Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
File:                     eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft (raw, json)
Hash identifier:          nz+NhhKftYkNn+1eDdHEkkdcf5zlI95Q+oqVDCvbr7g=
Subject key identifier:   E5:D1:4A:60:F5:0E:62:FE:B8:25:77:2B:ED:C0:F9:28:FE:9F:BC:79
Authority key identifier: 79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
Certificate issuer:       /CN=7946c5601064101b1b54cf5c6efcd407f17911b9
Certificate serial:       01962DF3A987A2D26E8D8F048EBD598B4D90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: c7GuDPd6K8Mw6TfxSKv8OUbqyUg.roa (hash: L3mZu6WxGNpKrVa630mczwqlZOlcgqKqthoD3BhJb+k=)
                          2: eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl (hash: t9TLcRj2TKO25QP9PKFntD8Jp2bfXNhYH+wR7ecp3h0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a9:87:a2:d2:6e:8d:8f:04:8e:bd:59:8b:4d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7946c5601064101b1b54cf5c6efcd407f17911b9
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=e5d14a60f50e62feb825772bedc0f928fe9fbc79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9c:b6:13:81:ae:b5:cc:1d:51:02:d4:15:9e:
                    66:e8:63:35:91:25:9a:aa:83:7a:2d:fa:54:d2:7d:
                    16:55:4c:a5:20:72:a6:e4:de:6c:73:4d:2c:61:74:
                    7d:fe:59:bc:cf:84:94:02:36:83:a5:e9:a4:b7:4d:
                    89:6e:86:7a:3e:e9:69:cb:03:e3:5b:3c:38:1e:5e:
                    b4:03:11:dd:1f:34:97:fe:94:6d:3f:93:e9:38:2c:
                    48:ee:19:97:82:04:99:68:89:0f:9e:5f:4f:7f:df:
                    f0:6a:5c:7a:d7:30:16:3d:00:25:c3:d8:3e:3d:48:
                    05:23:dd:33:fb:a2:84:2a:51:e7:44:c6:79:c8:2a:
                    45:ee:4c:47:1b:da:f3:89:73:26:01:48:21:d1:ae:
                    cc:e8:5d:8a:09:9e:d2:8e:5b:a1:cb:34:f5:3d:f0:
                    5d:3f:f4:05:90:8e:b1:4a:b9:24:65:92:ed:2c:31:
                    cc:1a:7b:6e:07:c2:ce:15:f9:e3:c9:0b:bf:92:38:
                    52:af:ae:14:f4:97:ab:a6:0b:d6:fe:98:85:81:16:
                    34:8e:f7:50:19:ad:bc:be:7b:12:d0:59:d6:f3:8e:
                    bf:95:fe:af:d3:fd:78:5c:f3:e9:09:9c:85:08:5c:
                    ec:cc:9c:11:f7:3e:49:c9:08:08:f1:06:4b:80:0a:
                    d2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D1:4A:60:F5:0E:62:FE:B8:25:77:2B:ED:C0:F9:28:FE:9F:BC:79
            X509v3 Authority Key Identifier:
                keyid:79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:8e:90:c4:08:73:82:20:a2:4f:2f:b1:ff:bc:78:bd:5d:
         d4:81:93:e5:e7:1e:b5:4d:cb:39:11:fc:1f:e7:12:6d:6a:ef:
         2a:8f:cf:e7:6d:86:9f:a7:31:e9:d9:46:f9:d1:85:db:19:9a:
         59:e9:81:3c:62:e9:fc:eb:c9:a9:d1:8b:b8:21:0c:f3:53:11:
         db:75:d6:d1:52:11:16:71:c9:d2:de:7f:a7:1b:ef:ee:35:9a:
         c5:18:65:69:93:69:ac:b4:3a:5b:9c:e8:b9:a9:06:e7:a4:1c:
         05:12:1e:50:bd:d3:3f:32:df:54:78:05:d5:5c:0e:48:26:a1:
         ff:a0:67:e5:a8:1a:15:d9:6e:4e:c2:b1:8c:e1:db:1a:e7:51:
         33:b3:5e:6f:5c:4c:51:b4:3d:30:5d:b2:43:a3:43:d7:ba:1a:
         ee:f3:9b:c9:44:5f:0b:1a:b4:50:e6:6a:8e:34:2c:87:bf:5c:
         42:9d:89:d4:82:3f:ce:0d:a2:1b:10:80:44:51:97:e0:b0:02:
         a9:fb:e0:b2:1f:a7:51:28:ab:59:7f:9c:fd:42:1f:81:ed:46:
         65:41:c8:75:2e:3e:2e:22:29:7d:20:ea:de:68:33:7e:5e:05:
         8c:6f:d4:a4:2b:fe:9a:74:8c:e7:25:ed:65:0d:9c:36:91:ad:
         d9:57:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----