Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
File:                     ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft (raw, json)
Hash identifier:          o81mPpPhdA1aRsIvO10dOqcwRSWDmE6WMz/3m0tL8KA=
Subject key identifier:   35:04:50:AE:26:31:60:BB:0E:8A:E2:2A:8C:AA:4B:28:7B:45:6F:73
Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
Certificate issuer:       /CN=102a93b92f5845be62a6241f23cfadb14cb16994
Certificate serial:       01962ECFBA3A0A95404C48A4569C3FB2E494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl (hash: LTEO5jBrmEYkf8pmGJ9pgzhIhLRRSG7IPO3uOdXxGso=)
                          2: oAVRAKAVX9ZdTzx0acx5PyMyT-o.roa (hash: OUAmV9WMtswHLR9c4KKcHWFm3C1cc4HUY52wOre6m1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ba:3a:0a:95:40:4c:48:a4:56:9c:3f:b2:e4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=350450ae263160bb0e8ae22a8caa4b287b456f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:ec:fa:67:35:de:eb:66:93:b3:2e:e7:e4:
                    04:44:36:cb:08:5f:8c:89:ee:dc:0c:6b:0e:db:25:
                    26:fd:87:ec:af:53:06:b0:bb:8b:a3:22:0f:2a:62:
                    c9:d0:19:29:67:ed:41:9c:52:ce:36:c5:62:8d:b7:
                    92:9d:fb:39:fa:3e:5f:b2:31:2d:85:52:b9:b2:91:
                    4a:ed:e0:4f:4d:66:0f:76:df:41:3f:99:c8:3c:ea:
                    94:2e:45:d4:8d:0e:4d:fe:f6:cc:74:e8:68:5c:ac:
                    ce:cd:80:f7:0f:93:1d:31:55:e7:fe:0e:6b:f1:3c:
                    fb:3a:6c:e8:1f:7a:17:b7:3c:5c:64:c9:5a:4b:90:
                    27:9d:47:14:a5:32:74:68:3b:04:44:51:40:e8:ba:
                    45:95:a6:3e:99:63:12:68:ee:ad:25:a4:09:c4:b9:
                    d7:0c:39:8b:f6:09:8d:48:b7:db:5a:88:f6:9d:ff:
                    97:72:cd:87:64:ab:da:cf:5c:7e:75:6d:a3:a3:84:
                    1d:0b:ba:b8:e3:64:53:dd:b8:d5:92:bc:17:67:53:
                    0b:45:b7:3a:dd:23:fc:ac:b9:02:e8:1f:d5:9e:7b:
                    1c:83:da:10:db:55:61:24:36:0a:78:58:0f:ff:1c:
                    22:bb:80:8b:1a:bd:2f:c5:1f:06:b7:3f:b5:c5:b6:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:04:50:AE:26:31:60:BB:0E:8A:E2:2A:8C:AA:4B:28:7B:45:6F:73
            X509v3 Authority Key Identifier:
                keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:db:c2:51:07:ae:28:62:97:3b:fd:ad:e2:44:61:6f:f1:3b:
         a0:59:44:e7:41:d2:69:b2:3c:e9:10:cd:32:a6:88:3d:b4:4c:
         1c:fa:e3:fb:d3:95:f9:de:b4:bc:f0:43:41:05:8a:4c:12:7d:
         17:07:24:ea:ef:d2:95:4d:f5:16:c8:19:fc:a5:f1:49:fe:36:
         52:61:2a:b1:c6:f6:e2:a6:a3:95:cd:a3:1e:73:83:c5:93:09:
         81:e6:b5:dd:2d:39:08:e6:09:71:7e:48:04:d2:e4:71:f0:ab:
         7d:c5:50:74:cf:e3:73:52:c6:4d:13:a8:74:fb:01:30:c3:c9:
         cc:b6:18:67:c4:3c:e1:ca:61:42:d2:7c:4b:4a:e2:21:77:f7:
         11:96:de:6f:24:9f:db:1a:2a:a5:e5:66:ca:72:00:18:f2:c3:
         e5:48:b0:ac:2e:74:c6:58:98:30:13:79:db:a2:9b:42:29:c8:
         af:b6:10:60:f5:a3:68:db:33:49:b6:ce:4f:e4:1e:14:56:59:
         78:66:37:43:cf:af:1b:77:2b:c8:de:15:69:53:1e:5f:5f:44:
         18:6c:dc:cc:92:fb:44:41:fb:c3:7e:41:96:75:6d:67:83:01:
         f0:0c:85:13:ad:fa:2c:1c:2a:ca:74:78:b4:65:8f:92:73:67:
         8a:b7:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----