Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File:                     EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier:          Vwn+fpL+8EPuag+20xZiN1Xg809LJlNb1YtQtkuv93U=
Subject key identifier:   28:07:1A:21:89:66:1F:29:AF:53:08:14:87:75:7D:96:E1:7C:3C:84
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer:       /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial:       01962E999709723438E0D3DC8F3BACED742A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: E0Z+oLuiZNf6w/Va5W7guqYfQP4pDUCMQnUq3S+s22o=)
                          2: UxsTUJ3i3bRyx6hBigKTh5V_pzI.roa (hash: hCyMOI3ro18CpyVh9ARwQzWK3Oa2vshWDEi2X+gYh7I=)
                          3: dzRXBpMe0hzBj6HJBEsWN5FaUlQ.roa (hash: n4IPgvg0KMpR1k4kw/tSH+SDBMVI+LIlZxHtSGDn0vM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:97:09:72:34:38:e0:d3:dc:8f:3b:ac:ed:74:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=28071a2189661f29af53081487757d96e17c3c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:68:5e:6b:aa:1b:93:fb:16:8f:f3:d5:ae:
                    59:7b:2d:28:2d:1c:21:77:d9:95:e9:7e:d1:1f:f5:
                    c4:7a:e1:7b:76:8d:63:29:9c:4b:cb:4a:de:87:ce:
                    9f:0b:b2:35:f3:aa:f6:6f:20:0b:bf:4a:7d:a4:e6:
                    3f:b4:e9:6f:4c:15:42:2a:ad:0c:17:d0:d8:6a:9e:
                    92:61:14:08:69:01:0b:fd:ce:be:9d:ca:5e:4a:d7:
                    94:d2:5d:46:5b:6e:88:91:3d:36:70:5e:08:54:79:
                    ba:dc:97:4d:99:4f:01:d3:4d:20:25:4b:79:f2:66:
                    c2:14:bb:35:57:81:e3:e7:69:f0:26:70:ee:ac:56:
                    64:80:2a:07:14:64:d7:1b:24:50:ec:c8:97:ed:34:
                    8e:ae:1b:1a:97:b5:cc:1a:d3:74:e9:5d:ae:74:ca:
                    2a:93:01:f3:91:fb:ec:03:76:2f:22:b5:9d:8a:50:
                    41:65:f6:d8:12:6c:0f:c9:f8:f7:47:04:7e:3a:13:
                    be:94:d0:12:cb:07:3f:39:a8:1f:72:b0:d3:cb:02:
                    a5:14:71:3d:39:34:79:95:52:51:ce:99:2f:41:c8:
                    ce:f0:a4:95:1f:7c:25:88:94:2b:8e:2a:46:1e:1b:
                    f9:c6:1b:13:7e:38:a6:00:5b:71:17:b3:08:88:d7:
                    54:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:07:1A:21:89:66:1F:29:AF:53:08:14:87:75:7D:96:E1:7C:3C:84
            X509v3 Authority Key Identifier:
                keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:1b:26:64:f0:75:1e:a0:57:ea:da:fb:5b:f0:82:8a:ab:
         d9:b5:9a:90:84:45:4d:e2:60:12:ce:83:1f:fc:0d:32:8f:98:
         f5:7f:d4:cc:e7:be:4b:e3:c0:3a:9a:6c:da:63:db:85:75:bf:
         1e:d2:21:b3:ff:a4:3e:98:8f:bd:44:5d:ff:f9:2a:56:ee:79:
         48:55:c1:e3:f7:19:3b:82:28:b0:27:4f:39:c4:06:90:f2:ab:
         2b:ec:ad:03:87:e7:5b:ef:c4:91:c2:83:e4:f5:a8:01:af:38:
         76:55:31:6c:aa:f2:30:0f:8c:ee:9b:cf:ae:87:0f:9e:53:46:
         2b:84:cf:d3:ee:95:e8:5e:bc:84:0d:48:a0:89:8f:5e:fa:c8:
         06:7a:2c:0d:06:66:bd:20:bb:e0:46:f4:03:0e:b3:16:b1:17:
         1a:b4:f0:f2:12:f8:90:69:8b:47:19:af:d1:05:06:d9:3f:15:
         25:b9:5e:c9:18:55:fb:e0:ef:de:1e:fa:82:f8:0c:2f:29:98:
         5c:0e:ae:61:a4:30:d5:09:44:54:3f:1f:f9:e8:da:29:d7:70:
         b1:e1:d2:e4:5f:49:fd:27:9d:62:30:f5:ad:6f:e7:0d:1a:c8:
         03:93:54:7b:e2:6b:aa:19:85:f6:04:99:93:17:8e:f9:0d:d1:
         a7:89:cf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----