Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
File:                     EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json)
Hash identifier:          Uvhyvc2BHk2/fpjB8Kzc8aP7raHf700OEqBFRPY/7sQ=
Subject key identifier:   71:DF:24:21:20:88:35:95:9F:69:76:E7:7D:83:34:EB:11:40:DC:C9
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Certificate issuer:       /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial:       01962E618B725F7176EF8D1AA4C5BAC60798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa (hash: kUuxta0XRa7yb0HEixw+uuf8XCvxWMdYZeBDo94C8E0=)
                          2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: F5n541rU6L8pIdkyMsVZnwB3hI/ein+a5+eQOhTLjC0=)
                          3: HR1TJcG3AG_suefNVvv2h1y7jts.roa (hash: jl46NDl1eD+3H3yNjUjUt9A4Z+9o/63LKae5rqNmZI4=)
                          4: NPdgFAHmLUivnqi_jKGLcf-eR6s.roa (hash: lyXDI/2uyuN/2SVygi6pKbWm/KX0jVuyMLVeMsTB1NY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8b:72:5f:71:76:ef:8d:1a:a4:c5:ba:c6:07:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=71df2421208835959f6976e77d8334eb1140dcc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c1:44:bd:6d:51:0a:f4:43:3b:76:44:02:0a:
                    ad:c7:8d:b1:6d:9d:9b:16:a3:82:cb:52:c2:de:b2:
                    d4:b9:df:cb:e4:c7:a1:d4:d7:05:7b:3d:5f:d0:9c:
                    6c:09:eb:d5:fc:07:74:7c:11:c1:4e:5a:b5:aa:3b:
                    01:bc:2a:70:24:94:79:e7:e3:a4:dd:a3:f8:30:2a:
                    9b:6f:d0:45:47:43:c6:ac:8a:40:da:c7:4a:eb:21:
                    fb:97:5e:b4:64:d7:2e:40:6a:03:9b:9d:6e:53:ec:
                    39:4a:ef:ee:ce:d6:a8:d0:95:fe:c3:08:d0:bb:16:
                    d9:56:07:73:9d:e5:9d:a3:4e:93:9f:73:8e:b8:4d:
                    46:af:15:1d:d4:8c:b2:47:93:c7:2e:c0:4a:ed:8b:
                    16:ba:2d:ab:a0:69:a2:39:4e:91:66:35:eb:ed:26:
                    b7:1c:48:8b:9c:c6:47:ca:36:ce:a5:24:90:e9:a1:
                    b2:41:f6:67:54:1e:0b:80:bd:41:f8:97:80:f2:ae:
                    1a:b0:52:62:ee:ac:a0:ca:61:a3:bd:a3:e3:92:09:
                    42:03:02:dc:96:07:13:0c:10:26:d2:1a:f6:5d:e8:
                    2c:6a:85:f0:11:9b:88:e2:04:d9:c5:74:d2:da:b3:
                    d5:a1:9b:a7:48:38:12:de:d7:2d:9b:40:9a:36:93:
                    2a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DF:24:21:20:88:35:95:9F:69:76:E7:7D:83:34:EB:11:40:DC:C9
            X509v3 Authority Key Identifier:
                keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0c:b0:66:e5:eb:81:6d:02:8d:ff:de:6a:1b:f6:cf:52:e3:
         57:88:3d:8a:53:8e:6f:d0:7d:59:12:bf:81:d6:bb:28:c0:a2:
         09:94:de:f2:91:49:fe:44:31:2c:c7:fc:6b:60:b8:d6:90:60:
         9d:b5:e1:a3:b5:2d:9d:cc:29:a6:88:74:ab:1d:26:1e:c2:f5:
         91:e7:34:f5:05:5d:ad:d2:2c:aa:75:03:94:e7:10:ca:c8:d8:
         45:96:af:1f:3e:c6:32:e3:ad:52:aa:56:4b:83:42:06:6f:88:
         96:45:90:22:e5:a1:95:d3:ab:8e:b7:fb:09:b5:65:1c:7c:26:
         27:1e:d1:0e:d1:63:d0:e4:d1:73:55:68:21:a5:52:79:a0:19:
         97:f5:5e:fe:e7:be:b9:fb:43:2c:06:f1:ce:e5:85:ff:a6:a8:
         d7:af:79:55:6d:1d:17:ac:04:d4:8a:20:b2:c7:d6:ff:38:38:
         c9:f0:ac:76:36:70:4b:ee:ff:33:81:54:6f:48:f1:82:b3:5b:
         22:d1:69:93:47:1c:9a:96:b5:fe:c4:6d:e8:d1:56:67:4b:91:
         f6:c2:bd:4a:19:51:94:55:8d:f9:9d:65:43:08:78:d0:d8:3a:
         6a:3f:58:a4:ca:a7:c2:77:ae:87:1d:c1:72:b2:2b:06:c4:4e:
         48:83:59:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----