Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
File:                     AU79_QZHzLpzSyoFZgEk64wGdWc.mft (raw, json)
Hash identifier:          uByiNpOvG8XjJEr56cACW7Qcgwvq48Kg9AgUBCcuySo=
Subject key identifier:   56:82:D2:A8:E5:C8:88:F2:A1:8A:4A:04:7E:E9:DF:3A:CD:C0:5C:70
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Certificate issuer:       /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial:       01962E2B4C369CA1D35A79A3A347EFDB0FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
Manifest number:          0EBE
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: AU79_QZHzLpzSyoFZgEk64wGdWc.crl (hash: Zbfz9AEoT+rKEPPHqk7vFrgOAEpOpNPhirrXnsIi1ck=)
                          2: UacNCcU_KJUFuUVDMacLGTYRt1Y.roa (hash: UmEeKvj5iTGiHz9n8Csi6f4hgPZD+m1pw3SMg/RgUMU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4c:36:9c:a1:d3:5a:79:a3:a3:47:ef:db:0f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=5682d2a8e5c888f2a18a4a047ee9df3acdc05c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:84:15:03:14:b2:71:5b:1f:ce:ae:38:04:
                    fa:23:69:bd:5f:dd:62:42:cd:51:b1:e5:bf:03:7c:
                    18:b3:58:fc:ca:13:53:c9:6b:aa:cf:6d:62:95:12:
                    7c:d5:e3:3d:08:11:d4:4b:68:22:7d:ce:7e:9c:ae:
                    fe:ea:a2:94:27:3c:66:3c:59:f1:a2:dc:cc:dc:6f:
                    30:f5:b6:d0:92:f7:e4:9c:06:36:bc:93:60:3e:80:
                    42:e4:a0:68:33:f6:57:29:2c:e6:58:de:bd:bf:34:
                    52:b6:42:bb:aa:24:1e:15:1a:dd:b2:94:91:38:db:
                    d4:39:6a:18:3d:e3:fa:0d:ff:e1:b3:61:a5:a2:77:
                    99:64:93:77:b5:d5:6c:9f:fa:9a:11:07:2c:06:ae:
                    11:1e:79:a9:03:ec:8c:23:55:d3:68:de:85:d1:2d:
                    27:8f:fe:1b:1a:f4:44:d9:0b:dd:a1:65:66:68:19:
                    ee:5f:bc:d3:3c:f6:0a:7c:12:fe:94:f9:e3:8a:03:
                    aa:49:14:44:f0:d2:78:de:34:fd:b1:e4:b7:7f:17:
                    69:b2:90:c2:e3:cd:54:9a:e4:39:d7:bd:87:11:ac:
                    ab:7e:ee:66:bf:7e:cc:e3:b5:97:33:93:63:2d:69:
                    16:8c:d4:2f:6f:63:5e:df:01:8c:af:56:40:31:2d:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:82:D2:A8:E5:C8:88:F2:A1:8A:4A:04:7E:E9:DF:3A:CD:C0:5C:70
            X509v3 Authority Key Identifier:
                keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:66:9b:a6:96:e5:d2:4d:d2:73:42:50:cb:8c:19:30:0e:0b:
         b7:8a:e8:5a:72:96:b6:ee:f2:37:9d:f4:64:1f:b5:50:46:bc:
         a6:94:b7:c1:ee:dc:62:68:fa:42:09:80:52:67:79:35:d9:f6:
         54:c7:93:27:f7:e0:88:3b:f0:ba:60:16:de:ae:5a:fa:ba:f6:
         e0:c0:9f:af:ca:8e:95:2d:50:f6:7d:d7:9a:48:96:78:06:47:
         b4:d2:2d:33:b7:0b:cb:b4:2d:a6:70:ca:6e:aa:0c:5e:03:bf:
         d3:b4:ea:ae:61:83:56:dd:1d:55:0b:8d:12:b7:44:5f:cc:d0:
         72:38:f9:ab:ea:13:63:25:82:60:17:e2:81:23:82:15:e9:28:
         5c:be:21:56:b5:92:15:7a:e7:cb:ae:22:ea:3c:1d:8d:33:1a:
         63:71:9b:22:d7:5c:26:1f:cd:bd:8f:0d:44:f5:5d:20:f9:22:
         51:1f:87:56:fd:d6:2e:fa:e3:9a:83:38:7f:80:6d:74:1d:19:
         d3:fe:9d:82:f8:4b:d0:10:8a:c1:52:81:d7:93:d7:79:54:78:
         09:52:ab:44:61:ac:e2:a6:5d:8a:df:7f:d9:0c:df:66:ad:b5:
         70:21:bd:d1:c2:92:bd:66:5a:41:87:01:67:53:00:13:2a:d7:
         26:05:6b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----