Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File:                     zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier:          SwkY52woC07fPGbgUQCl/ADATQFB4ECJQlA+WJCIpO8=
Subject key identifier:   D5:83:B6:84:DD:88:5C:92:09:E1:A8:6B:B2:20:25:44:97:AB:83:79
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer:       /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial:       01962F3D57EFEF67E093B7E5CACF4A75C5A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
                          2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: JBTLBh+CfMEW96ITCHSlFwYoNXrFwZzS7JfrO3bUSYc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:57:ef:ef:67:e0:93:b7:e5:ca:cf:4a:75:c5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=d583b684dd885c9209e1a86bb220254497ab8379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:b6:f2:d4:b6:00:a6:98:cf:58:fd:1c:ac:
                    b7:63:76:60:74:c5:09:63:92:c5:2c:b6:e7:61:6c:
                    fa:9a:28:d7:98:77:51:f7:48:2c:2e:79:2d:c0:3a:
                    77:17:f5:e8:0e:28:49:2e:3f:ac:1b:c2:71:c4:b7:
                    65:5e:37:f4:5d:ed:d9:e1:9c:8e:b7:cb:f2:45:5b:
                    e2:2a:a8:cb:67:70:94:7d:a9:e7:2f:bd:ec:4f:7e:
                    33:94:06:45:75:7f:83:b1:7b:8c:8f:59:16:d6:a2:
                    13:fb:15:45:59:2b:30:df:38:18:9e:65:c6:d9:4b:
                    bb:a1:d2:f2:80:13:9b:5a:15:9a:a9:f6:fb:a6:bc:
                    ed:b1:8a:cf:34:33:a4:bc:5a:7b:f0:c5:02:87:8a:
                    18:ab:66:ab:6f:c8:d5:bb:bb:31:f1:09:f6:ab:13:
                    1b:4f:47:da:71:8a:f1:f2:b6:6f:11:4c:49:27:9c:
                    a3:97:11:b0:c0:24:59:7f:92:4e:c8:59:65:40:df:
                    98:b2:0c:67:73:50:d1:d0:dd:37:30:af:03:72:2a:
                    fe:18:ee:bc:84:2a:aa:02:93:f1:c3:f1:29:80:fb:
                    23:32:ca:ab:b6:7a:21:37:2c:a2:7d:4d:5a:74:d1:
                    ad:4a:74:05:72:4d:cd:ff:8e:34:b9:51:18:bb:7e:
                    78:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:83:B6:84:DD:88:5C:92:09:E1:A8:6B:B2:20:25:44:97:AB:83:79
            X509v3 Authority Key Identifier:
                keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:92:63:c0:fc:6d:b8:34:c6:33:be:e6:f5:05:50:80:41:6c:
         1e:72:9a:92:57:e9:17:0f:b3:3c:64:8d:21:c3:4c:c3:d7:8c:
         52:61:78:6f:a5:ab:da:5a:07:a7:3e:45:6a:c9:8f:84:61:b8:
         29:8a:b2:b0:a4:44:c4:d4:41:b3:58:ea:a0:9a:43:e2:60:b7:
         5a:9e:20:d4:df:b0:46:08:b0:71:d3:b4:a9:4a:68:78:9e:25:
         09:f7:56:0e:48:6e:03:aa:88:fc:53:fb:56:98:c1:d8:4f:1c:
         3c:9a:2a:19:37:99:48:b6:55:fc:2b:db:76:86:2b:a3:ee:45:
         83:66:9e:d0:0d:03:8c:ce:c6:68:f1:76:27:c7:94:71:ad:3d:
         fd:43:a4:22:fa:0c:e3:ef:6f:84:04:b8:af:ce:00:ba:bf:10:
         b9:58:1d:0c:78:2f:82:3e:d7:a7:77:3f:49:5b:dd:0c:ae:a8:
         50:57:82:75:b3:9c:c0:92:4c:ae:98:42:7c:0c:ad:c1:42:69:
         f1:32:a2:d7:08:f4:bb:c6:7a:76:21:f3:5b:3f:d2:15:52:8b:
         2f:37:ba:61:5e:a0:ad:97:d9:58:ec:77:50:4e:e4:14:b4:e1:
         a8:0f:86:51:1b:06:9a:42:35:e2:ac:3a:ac:df:56:2b:3a:52:
         d2:bd:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----