Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
File:                     eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft (raw, json)
Hash identifier:          6htRQi3r77BmYcJjJCr2nCGyyTJKxHL45REVWlkthLI=
Subject key identifier:   EF:ED:00:B8:B5:68:84:BA:25:5F:AA:48:8E:4E:99:6D:92:E0:42:13
Authority key identifier: 79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
Certificate issuer:       /CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Certificate serial:       01962F3D2C89C0A56581B396C93FA0A6E822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
Manifest number:          0242
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: K4wmgnKnW8i3tM4HeCnrtpu_UV0.roa (hash: +rmjiYwXrF8JZPtQv5BcnXcfYd5CjncGCQcj1Z55VOk=)
                          2: eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl (hash: vWXs7lyHB1EoMomOeNxYM34pmas/3o2PkjOF1OiNA80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2c:89:c0:a5:65:81:b3:96:c9:3f:a0:a6:e8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793d9664e29c0beb92c5673db603ab843e0c4caf
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=efed00b8b56884ba255faa488e4e996d92e04213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:e3:1c:07:ba:76:40:d0:b2:bd:63:09:4e:
                    9f:dd:45:b4:a9:91:aa:65:c7:85:c4:a0:0b:06:dc:
                    77:0d:e8:c6:d9:a8:ab:3a:79:34:aa:4c:2b:4d:c1:
                    4a:00:bb:a8:6f:49:0c:12:e7:6f:9f:56:bb:11:ae:
                    07:27:18:c8:e2:94:f9:e1:67:19:2e:0d:2f:ef:74:
                    0e:be:38:b5:ef:68:cf:f5:94:0c:de:a6:3e:f7:30:
                    98:8b:55:9b:fc:78:fb:bc:59:3f:fb:62:ed:56:d1:
                    97:78:a2:f4:74:9a:fa:3e:05:42:91:e1:58:38:a2:
                    ee:ad:21:09:60:42:31:e3:54:95:8f:bf:92:7f:6c:
                    84:9d:88:28:bb:41:b5:03:d9:54:ea:7c:be:01:09:
                    5c:95:5a:78:22:dd:b0:56:2e:07:48:87:94:a9:02:
                    1c:e2:4c:24:7c:a8:d0:20:34:01:4d:fb:ee:e5:2f:
                    0b:ca:42:25:85:76:60:11:f1:ab:80:63:45:93:f2:
                    79:a5:bf:cf:11:e0:b5:db:3f:d3:e6:f9:ff:18:96:
                    bc:2b:66:83:f2:ef:03:7a:58:d3:1a:3d:44:04:3f:
                    a0:cb:ef:d1:bd:fe:55:36:11:33:8b:a9:f1:09:1c:
                    53:ca:d5:88:dc:ed:4b:cc:c5:27:f8:51:cd:8c:79:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:ED:00:B8:B5:68:84:BA:25:5F:AA:48:8E:4E:99:6D:92:E0:42:13
            X509v3 Authority Key Identifier:
                keyid:79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e8:8b:71:eb:5a:83:75:7c:08:24:6a:3f:57:04:ed:9c:39:
         80:76:ea:93:ab:5f:14:70:0b:36:4f:23:92:2f:db:82:2a:1f:
         f4:0a:4b:eb:69:5a:68:ea:19:c9:66:16:c0:5d:36:35:02:38:
         31:01:d1:d8:63:6b:44:54:3f:4d:03:5d:24:60:f6:fc:f4:2c:
         6b:06:ee:5f:6f:24:d8:9c:de:0d:c9:31:45:0d:05:c9:f8:0f:
         a2:19:3e:34:1d:75:92:b3:03:88:ff:f8:9c:7a:99:e0:59:49:
         6f:17:5a:a2:21:dc:b5:07:cb:f9:94:72:46:eb:9b:8a:61:7c:
         5c:a8:74:fb:68:ca:41:be:ce:7a:35:7e:6d:3a:3b:d2:bb:18:
         b5:b8:c9:fc:4f:85:d2:74:66:16:fe:78:38:b0:15:23:68:18:
         6e:17:3d:87:ff:b5:e9:c4:1b:4f:16:a1:32:54:fb:3c:1b:de:
         28:22:55:ef:99:0b:ea:92:7c:9d:ee:47:da:aa:7b:0d:3b:45:
         50:16:ec:8d:31:58:4d:08:4a:97:7a:e2:80:e1:32:c4:51:2e:
         96:1f:08:4f:1f:0e:0e:cb:75:a9:9c:ab:22:09:90:55:07:e5:
         af:28:19:f1:e8:eb:b0:3b:9c:5c:bf:56:d1:16:af:84:b3:71:
         aa:cb:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----