Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
File:                     IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json)
Hash identifier:          HUo0i0av4ODYdpn4TS65zD4gABB74QaLfkgU1HBZ9MY=
Subject key identifier:   9E:59:8F:C7:7B:38:C5:D1:BE:F8:2A:51:C1:BA:8F:B7:C1:D0:5F:A7
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Certificate issuer:       /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial:       01962F742A0A5C0C5D5E35B562C6D1D432D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
Manifest number:          0598
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (hash: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=)
                          2: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: ysBnRm7eMQ8T7kBPPO4hhiEus18jF/FFSNioIErad4Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2a:0a:5c:0c:5d:5e:35:b5:62:c6:d1:d4:32:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=9e598fc77b38c5d1bef82a51c1ba8fb7c1d05fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:10:37:2d:e9:48:11:8d:69:d3:93:79:44:
                    fd:3e:26:84:64:0a:75:f5:c7:3b:e8:b5:82:fa:4a:
                    15:25:d8:0b:b4:35:25:eb:37:86:17:fb:23:63:2b:
                    85:44:39:31:b2:fd:52:4d:46:57:2b:10:d4:b3:54:
                    5f:93:85:06:2b:6c:66:b8:6a:a8:09:71:d9:84:b2:
                    02:ff:3a:07:18:3c:2e:f0:7b:dd:96:78:10:55:ef:
                    a9:b9:38:e6:91:e5:57:b6:2e:1f:bb:96:f2:26:0d:
                    c5:ce:bc:1b:91:bc:58:2c:22:59:2e:fa:2e:1f:77:
                    7a:e3:20:39:33:21:de:61:cb:df:fe:92:5a:90:29:
                    c2:9e:3f:ed:ee:78:c9:61:d1:26:ff:16:12:f0:ad:
                    28:c6:7c:25:85:85:eb:49:fd:d8:bb:7c:a0:6d:53:
                    00:62:cf:7a:47:8f:8f:00:be:66:4b:92:58:35:e8:
                    cd:f4:c9:d1:7c:24:d7:7d:59:f3:1b:f1:4e:48:0c:
                    d3:8f:e8:02:d8:fb:f0:30:0c:63:58:9c:2a:f9:e5:
                    5f:11:36:4e:09:8b:c8:a9:2c:3f:5e:fa:e2:8c:39:
                    fa:ee:3a:bc:1f:d6:3a:78:71:e5:c1:57:02:24:61:
                    87:63:9f:28:35:ea:e1:c1:91:cd:27:30:52:57:61:
                    46:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:59:8F:C7:7B:38:C5:D1:BE:F8:2A:51:C1:BA:8F:B7:C1:D0:5F:A7
            X509v3 Authority Key Identifier:
                keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:39:c1:39:e2:4e:3a:90:9b:0a:a9:64:55:81:32:e8:3a:ef:
         a4:58:00:ad:83:b4:41:4d:28:f8:7b:22:50:e4:dc:38:0e:2d:
         c0:5d:53:e3:bb:82:96:c3:6a:f6:d0:c8:b8:93:58:2b:77:61:
         fe:30:9e:03:d4:ca:df:8c:92:ed:a3:af:9c:8f:0e:84:8d:59:
         5c:81:b0:d1:8a:3d:87:76:2d:34:88:cc:d5:c9:6f:6f:11:b7:
         f4:1e:e1:a5:7c:4d:54:f7:b8:b6:d2:44:f1:81:0d:66:4e:8f:
         97:e9:d0:50:f2:74:fa:8e:f2:c9:35:b6:e2:54:fc:6d:5c:82:
         58:fe:e2:b3:1f:f9:f6:1b:cf:a9:dc:b8:fe:bf:67:aa:02:ae:
         36:cc:0b:13:2b:fd:34:a7:a2:78:9a:c0:08:b3:a7:77:d9:a2:
         c1:20:56:69:43:47:f9:25:f9:4e:fe:b5:f2:b9:f3:6e:04:6f:
         29:0f:77:2e:21:23:9e:07:bb:fe:cf:69:91:d9:6d:40:02:ea:
         5f:bc:5d:e2:65:47:68:b7:84:14:4a:41:9d:ee:38:97:90:86:
         6a:aa:ad:8a:92:5c:f9:9d:2f:f6:96:25:70:43:3c:5d:83:a9:
         1b:41:70:08:42:1d:5b:b7:ea:26:81:88:ca:24:cb:fb:a4:28:
         58:15:79:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----