Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
File:                     EIOmQReWv3Jjh_elXPhLV8qJm-s.mft (raw, json)
Hash identifier:          ubak+Xtm4zvPTKCvvkCX6U/VEOEyNNK4JwUWia6sHyc=
Subject key identifier:   02:6E:11:90:65:8B:25:2A:C8:C5:AE:FA:43:DE:6E:97:34:70:C4:AA
Authority key identifier: 10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
Certificate issuer:       /CN=1083a6411796bf726387f7a55cf84b57ca899beb
Certificate serial:       01962F7431BA7DF77DD41DB469CC6C1D4585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
Manifest number:          080B
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: 1eXto-EsRD2_BRDc9smA9RA0iPI.roa (hash: g1hRvTrzsnVFScKTJJdFlUgNjwgiZOniAlwWxxAKEuA=)
                          2: EIOmQReWv3Jjh_elXPhLV8qJm-s.crl (hash: QihYsgQ+EIvRgMB+IqCabDNDY5KO4/gQkkOgP/YvzHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:31:ba:7d:f7:7d:d4:1d:b4:69:cc:6c:1d:45:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1083a6411796bf726387f7a55cf84b57ca899beb
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=026e1190658b252ac8c5aefa43de6e973470c4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:87:b5:fb:e6:b8:b6:7e:0f:3f:0d:6e:fc:69:
                    89:46:7e:ba:b8:0b:cf:da:ff:ab:f0:44:e3:7c:ad:
                    9a:8f:4f:82:9d:b2:e3:fa:6d:72:45:f8:8f:c9:aa:
                    94:72:aa:38:2b:82:6d:10:3c:b0:a8:0d:44:fb:f9:
                    cb:4f:28:76:92:5f:a2:bf:0f:36:73:97:8a:6a:62:
                    13:2b:4a:37:2d:b0:dd:df:bd:de:05:12:c6:87:a0:
                    2b:82:8a:44:8d:6f:5c:17:0d:c1:b6:cd:c6:bd:d9:
                    71:c2:14:58:94:bf:7f:a8:3a:11:fd:b6:a4:84:d7:
                    66:a1:9f:34:b6:ce:ea:a9:81:b8:1c:fe:b9:97:83:
                    64:fb:06:2f:1d:40:5e:56:89:e4:7c:fb:bb:ef:90:
                    be:c7:6f:12:8c:b3:69:3e:06:35:3b:3f:7b:08:4b:
                    e7:c9:43:e5:e5:8d:15:58:ce:cc:f4:6b:c2:cb:14:
                    23:05:bf:81:87:48:d8:ea:73:7e:38:ae:2b:bc:64:
                    09:c6:30:0e:7e:fb:1b:9f:80:f6:cf:cc:d0:56:82:
                    e1:9e:ee:32:0f:c5:33:23:9c:90:83:b1:18:ef:8e:
                    d1:85:ce:0a:bb:34:2e:80:76:95:e5:cc:31:09:6c:
                    49:3f:76:45:a7:29:ee:2d:f0:35:3d:0c:b1:89:f6:
                    8a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6E:11:90:65:8B:25:2A:C8:C5:AE:FA:43:DE:6E:97:34:70:C4:AA
            X509v3 Authority Key Identifier:
                keyid:10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a0:53:3a:02:34:b2:a4:e3:21:ad:04:d6:b4:90:79:75:71:
         f1:d9:1a:73:ed:06:8f:25:15:5e:f4:a6:d5:51:a6:77:a6:76:
         d0:71:2d:42:17:ef:7a:c1:bd:8f:9a:d9:7c:11:5e:76:89:6e:
         06:dd:51:b1:91:1e:3a:ce:11:65:ff:bd:00:4d:2b:53:c6:bd:
         eb:bd:64:57:44:51:99:d1:4a:a3:ca:8f:a5:e7:cb:3e:fc:e6:
         4e:17:c4:9f:d9:60:75:8b:66:a8:44:38:88:a7:02:f7:5d:34:
         a0:34:f9:95:c6:4b:10:8c:1a:f3:0c:99:25:b5:75:af:29:04:
         51:f5:3c:e5:71:07:c2:e3:1b:b4:31:5b:e9:63:5e:3f:20:b5:
         9c:60:58:f9:54:38:72:3d:81:99:2d:1e:fd:ed:a9:9b:0e:fb:
         4d:db:3e:bd:05:1c:41:ec:f9:92:d5:04:57:5f:ad:48:2f:a8:
         ba:ef:fe:b9:6d:20:c5:d0:b5:3c:fd:0e:17:af:d8:bf:18:a8:
         29:35:f4:07:fc:77:e7:eb:7c:e1:b9:49:9b:97:a2:61:68:23:
         3a:68:27:17:04:c1:6c:8e:ab:bf:2e:57:9f:1c:88:6b:8a:cf:
         e1:4f:ac:ca:4b:b4:23:e1:42:fe:06:2b:fe:94:2c:5d:ca:e0:
         c8:76:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----