Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
File:                     EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json)
Hash identifier:          ScKaS3JLHawObGj+gMyqI11KBUnsMWNV186w0pyQweQ=
Subject key identifier:   6D:09:52:DD:3B:E7:41:73:1B:89:05:E1:52:7E:42:56:3E:97:BC:28
Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F
Certificate issuer:       /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
Certificate serial:       01962E98648547A0B61566469EFFA2E26C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft
Manifest number:          0C03
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=)
                          2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: 6MOsVeWdbyF2WyrNmAbI+uHKJwZUxm721jVTyl93nIQ=)
                          3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:64:85:47:a0:b6:15:66:46:9e:ff:a2:e2:6c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=6d0952dd3be741731b8905e1527e42563e97bc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:f3:b3:e3:83:df:45:22:d0:4a:e0:a6:3a:
                    ca:e9:9d:00:6c:91:27:2c:70:fd:c3:1d:b5:3d:d9:
                    8a:9c:fa:7c:90:1e:5f:6c:76:1d:e9:1d:1f:a1:06:
                    f8:41:16:26:19:14:da:04:c4:ec:f0:d3:3e:b2:94:
                    e3:8e:de:6a:d6:ba:1e:63:83:7c:3a:e8:f2:cd:e6:
                    c9:4d:47:1c:5e:11:55:86:56:a4:b1:66:41:6d:4d:
                    6d:a7:c6:40:48:97:20:73:ac:74:1e:91:70:83:f7:
                    ad:b4:a6:35:2a:05:30:53:a1:46:d2:29:3b:88:23:
                    e5:ce:fc:8f:94:44:c7:af:fc:fc:8e:95:04:4b:e1:
                    71:95:ad:48:89:97:cb:6c:e0:fd:a4:12:8f:4d:54:
                    c2:c8:69:b7:43:57:70:aa:eb:86:9a:bc:40:1a:d2:
                    10:5a:67:ec:1f:e2:d3:c0:2a:4e:e1:0a:07:3e:fb:
                    2a:0b:0c:a0:3d:34:85:6a:9a:d6:e9:e4:3b:36:5b:
                    91:c6:df:d7:68:37:51:78:7c:05:9f:0a:bb:70:5f:
                    3c:4c:a1:7a:2c:de:2a:c6:38:5d:c2:72:98:46:28:
                    70:fa:a1:af:c6:da:ac:98:ac:dd:a5:c2:6f:5a:ed:
                    f3:23:ed:82:15:c8:a6:32:3f:ce:db:75:e9:73:58:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:09:52:DD:3B:E7:41:73:1B:89:05:E1:52:7E:42:56:3E:97:BC:28
            X509v3 Authority Key Identifier:
                keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:89:c6:46:ef:60:ee:d8:60:c9:6d:2f:a2:c6:57:36:36:9a:
         1f:21:ff:6c:5f:36:eb:61:99:96:b7:80:86:1e:a1:0a:c7:01:
         46:97:f2:bc:cc:4d:e9:df:88:a7:43:57:19:14:e3:0c:a9:d7:
         58:b1:69:fa:51:62:fa:58:05:d2:12:9c:e3:50:49:f8:25:a9:
         e0:40:d4:2d:06:3e:a0:97:f2:35:63:a5:7e:30:5c:05:83:69:
         cd:02:3d:af:a8:c6:4a:a4:d1:a1:41:2a:47:e6:ad:91:7a:f5:
         ff:d9:e2:92:aa:69:65:7d:37:02:7f:40:15:84:22:a7:73:de:
         82:a9:7b:1d:47:d6:0d:fd:0c:74:8f:d1:d1:8c:7e:86:9a:64:
         cd:22:27:9e:45:c3:1c:e7:3f:a6:67:a5:d8:45:ed:7f:74:53:
         1f:3a:94:50:24:0c:62:bf:bc:0c:62:63:f0:7e:6f:81:78:96:
         ae:e3:fc:e5:97:b2:4a:fe:fd:68:a3:c5:96:d7:db:f6:59:3e:
         13:7e:1f:ae:ef:c0:e2:6c:53:6a:0c:2b:b7:02:a3:a9:cd:ab:
         e2:0b:cd:8d:88:bc:20:7f:96:3c:5d:d6:23:35:b9:c9:56:10:
         7b:da:1e:0b:ac:fc:39:d9:52:c0:0c:79:1c:40:d9:e0:60:45:
         0b:84:d9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----