Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
File:                     eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft (raw, json)
Hash identifier:          85xpNdldrZfwVHYWMx9E51OfBmQZtTO4+Zh3+QvLrqU=
Subject key identifier:   79:DB:C5:50:C3:B5:2F:12:D0:66:DE:C6:68:3B:F7:A4:A3:DE:3A:FB
Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
Certificate issuer:       /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Certificate serial:       01962ECFB71B58CD3269229BAF597A492158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl (hash: NnfTtVHlXBt3gCg3hAlIRCN4vVMTP1xfA1+cye+M6Gk=)
                          2: hpIZj1aNVGCRsSVDc00BaExDrD4.roa (hash: 8bGQ2/PFRjS1aWZOpnSHBKRNTQbhLOIjn95p+sx+IoY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b7:1b:58:cd:32:69:22:9b:af:59:7a:49:21:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=79dbc550c3b52f12d066dec6683bf7a4a3de3afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f5:26:d7:c9:21:10:1a:8a:bb:87:f1:a0:c7:
                    1b:55:82:3a:c8:57:ee:91:f0:e1:dc:bb:29:17:2e:
                    ec:0c:b1:bf:6f:97:b6:4a:08:98:80:19:d2:1c:d5:
                    e8:16:34:a5:a3:08:f4:1e:b7:30:c6:a3:0a:ca:77:
                    70:52:28:26:4e:ec:c4:6b:f7:0d:b3:10:37:0b:12:
                    51:7e:9a:92:0a:bd:13:37:4d:63:7a:47:e9:70:09:
                    f8:4c:c9:22:6e:a7:60:ae:ab:64:ac:9f:2a:ea:cf:
                    40:51:72:aa:1e:b6:93:17:e4:e5:33:57:1a:48:84:
                    2a:f6:28:13:78:57:69:16:1b:2b:04:78:d0:bd:23:
                    61:81:18:1a:c1:5c:7d:b6:4e:f3:14:09:db:1e:fb:
                    d7:40:7e:ee:a1:a5:48:d3:ea:95:bb:35:f5:4b:a2:
                    01:d3:ec:aa:31:30:6f:05:86:98:ed:40:1b:88:a6:
                    ca:2b:21:4b:85:9d:fd:bc:a3:f3:9b:c3:ee:91:97:
                    1a:45:b0:c5:9f:31:12:7f:10:c8:d7:b5:5c:4b:99:
                    43:f0:56:06:9f:77:87:24:9c:0c:12:86:62:68:95:
                    ab:ba:ba:0e:30:24:40:f3:51:5e:49:79:96:bb:77:
                    14:e7:f0:ac:dd:86:4f:b3:e4:86:36:f0:95:97:83:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DB:C5:50:C3:B5:2F:12:D0:66:DE:C6:68:3B:F7:A4:A3:DE:3A:FB
            X509v3 Authority Key Identifier:
                keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:aa:d9:b5:63:f9:6e:59:a7:41:80:75:7d:94:3e:75:e3:a6:
         f0:1b:46:3e:54:eb:70:84:5c:4d:f1:39:53:1e:cf:8c:38:d8:
         ca:eb:7e:f7:df:b8:d8:07:0c:c2:4b:93:61:66:b0:39:b5:6b:
         9d:0a:0b:eb:e4:2c:47:f3:8d:fc:f5:8e:b5:6f:2d:8c:71:47:
         c8:58:4b:88:39:d6:cc:99:a5:34:15:da:15:92:31:c3:5d:2e:
         d8:bc:f4:e7:ee:ae:27:17:39:20:62:23:0a:8e:a0:7d:5b:ab:
         82:09:ca:ed:08:71:38:eb:fa:5c:19:83:90:2f:76:72:4d:9c:
         8b:06:aa:84:30:39:e6:c1:45:81:b7:9f:87:30:88:aa:ed:48:
         dd:b4:0c:78:a5:61:15:4d:90:f3:50:57:d7:b3:08:de:4f:77:
         4f:0d:6a:ad:e9:96:2d:a4:2f:e8:20:2e:9c:13:0a:49:e4:24:
         36:7f:ef:a9:1b:59:37:c8:e0:0b:17:0d:3b:2b:47:94:5c:8d:
         9b:a1:7d:e2:7c:67:2e:c6:1a:18:dd:06:da:bf:46:ae:23:3c:
         9f:f5:ea:61:75:b1:01:7d:3e:f7:ca:84:82:bb:86:22:8b:e4:
         5d:dd:85:85:bc:a2:0b:02:17:64:a5:0f:2f:3d:61:37:56:d3:
         b0:fe:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----