Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
File:                     eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft (raw, json)
Hash identifier:          fWi3tBlrxDMAQTR5ZopAZFnKxfRoQEj3TF4b4N0rm6s=
Subject key identifier:   76:71:12:7E:05:52:F7:29:60:5E:AD:0A:74:3C:0B:97:41:F1:CD:E3
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Certificate issuer:       /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial:       01962E98A126060935744D145A1089DF6543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
Manifest number:          0EF0
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: 7MWkDFIvxrvBiYeFXftWIiTBWYo.roa (hash: JH7VCijfXfwxkoNsfjPSzhXBNh6NzlLWZ8enC7rwxNY=)
                          2: 8ALCem6WNzZicaF6OTNthjeQfck.roa (hash: YpH6jIe+TynmU/8cQY6b28ehJOsvk8Ov/8Gxgmlkb/M=)
                          3: BOjqPIb3athrryYMVMll8dWYS_4.roa (hash: A5az/e05jOJtxk+W5sPagGBV8gSZMh6u1LJrjb6cg8k=)
                          4: CsM1Tab_IVjXnkGzn-PwfvJRum8.roa (hash: wdOCJx02c8KAu6BbK3u1hvYDgYH15s1JgslsnvBAork=)
                          5: DLhr9KfIwlyvtn8BdrI8qpAA55E.roa (hash: eJXgFYzDwYu/AVJFRlLxNZ3mj78cD/ZmcSP3FUXg6AY=)
                          6: J0gYCpNrq5uBLAfexZzLlnOmFlI.roa (hash: VLnrMlgxhKPlu3IM8gKgy9DosCGihEAgnKfrS36yU1A=)
                          7: WKpkuG_M2tT9KPbip1eBAkWy0LI.roa (hash: kiiHtTX/QlpfIGAQUeZ2av6ezh1TlPujLY7SBF8U+BA=)
                          8: eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl (hash: 5TudehkoGpmOdeAiRXVcxDeFzvapGWf0EQVOgoYPJpM=)
                          9: loeG0A7B5pm9tZpPzSr7eUFiNh0.roa (hash: GinS4WDpw/xi0yTLnwz78knWosKiyyq16OZVyWAvW5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a1:26:06:09:35:74:4d:14:5a:10:89:df:65:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=7671127e0552f729605ead0a743c0b9741f1cde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:e8:5f:f1:e7:ce:62:73:d9:8d:a7:43:54:
                    86:4c:47:84:72:6b:7d:56:4b:6b:18:00:28:78:91:
                    04:67:eb:4f:d2:2c:4a:b2:bd:91:82:73:0b:d9:8b:
                    e5:58:a1:cb:75:c0:07:a4:3c:ca:58:ee:63:48:03:
                    dc:ef:64:4a:fe:30:82:7f:2b:42:76:bd:ac:35:88:
                    d7:11:94:63:8c:c2:a0:67:c1:a5:0d:12:ff:ba:76:
                    b5:2f:39:f2:df:30:3b:2e:e6:b3:69:db:72:20:19:
                    14:65:17:a9:a9:e4:5e:5f:ba:de:ce:0e:54:77:8b:
                    0e:27:db:72:f9:b8:86:32:68:d7:61:bf:80:16:23:
                    ec:14:b1:6a:87:3d:3a:80:7b:89:9e:20:be:ba:50:
                    b4:2b:70:b7:63:7c:68:0f:6c:42:d2:60:cb:49:12:
                    49:0e:84:80:d9:89:4e:f3:27:ab:b4:4c:91:1a:aa:
                    8e:30:b5:53:16:9a:8e:67:27:5d:a7:3b:f2:62:ed:
                    b8:be:aa:3c:ca:8a:f6:a6:ff:ae:36:c8:99:08:52:
                    93:97:fc:e7:96:7d:53:07:78:e4:65:f5:47:13:94:
                    d2:85:c6:f7:a1:32:91:b2:39:1e:29:fc:15:9b:17:
                    aa:e8:5b:0f:11:7f:b4:52:f3:6c:dd:62:a4:46:2a:
                    47:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:71:12:7E:05:52:F7:29:60:5E:AD:0A:74:3C:0B:97:41:F1:CD:E3
            X509v3 Authority Key Identifier:
                keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:28:00:a7:7d:ce:56:76:f3:14:61:d8:ef:ef:c1:e4:cf:
         ae:4e:54:28:89:bd:c0:d4:29:c8:fe:3b:8f:08:f2:c0:30:48:
         93:42:de:4b:58:92:25:30:fc:08:e4:05:50:e5:ac:da:9c:30:
         a0:44:65:8c:d4:54:fd:51:d5:95:92:ff:b8:ba:e8:97:4b:50:
         58:38:fa:2e:a3:9b:72:5f:f7:33:39:c0:ba:0b:86:c8:93:2f:
         80:00:58:d2:1e:6c:4f:cf:e3:8f:d4:ec:43:34:07:93:e0:8f:
         73:07:9d:c0:f1:66:d0:36:6c:92:52:31:99:f0:b9:7e:26:17:
         43:14:65:f5:27:19:0d:7e:42:35:ab:90:8f:cb:33:56:58:6d:
         9b:4d:60:3e:f3:e9:c1:87:80:61:63:fb:98:45:ad:42:3e:f7:
         8e:c0:3b:c1:b8:5a:ce:67:c6:99:4e:fe:2d:68:3e:60:89:20:
         60:a2:0a:b9:50:10:7e:a1:15:15:ab:85:bb:bf:b8:c7:de:b2:
         65:95:f7:21:5e:c6:a3:3a:97:b8:77:5c:bf:3c:51:87:a2:e6:
         df:74:e2:88:5c:b7:a2:4b:ee:33:24:8a:4f:72:44:6e:fc:f1:
         50:a8:33:20:ef:12:cd:30:fb:a7:ad:de:53:de:c3:24:4e:f0:
         d8:bf:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----