Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File:                     65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier:          okWU3ooDJrg05JjWpkjNfiSfvIAXHW6GJPS0Bb6F/Hc=
Subject key identifier:   74:9D:EE:AB:FB:65:5A:B6:C0:71:96:7A:49:00:9B:FC:EE:11:DE:5D
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer:       /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial:       01962F743090401D2E7183A1CE23E37368E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number:          0A1E
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: V9TuZXXWKb/fXJd5e0SQWLAQjmgF4mJPFUKpMkVHRxc=)
                          2: JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa (hash: vnxJ3sIoSk6fiP+z46/46h6rm1KHxuwXM0sR4DgXnI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:30:90:40:1d:2e:71:83:a1:ce:23:e3:73:68:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=749deeabfb655ab6c071967a49009bfcee11de5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:f6:1e:67:cd:7f:61:62:8e:4a:a1:b1:1c:
                    88:08:70:c4:95:07:6d:ec:04:5b:13:96:fd:5c:65:
                    9c:ef:1c:7d:22:6a:e4:5c:53:e3:a2:00:bb:6b:e3:
                    a6:fe:be:6f:a2:67:42:87:ce:fc:35:26:3c:a8:bb:
                    20:70:6a:4b:6e:6e:a0:7a:4a:14:22:22:84:2a:bf:
                    91:11:6b:77:f8:49:3c:49:e3:36:a5:5d:7c:b6:4c:
                    79:c5:f1:42:02:a4:f2:ca:f3:7d:86:f6:3c:01:91:
                    15:30:16:31:97:7e:79:9e:13:c2:2a:12:8d:87:25:
                    c0:d4:77:c7:d4:3c:91:e4:24:ee:17:0a:eb:51:7a:
                    4e:00:75:d8:f2:dd:b0:24:c5:20:59:af:46:ea:6f:
                    71:89:f6:32:89:0c:8a:20:af:48:b1:ad:dc:da:81:
                    48:03:36:9a:52:74:53:3f:05:3f:ca:09:3c:2a:f8:
                    dd:95:44:53:d6:28:08:5e:dd:6b:f4:29:52:98:21:
                    21:78:7f:62:d5:90:97:92:71:42:f9:7e:ac:7e:de:
                    67:3c:e2:b1:90:6c:15:1b:aa:0f:12:be:e7:f3:85:
                    ae:80:b2:22:95:81:8b:d9:62:2b:dc:20:8a:82:85:
                    7e:b5:06:89:a6:bc:65:8f:75:5c:18:0c:7a:1d:a6:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9D:EE:AB:FB:65:5A:B6:C0:71:96:7A:49:00:9B:FC:EE:11:DE:5D
            X509v3 Authority Key Identifier:
                keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e7:9f:4b:6c:d3:01:e8:e9:9d:46:a4:14:f9:38:dc:95:ef:
         c8:c0:c2:5c:08:ff:c7:14:9c:d3:6b:88:2c:25:93:17:03:0c:
         8c:c7:d4:f3:c0:cb:d3:88:46:df:e3:e3:20:66:00:85:82:d4:
         ea:f9:ec:50:6a:f5:43:a1:1c:ab:5b:21:01:6e:db:cd:4b:d4:
         43:2d:0e:b0:4b:3f:11:6d:87:e0:82:95:4c:87:51:70:fc:b0:
         70:86:68:2c:5c:f0:8e:94:23:1b:44:e6:1e:0c:c1:e3:fe:6e:
         73:af:ee:22:64:12:6e:2c:06:36:a6:34:23:87:d5:b1:6e:ed:
         32:86:1e:2f:a8:ce:2f:9f:3b:2c:66:2c:71:9d:13:94:4b:a1:
         d9:ee:4b:40:90:47:dd:ac:3f:f6:37:94:d2:07:4d:71:77:43:
         be:bc:f5:5b:bd:b7:52:0e:79:e4:54:3e:35:c0:dd:ac:af:32:
         0f:d4:c8:08:8b:38:ea:da:03:da:d9:a8:30:4f:1d:e3:79:f0:
         91:83:d6:b1:1a:3c:19:46:cf:06:c5:64:03:c9:b7:a9:4c:8b:
         33:a4:bd:db:f0:01:64:be:1c:43:d1:63:ae:4f:60:08:f2:33:
         aa:89:b9:68:fa:d8:c0:55:43:9f:b6:e8:b6:e3:64:22:e4:53:
         ac:e2:44:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----