Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File:                     ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier:          gGTQst9XXZ0gnEsu7BewFQ6bHlgKnNokv6HDq/zeKb0=
Subject key identifier:   F5:EF:FC:82:A9:CD:F6:8D:6E:87:F4:3A:4E:C1:58:21:D8:87:F3:BC
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer:       /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial:       01962F07133257FDD0F36C9BCE6C2CD75B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: FciP2xwcV3xPRtnXfSiCoZ9ZeYM.roa (hash: qFj6Ki0fNJUUk7+HsdPDeunKpSbjzg1RQIOCqYO9NpQ=)
                          2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: P0e7lbheSicPzdPnda1V2pm/EFcoRu5P1klEBU4H5uE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:13:32:57:fd:d0:f3:6c:9b:ce:6c:2c:d7:5b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=f5effc82a9cdf68d6e87f43a4ec15821d887f3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b9:46:66:3c:a6:07:0b:20:3d:90:30:23:b4:
                    ae:b6:9f:90:ec:42:29:0a:a5:18:69:af:22:f7:81:
                    79:44:24:af:fd:17:36:dc:ed:1b:ee:df:1c:b1:07:
                    43:50:7e:30:9a:95:a0:e3:37:dd:53:7a:a6:af:39:
                    32:22:e6:2c:dc:cb:39:6f:9c:11:01:3b:08:1f:d5:
                    bf:3e:8e:3f:9b:b4:ed:f1:94:cd:e9:71:cf:96:16:
                    a7:6c:b1:e7:fd:11:50:15:5d:33:11:e6:3c:b8:b3:
                    20:f4:eb:8f:0c:ac:db:f9:a8:51:58:89:4c:1a:32:
                    5c:f5:a2:76:bf:5f:94:1d:e7:97:ca:8d:61:b5:69:
                    2f:09:05:39:ba:ba:01:fc:a7:54:5e:22:4d:54:61:
                    00:56:b0:b1:05:b9:e9:86:36:a1:86:5d:e4:c2:eb:
                    f2:88:2f:ec:a4:6c:c4:76:cd:b2:dc:15:9e:18:3f:
                    7e:d2:83:37:f2:f1:17:08:95:2c:80:dc:14:55:6c:
                    f8:fa:cb:69:cf:7e:47:0a:f6:5f:2f:e6:22:55:97:
                    1b:cb:0f:52:9f:9c:c9:c3:78:05:b0:ce:cf:42:1e:
                    1c:18:ab:56:0f:1f:c7:31:7e:a1:f9:39:ca:2f:da:
                    6c:ba:5d:bd:0d:6c:90:74:ff:77:58:16:74:77:83:
                    b0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EF:FC:82:A9:CD:F6:8D:6E:87:F4:3A:4E:C1:58:21:D8:87:F3:BC
            X509v3 Authority Key Identifier:
                keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:66:9d:75:1d:db:ea:bf:00:d3:42:2a:08:a0:4b:bb:7b:e4:
         95:88:72:cc:72:e9:1a:f9:18:65:45:b0:a8:b2:c7:00:a3:0a:
         7b:5d:c1:1c:0b:39:0b:4d:d5:b2:7c:f0:92:65:42:20:d1:c2:
         e1:76:58:2f:0b:68:57:dd:42:00:2c:5a:9b:6b:64:05:be:7d:
         94:93:4b:3e:e9:50:de:0b:66:fb:8d:45:60:0c:7d:37:69:eb:
         e9:07:89:87:3b:5b:82:5c:ea:2f:df:41:7d:8b:0e:6e:e0:4b:
         a0:0b:7f:f2:04:9f:c2:95:db:21:2e:be:5b:94:96:98:8f:07:
         ee:52:67:99:68:a2:23:50:63:56:47:01:e6:0a:0e:21:3c:80:
         80:ae:27:31:49:c6:5f:b8:25:03:ec:1f:b0:aa:e4:77:f2:6c:
         e9:8b:de:3e:03:06:74:89:77:49:ed:d5:0c:dd:0e:f2:f0:b3:
         80:a4:de:5a:96:a4:3f:3b:96:2a:fc:fe:2d:99:46:fc:72:13:
         3d:bf:72:36:c0:ef:f2:86:be:09:c4:cd:34:d9:74:3b:d5:b7:
         54:8d:13:45:3b:fc:e4:ff:27:9e:2a:35:7f:08:a1:ca:e5:0d:
         4e:61:a7:d4:c2:e0:86:87:a3:a4:a7:b9:e4:c9:f7:3e:c0:22:
         7d:ac:2b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----