Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
File:                     meoF_mActoAa-DeT4GP3njlA8DA.mft (raw, json)
Hash identifier:          gBA4ixD6HB86bLnQKFtrYpWTwiJROHGNPip9ltHDQn8=
Subject key identifier:   8A:27:10:4E:F7:B3:94:E6:FD:59:7E:E8:CD:2C:ED:02:C1:ED:2F:9E
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Certificate issuer:       /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial:       01962F3D35C4CD66B192AE5FAD5542CF3D77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
Manifest number:          02EC
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: meoF_mActoAa-DeT4GP3njlA8DA.crl (hash: zE9Affh2FsufXjV22otfMFYCrpdSR82iTXK5V0twCcg=)
                          2: qehwZ-5ZPLbGxsJ5dw18WkoK3Zk.roa (hash: 8gjFPbJW7dVwtI9fHswSjjysn5cF6HSMFKylRSUUDrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:35:c4:cd:66:b1:92:ae:5f:ad:55:42:cf:3d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=8a27104ef7b394e6fd597ee8cd2ced02c1ed2f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:8c:7a:15:dc:b6:f4:98:dd:4a:c7:d1:66:
                    be:5e:e5:c8:9e:57:10:70:fe:dc:be:2d:6e:0d:95:
                    2b:b1:f1:2f:56:69:7c:7a:95:a8:b4:92:6f:8d:fd:
                    54:30:38:ee:d5:71:cf:c3:0f:8d:91:74:e7:4f:ca:
                    8d:60:36:59:11:52:c6:d1:cc:25:9d:0b:94:91:a1:
                    f4:4f:ed:94:f9:66:ee:98:34:03:86:6d:9e:fd:b5:
                    e1:fd:a4:49:bb:68:12:25:94:fc:51:de:92:87:01:
                    2b:cb:e6:28:64:2c:47:67:7a:00:68:13:8a:c1:05:
                    66:80:81:89:ef:df:05:da:33:44:a6:a4:e1:45:4a:
                    09:12:b1:8f:4d:45:e3:99:eb:56:e7:ab:56:59:e6:
                    e1:dc:31:2e:6e:fb:d1:13:f6:d1:c0:31:e1:2e:98:
                    3c:c6:71:45:30:dd:7c:c7:36:9e:7a:52:0e:28:4c:
                    17:49:7a:92:04:ad:1a:89:df:d1:a0:d7:1f:0d:0b:
                    5e:7c:da:89:3e:d9:1f:58:a5:3b:a1:a4:c1:0e:9b:
                    dc:2b:af:f3:5f:bc:cb:a6:97:36:76:6a:33:ce:9d:
                    b0:43:bd:d0:ab:0e:60:07:1e:5b:f2:8c:15:e0:11:
                    89:d4:d2:ca:de:7a:38:dc:43:25:76:f5:e8:a2:2b:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:27:10:4E:F7:B3:94:E6:FD:59:7E:E8:CD:2C:ED:02:C1:ED:2F:9E
            X509v3 Authority Key Identifier:
                keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9c:9b:0d:c0:2c:93:08:bc:37:0e:d7:3e:d1:69:5b:ac:5e:
         b2:23:26:9f:09:6a:41:47:06:d1:b8:99:69:29:9c:be:a0:08:
         83:23:21:c0:a1:0e:5d:b4:18:3f:ad:99:db:62:0c:5d:a7:11:
         10:73:cc:df:99:1a:19:f3:0e:79:4f:48:b3:f1:79:1f:3b:cf:
         f5:c3:d4:57:c7:05:04:0a:44:6d:d3:a1:e8:01:e6:25:a2:b5:
         b1:e7:9d:37:7d:d7:2f:f8:1d:67:23:b4:fc:99:a4:d0:21:e8:
         3a:cc:c7:f9:b3:68:23:51:47:22:b5:38:57:a7:5f:c8:ff:f8:
         4c:90:cc:96:b5:3f:b1:e1:4e:1b:22:68:e3:1d:a4:6b:df:c3:
         ea:1c:fc:61:6a:33:0d:da:96:f5:62:03:48:73:39:5a:b9:2e:
         7f:d4:f4:1e:c0:20:87:3a:47:87:95:7d:35:c2:fd:a2:dd:05:
         f1:6f:45:86:2c:de:25:d1:ae:a1:ae:c8:f6:f7:20:24:8b:1e:
         16:c2:a4:9a:e3:ca:8a:cc:3c:90:61:03:52:27:60:25:50:7d:
         3a:bf:f2:72:a2:36:a8:67:6e:b1:be:da:13:33:78:81:22:1c:
         69:65:d4:ef:80:fa:f9:87:2f:04:5d:d2:df:86:e7:40:03:17:
         91:fb:1b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----