Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
File:                     Eeb3cZPydkuolChd0vZPEib9kSY.mft (raw, json)
Hash identifier:          bPsftyvqytdf6tXhzyEAOfb0ESSHHGlz94h6T1Ecdyk=
Subject key identifier:   24:0A:44:FE:49:D5:D1:91:8A:92:14:7C:2A:8E:CF:DF:35:93:0C:3D
Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Certificate issuer:       /CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Certificate serial:       01962E99098C60B84EFA76B2D41072847C92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: Eeb3cZPydkuolChd0vZPEib9kSY.crl (hash: UZAW+aQapiXmsnaIoonq+HheEGKZt5c2Xe0SawO4XYQ=)
                          2: XFg9UB4gTIL8wJ9DUJTpOfsymeY.roa (hash: xjEc3UgcuslMKxGxfh1ksiSKMzapldmW9N+WDd88oT0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:09:8c:60:b8:4e:fa:76:b2:d4:10:72:84:7c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=240a44fe49d5d1918a92147c2a8ecfdf35930c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:cf:ba:fe:e9:10:48:87:9d:75:25:c5:fa:
                    04:06:89:e8:0e:4e:3b:7d:36:76:20:a1:36:41:d9:
                    a8:c6:68:6d:87:af:45:a9:1f:40:98:7a:84:c6:54:
                    48:e3:56:a8:08:95:6f:d7:60:b8:53:4d:a8:eb:db:
                    dc:05:72:33:20:04:c0:54:f2:66:e2:77:f5:86:b9:
                    e4:ac:c7:a0:ea:be:d6:b0:fe:fc:f7:a4:84:25:21:
                    cd:81:74:79:ef:82:c6:7c:d2:43:6b:e8:74:d9:ca:
                    a7:9d:63:e2:95:42:c6:4d:a7:11:33:86:a9:ff:a5:
                    e6:87:00:df:42:3a:ba:29:08:aa:68:c2:6b:72:bf:
                    89:fe:f6:24:2a:57:62:ec:f8:c5:b9:48:63:b5:5d:
                    06:4b:d1:06:e3:32:f0:16:f8:3a:8e:02:6c:53:9c:
                    ac:9a:a6:1d:ef:65:1f:79:bb:ac:1c:23:9d:21:ce:
                    a6:5a:8e:fe:9b:15:19:8e:2a:02:bf:94:fe:6a:35:
                    73:52:81:1b:dc:a6:87:33:64:1c:0c:13:9d:1f:bb:
                    04:35:a3:a8:24:62:70:c0:62:89:22:ae:ad:57:4d:
                    0f:ee:50:b3:11:f3:14:fd:a1:90:8b:eb:95:56:88:
                    01:1f:4e:50:dc:b6:1c:e6:4e:49:97:b1:d5:04:8a:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0A:44:FE:49:D5:D1:91:8A:92:14:7C:2A:8E:CF:DF:35:93:0C:3D
            X509v3 Authority Key Identifier:
                keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:b8:77:af:ba:c8:42:27:3a:0a:b4:fa:ba:4f:99:e5:ab:
         aa:75:07:61:19:b3:7d:14:8d:78:80:00:31:1a:71:27:e1:03:
         a2:9b:d0:af:c8:eb:50:a9:76:eb:78:1d:67:43:03:b5:a8:36:
         fb:82:e6:34:aa:71:17:55:9e:47:e0:ee:cc:b8:fd:84:27:50:
         00:69:00:56:0b:1f:c2:00:2c:5a:fb:16:bf:11:20:52:37:4a:
         b4:b3:36:ac:4b:71:d0:5c:cf:f8:7b:54:a1:44:be:e8:3e:fa:
         a2:10:3a:67:34:39:b4:5e:d8:4d:1d:d6:b5:ce:ce:17:8c:cf:
         af:81:d8:18:c1:6c:bb:70:aa:02:96:e3:18:c5:c1:31:91:09:
         a9:a4:59:f7:6c:34:13:5b:7f:bb:a0:1e:92:db:b3:92:3a:05:
         ab:e3:ad:e2:75:69:34:37:e9:9f:51:c3:a5:5d:6b:cb:cd:27:
         99:cb:6f:01:99:c7:08:76:cb:93:d4:70:d0:8d:d1:6c:2c:fe:
         5a:b7:18:9e:b0:49:e8:00:48:da:c8:5b:97:a7:a4:2a:97:20:
         60:7c:8b:90:a0:12:03:bc:86:4a:93:3e:23:0e:92:bf:b4:58:
         41:72:fe:09:71:a5:64:4d:b0:55:df:30:a8:07:a2:56:e0:f0:
         1c:71:aa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----