:79:45:b5:62:b7:88:bf:
         ea:a2:25:bb:ad:b8:85:c8:93:44:62:f2:bf:ed:d0:00:21:b2:
         fd:1d:15:4c:f5:ec:3c:0d:84:d7:f7:d2:03:42:b4:28:2f:4a:
         32:85:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----