Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File:                     65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier:          Jn47nePsUEZV02888UlfxXmdi5wPqNVHbi29x1ez5RE=
Subject key identifier:   88:E0:46:B3:B1:2D:8B:31:39:E5:B9:53:D9:73:81:82:6B:95:2D:B9
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer:       /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial:       01962F745B6E90220F0C6AD3F34AE8CC2B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number:          0376
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: lPWyAI+XDA8Q/nttD/XmiUOa4/18mZbTWxxhMQS+OFY=)
                          2: UQAL-JJc9xbj3dvWQx-rKxJywfk.roa (hash: arBBklCXAnQ+7dDU+siDZljmex4Eu/z9+wzjqqM7ap4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5b:6e:90:22:0f:0c:6a:d3:f3:4a:e8:cc:2b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=88e046b3b12d8b3139e5b953d97381826b952db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:b0:ce:cf:7d:8a:d1:d4:31:c6:b9:37:70:
                    63:68:9b:b3:f5:58:51:df:1d:7c:d8:d6:6d:9d:0f:
                    43:2f:82:1b:3b:53:0d:a3:fc:4f:71:46:9c:22:4f:
                    df:96:f2:e0:cd:e5:01:e2:55:3b:e0:4d:3a:8a:74:
                    37:21:4b:e7:6a:94:9e:5e:ce:86:f0:dc:28:dd:87:
                    91:20:d7:23:48:f7:06:d2:cf:ae:6d:93:3d:96:28:
                    4a:1a:fb:be:56:7e:7e:cd:22:58:44:e6:62:2d:8c:
                    07:1a:73:dd:a5:0d:4b:ab:f3:16:73:f3:ed:97:ab:
                    b7:88:d6:69:10:5b:b5:a6:a3:42:0c:6b:ad:54:8b:
                    c1:82:51:58:7e:c2:fd:df:6a:09:dc:3a:65:6e:1d:
                    01:32:b3:0a:c3:d3:5d:bc:f9:61:78:5e:a5:72:31:
                    67:99:de:43:52:67:96:77:c4:cb:a1:ba:c5:68:33:
                    36:af:78:63:39:d8:2e:85:32:02:69:51:47:6b:66:
                    f0:fc:d4:62:02:7f:cd:03:cf:30:89:a9:00:7f:02:
                    08:df:03:0b:09:fe:85:c3:14:51:68:9c:a5:da:76:
                    3b:1e:92:7d:f1:83:60:73:6c:4e:55:e5:07:c7:eb:
                    68:27:46:21:22:28:1f:b8:bd:86:57:fc:b3:00:16:
                    be:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E0:46:B3:B1:2D:8B:31:39:E5:B9:53:D9:73:81:82:6B:95:2D:B9
            X509v3 Authority Key Identifier:
                keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:60:d4:ee:1c:60:ca:ac:af:0e:c2:dd:d7:99:db:17:31:f9:
         a2:12:ed:07:3c:96:e3:c3:a5:d9:e3:bc:4c:f1:9a:f2:cc:ec:
         0a:f6:6b:bc:f5:e1:a9:c3:97:ba:ab:db:54:00:25:38:ec:4a:
         61:5e:44:fc:98:30:d8:4d:cf:14:4a:10:1a:04:e9:13:ee:34:
         31:2b:fa:f6:10:9f:6a:07:cd:3f:1d:fa:3f:fb:fa:0c:78:f8:
         8f:94:16:5f:38:70:0f:ac:30:49:70:d0:2f:ee:b4:13:ed:cf:
         53:39:85:6f:75:42:b7:c7:41:97:8c:de:d9:b8:89:d9:82:e6:
         6a:ec:49:d0:5a:bd:f5:0f:06:7b:57:4f:7c:66:04:93:6a:df:
         41:8a:39:11:84:33:b8:d7:e6:11:a1:ee:44:1f:e1:22:16:8c:
         9a:2c:f6:57:26:4a:8b:93:f7:6a:03:35:09:b2:a0:10:f3:a4:
         ca:4d:1f:50:60:ab:9b:94:08:e0:b4:fa:b9:de:a7:d5:41:8e:
         21:c6:20:25:2e:d1:e4:32:97:b0:b1:58:07:54:93:32:3d:f1:
         73:01:e6:5e:0f:ea:9d:a7:26:33:c9:34:e9:eb:33:e4:f1:1d:
         5c:aa:94:f9:cc:ea:de:e3:07:a4:24:64:ac:be:ba:5e:fb:b1:
         c5:6b:4d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----