Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File:                     eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier:          Tr2CJIeG4EJoOqKMll8i7SPCxUFEBRHLQLOdF3Z2JOo=
Subject key identifier:   53:20:45:21:02:37:D8:51:16:7E:F2:E3:16:AA:0B:44:D1:3E:0B:60
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer:       /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial:       01962F071D10D5B00E22EA1B032DAF204560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number:          0358
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: EljCsQvYYixP6T5fNK0nTaqHgujBMx9vF3VFyFt1EP8=)
                          2: goX035Hv0elR2rCiATveFLxA4oU.roa (hash: HjIa5HxfoLHz1fNA8faR+9nXcT/qazkCcjt+nSvQMlE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1d:10:d5:b0:0e:22:ea:1b:03:2d:af:20:45:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=532045210237d851167ef2e316aa0b44d13e0b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:66:8c:b3:98:53:25:5f:59:e1:e9:4b:b8:
                    0c:bd:b6:5e:e8:9e:46:0b:d1:a9:12:3a:1b:8b:4a:
                    61:e8:37:66:be:d2:4f:4d:b2:b9:6a:75:8a:f2:35:
                    07:2e:26:53:26:e5:47:47:81:74:03:02:a0:fb:eb:
                    15:e1:84:3d:b7:78:0c:5e:23:2f:ef:dc:10:d0:4a:
                    08:71:36:b2:74:e4:cb:1a:37:a7:10:05:8f:4b:a4:
                    23:68:d4:56:88:7e:5c:44:30:ae:bf:50:ea:78:b7:
                    65:09:49:23:99:94:d6:eb:44:42:13:33:7e:9b:ef:
                    56:77:9a:12:7d:fa:1b:31:12:27:17:30:10:0d:64:
                    08:1a:ff:1c:50:00:ae:78:cc:66:b6:46:11:27:a3:
                    52:84:d4:d1:03:71:a0:57:24:83:7b:7e:ce:f7:0e:
                    f4:74:60:8a:a0:b2:c2:28:77:03:ac:7c:4e:a2:64:
                    b1:13:12:0a:da:88:8e:e7:16:e2:49:01:15:26:c2:
                    d8:6d:32:da:95:d8:43:f3:9d:6f:0b:7d:94:a8:3a:
                    ee:2c:bc:07:5a:1e:8a:72:b1:ab:b5:5c:24:11:1e:
                    f7:44:a4:e8:6d:43:08:3e:4c:13:98:9a:8c:90:b9:
                    57:5d:ff:79:ac:ca:8c:42:eb:62:e8:ac:e6:1f:b6:
                    5f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:20:45:21:02:37:D8:51:16:7E:F2:E3:16:AA:0B:44:D1:3E:0B:60
            X509v3 Authority Key Identifier:
                keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ef:13:0d:40:3b:46:2b:a9:d2:7f:a1:08:49:a6:2d:da:40:
         ec:f7:6d:f0:3c:43:eb:1c:4e:6d:5e:fb:ab:ed:fc:df:95:69:
         7c:99:8c:db:4b:7a:61:62:f4:03:6b:48:5c:e2:96:f5:c5:14:
         e3:12:a3:33:89:31:06:44:38:f3:3d:7e:a4:c4:6a:2e:99:e7:
         6f:52:6f:a7:11:2f:fd:73:dc:7b:f5:ae:b4:7b:ce:38:51:37:
         55:85:f4:81:d0:4f:aa:ed:3c:93:50:10:e6:a7:ae:38:48:04:
         62:0d:d1:c2:d6:c7:1e:fb:b4:ad:4f:33:f8:c5:27:76:bb:7f:
         eb:a3:2e:81:19:54:eb:76:4d:68:13:d8:18:4b:a1:6d:9a:f4:
         11:20:b6:ce:ac:3d:fa:f8:69:7d:9a:91:89:e6:12:d4:6f:f6:
         bd:ef:ef:ca:20:2f:20:10:21:3d:05:fe:29:7f:54:b2:73:45:
         37:73:40:d1:94:15:19:8d:7b:56:09:a4:56:db:be:2d:25:57:
         bf:33:59:25:79:f2:ea:1f:cf:c9:10:e7:f0:ee:18:be:3b:b8:
         ae:46:e2:1f:0a:e7:74:47:b3:5c:f1:71:a2:09:7a:a5:26:9a:
         9d:d9:c9:b3:7d:92:86:56:cc:b9:c0:6b:23:6c:cc:af:98:6e:
         02:4d:9f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----