Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File:                     ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier:          4rFQCk7m6kbFdCB/mbfWCFtJb4OQpW9wcK/Ntk9eHkw=
Subject key identifier:   A3:E5:8E:6E:E1:F0:27:09:97:81:99:8E:A7:5F:5D:A6:FC:D9:99:E1
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer:       /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial:       01962E61A1FA0E2D66010B9780A875CC9501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: Wbz+2vrdIrP5VlEkd74twEFH6VIWKloE98mI9vs/I2A=)
                          2: tzK04gs2QWdGkmPOxcIJ7O89Pa0.roa (hash: c/EnpCuozOUYVClxONo4ish8u2CS6ZGPowUUX+Csd6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a1:fa:0e:2d:66:01:0b:97:80:a8:75:cc:95:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=a3e58e6ee1f027099781998ea75f5da6fcd999e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:63:57:b4:97:50:06:9f:25:d4:e3:b1:7e:
                    e6:4f:84:ef:0b:ff:ed:c6:39:0c:c7:87:91:63:f8:
                    18:8b:15:06:11:65:86:bf:36:e4:f8:9d:6f:5a:b3:
                    7d:78:97:93:7e:59:00:97:1e:57:61:2d:b9:b5:a1:
                    3f:9f:17:30:61:01:8c:93:0d:00:ce:a4:4e:1a:84:
                    f9:f0:52:f4:da:fa:24:2e:ff:7d:22:64:02:85:1b:
                    51:9c:53:87:c9:34:ff:61:ed:5d:3e:73:dc:f5:21:
                    83:0b:84:1b:3a:c4:23:4d:9c:ef:6b:6a:27:4d:0e:
                    84:6a:45:12:08:f6:86:84:11:c3:07:08:8c:77:38:
                    d4:4d:c2:ae:77:48:f8:91:f1:fa:bc:e1:cc:5e:35:
                    db:77:55:9d:6f:83:ad:f2:79:a8:97:75:dc:1d:5f:
                    36:ee:91:06:0f:7f:cd:d0:f4:c5:8e:5e:05:de:93:
                    21:19:fb:a2:13:21:78:11:86:8f:ee:9b:b9:3c:8f:
                    de:bd:6e:b9:b1:ba:9b:f3:66:72:a4:c6:c4:c3:dc:
                    30:f0:51:e6:d4:81:fe:a3:ac:7c:9d:3d:6c:9b:de:
                    4e:bf:f9:84:c8:19:f3:50:02:cb:ea:f8:aa:35:01:
                    ec:bf:22:88:b3:18:03:62:ea:fa:fa:84:8a:02:c3:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E5:8E:6E:E1:F0:27:09:97:81:99:8E:A7:5F:5D:A6:FC:D9:99:E1
            X509v3 Authority Key Identifier:
                keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:42:40:ff:74:6b:83:fe:91:48:31:a5:05:f4:0a:2f:e9:
         e7:60:37:b4:22:fd:b2:99:3f:f9:7b:3f:18:2a:1e:1f:81:16:
         fb:89:e0:55:7d:f7:63:0f:fd:b4:9e:3c:ed:ee:fd:b9:dc:80:
         b5:ed:a7:39:b5:6b:d9:e3:6c:ad:2e:7b:e1:48:c1:a5:25:7c:
         de:3a:51:ff:08:65:41:04:76:45:09:67:56:ca:c0:ed:59:59:
         20:3a:f6:26:6f:82:c4:93:07:56:1c:9c:05:55:01:69:74:60:
         e6:b8:a7:95:c1:ba:7a:61:3e:66:7b:aa:8f:8c:90:f5:49:6d:
         5c:78:b4:29:e4:12:db:a7:5f:d9:b6:35:db:6c:4c:34:89:02:
         16:08:b2:51:f8:38:79:6d:73:25:47:09:44:bb:2a:ca:65:0f:
         eb:bf:e5:19:66:ee:35:3c:fb:a8:ba:3c:9a:5d:5c:1a:d1:fc:
         fd:60:79:20:35:08:15:ee:19:21:96:b6:aa:00:b3:62:07:e4:
         31:51:16:71:26:0d:95:4d:af:e4:1f:ad:7a:ec:b8:61:c5:f8:
         78:1a:36:69:ec:67:01:c5:14:51:f3:59:17:9d:8d:79:16:66:
         0c:38:29:af:56:50:9e:72:94:e5:5d:3e:b8:5a:d0:90:a1:08:
         84:12:f9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----