Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File:                     1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier:          vLSbPxcGnpiXU+dIC5LEmlF0hTJgnJaJ0no/L0amhqg=
Subject key identifier:   62:12:57:EA:B5:18:20:4C:6B:13:6A:AD:FD:E0:EB:75:FE:14:7C:DE
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer:       /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial:       01962ECFE38CE486F2DDBFC321D817229AF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: 2wBQC0IBoeHe8pfAt39FUsS9yW1p3fMsU2xwJJso7cc=)
                          2: RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa (hash: BNo8QMwK2CvmHYQFxYebo4KjKZTrRv5gh0bqfDREWd8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e3:8c:e4:86:f2:dd:bf:c3:21:d8:17:22:9a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=621257eab518204c6b136aadfde0eb75fe147cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:db:bb:65:40:9e:af:22:16:fb:a9:93:58:7a:
                    0b:65:97:0b:ca:4a:3d:f2:d9:a6:b4:82:90:2a:ee:
                    b0:4c:f7:67:8c:0c:63:11:4f:67:42:71:ae:09:d6:
                    18:0b:14:d6:83:3e:e8:0e:ca:64:f2:df:c5:c3:87:
                    a5:c8:de:e3:cc:b0:f8:6e:ba:77:68:e1:94:3a:6c:
                    a5:77:cc:77:fc:7f:f3:db:fa:ca:e3:f7:56:dc:3a:
                    b5:53:3a:ac:8d:bc:f0:65:96:79:a8:43:d6:84:94:
                    e0:52:60:86:26:57:65:92:7d:42:07:e1:b1:2c:91:
                    f2:4e:7b:4b:77:34:9c:0e:a5:97:42:df:18:53:2b:
                    de:4f:bc:2a:e2:80:82:6d:70:44:f0:cc:84:da:a1:
                    fe:6a:52:d0:71:db:a0:29:71:9b:67:f3:f1:8d:12:
                    48:24:7a:64:c9:e0:8e:76:01:57:fd:61:d7:e4:05:
                    9d:3a:3a:79:b9:8c:13:e4:06:7d:b7:63:6a:38:a4:
                    6d:72:af:2b:6d:69:68:80:cf:a7:0b:48:f8:56:ce:
                    f1:21:d0:de:a9:7a:0b:07:55:ec:7a:f4:51:98:14:
                    33:3d:43:fa:fe:24:27:b8:34:25:04:86:b8:0d:a6:
                    25:e9:da:8c:ea:c1:ba:28:a9:1c:d4:ca:89:27:5b:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:12:57:EA:B5:18:20:4C:6B:13:6A:AD:FD:E0:EB:75:FE:14:7C:DE
            X509v3 Authority Key Identifier:
                keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:31:2f:a2:d6:97:2b:3e:48:32:e6:59:79:f1:31:c8:77:c5:
         12:c1:35:0b:30:55:3b:9f:c1:c3:6b:ab:9f:8c:04:94:8f:0c:
         e3:af:5a:c0:f8:bb:6a:25:e6:5a:95:e7:82:b6:8f:cc:20:11:
         18:ea:ca:a4:07:a3:7e:26:32:ae:61:27:17:0f:8c:e7:7c:df:
         81:e6:57:5f:33:69:d1:8a:b2:2f:e2:07:3b:57:12:e0:da:5f:
         ba:c3:aa:a9:b1:66:84:88:6b:a7:16:1d:f0:cf:a8:34:14:5b:
         d2:15:08:75:d0:8e:b9:b4:3b:c2:6b:78:48:aa:cd:e4:5e:98:
         e3:f7:28:fc:8c:6b:07:38:87:9b:fe:41:61:75:18:1e:fb:25:
         dd:61:99:ba:b0:98:cb:80:b9:19:fa:77:28:d1:cf:72:65:f7:
         f8:cf:66:37:60:cb:6f:b7:f3:ef:6d:4a:58:5d:48:ed:a4:58:
         68:47:87:42:19:9c:56:c3:5a:a9:79:89:99:d2:93:a8:3d:c1:
         2d:f8:67:69:e5:09:ef:69:21:fe:ff:1a:98:26:d9:4b:67:5e:
         41:14:7f:41:7b:ef:df:8a:4f:23:ea:68:f4:f7:25:ae:42:d5:
         1e:52:d1:f6:88:7a:e9:c8:34:46:ce:26:5c:18:8c:ed:4a:f1:
         0b:30:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----