Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File:                     eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier:          sQHUgZAnt85iNxWtSFoImyRqptRCUNIdnYjhYOdqPI0=
Subject key identifier:   69:E0:74:82:0E:35:11:80:EB:05:EB:4B:72:12:03:B9:6A:AB:93:9C
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer:       /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial:       01962F06AB5736EADF1CDDB0F8792C892D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: 4-Hd07EQEQSMnF-RmoIQG-f-msw.roa (hash: 5L2RHjf2nHKLV7uL0XKnWxDBxm9LnDeMDKIuvtcOWVI=)
                          2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: X7Ka/OZqeWq0//ma5vXa2vCxSDwxbYanEzdoxt9w07A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ab:57:36:ea:df:1c:dd:b0:f8:79:2c:89:2d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=69e074820e351180eb05eb4b721203b96aab939c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:db:cb:be:19:36:be:43:bf:de:9e:46:1d:
                    6a:d5:b8:07:fb:1c:dc:da:f8:47:81:6e:a5:38:94:
                    f6:30:8c:40:c6:bc:7e:67:4e:a0:62:ab:2a:05:1e:
                    b3:61:ee:23:aa:43:91:ea:94:7e:8a:a3:ff:a5:15:
                    e6:36:4f:a3:08:96:32:49:84:8b:8b:2a:13:25:32:
                    e5:5d:ee:60:1c:b5:2f:1a:7b:fe:23:08:5a:b7:fa:
                    15:32:09:8c:20:1f:08:a8:93:4f:6f:aa:17:09:79:
                    7a:a6:21:2c:4d:3e:e7:9f:fe:c1:1c:7d:28:f7:63:
                    4d:c6:87:12:b1:14:19:5b:a5:29:de:bd:f8:71:83:
                    2a:c9:aa:13:5c:18:14:a2:a2:a3:d4:00:bf:f9:23:
                    09:ba:c3:6f:33:35:0e:ac:39:59:cd:75:b1:c5:9a:
                    ec:02:f3:40:82:0e:4e:22:99:76:87:ab:2d:6e:37:
                    00:0b:7d:62:44:fa:24:3f:8b:86:68:50:da:5d:5f:
                    79:8d:c2:f3:30:9e:d5:09:9a:dc:13:e4:ed:9e:df:
                    56:de:86:73:70:26:39:c4:3a:fe:7f:da:ac:52:6d:
                    9f:ed:d3:0e:d8:71:d8:4a:1b:cf:4e:f6:d4:3b:b2:
                    c6:4a:dd:bb:0e:0b:e6:f3:c6:ea:4d:33:f8:f8:13:
                    c2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E0:74:82:0E:35:11:80:EB:05:EB:4B:72:12:03:B9:6A:AB:93:9C
            X509v3 Authority Key Identifier:
                keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b3:27:a9:e5:79:b7:e4:0a:c0:d9:02:69:50:b9:4a:e4:41:
         a0:bd:ec:d3:28:df:c0:d0:e4:12:71:da:73:8a:98:2b:bd:35:
         cf:13:d3:3d:0f:cd:f0:a4:80:25:10:61:30:d0:6e:7a:1d:1e:
         1a:4a:c7:b0:0b:89:d8:68:d7:07:94:25:67:68:34:fc:db:85:
         a1:23:77:a7:be:ce:fb:bf:ca:be:4e:9e:f0:c4:aa:8c:90:97:
         2e:b9:32:70:2e:0a:3b:07:c0:58:9c:f6:f4:b9:54:7d:99:e8:
         a0:df:17:fb:f7:10:47:01:b6:09:fe:d0:9b:58:d0:f0:90:86:
         41:b9:91:40:8b:73:a1:f2:8d:95:45:3f:6f:19:3c:67:c4:11:
         e1:36:b0:72:06:18:d2:4a:2c:ac:4e:a8:c1:50:6f:2c:e3:cd:
         15:2b:d2:20:8b:ff:73:fb:83:31:81:fb:22:42:70:5f:76:e7:
         a6:10:fe:46:7a:e2:4e:bb:30:2f:2d:9b:ca:b5:4d:7d:69:be:
         95:b6:e6:cc:00:5f:40:c7:8d:ec:7b:9b:75:56:7f:a4:dd:cc:
         93:fb:68:cf:da:bc:b9:58:7f:4a:2a:96:1f:5f:51:71:fd:00:
         89:cc:63:26:6c:f7:cf:f8:21:d4:0b:25:d6:23:e7:95:8b:1d:
         e0:0e:fa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----