Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File:                     cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier:          qrmJHWMnQjj+0nu8MoRlN6gcTAS9qWIoH0ipbzNxbsY=
Subject key identifier:   2E:E2:EC:8A:26:91:84:74:84:D5:11:91:D4:16:82:79:24:13:E2:FD
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer:       /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial:       01962E61D48C990B5074B400DACA09FF6609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: MmMjPcmgSnmpat_UrnnkwrG8N3M.roa (hash: P+6oU+/zVxV3KfOFEMlrjbqkg2yguA/0UthTHnReUm8=)
                          2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: 1ZGC/VJTRsYi/s823Yzsc/hpEz6ZIleu+SjzRaxdhJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d4:8c:99:0b:50:74:b4:00:da:ca:09:ff:66:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=2ee2ec8a2691847484d51191d41682792413e2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f4:39:40:8d:9c:45:4a:1e:98:9f:7b:2d:46:
                    da:53:67:5c:95:31:d1:78:c6:24:d6:b9:02:51:38:
                    9c:75:89:b7:69:44:be:bb:74:8d:f1:0d:c2:91:1b:
                    cc:44:86:6b:8e:45:2e:22:22:18:6f:ce:b7:fc:67:
                    66:15:5d:08:51:bb:38:94:1e:c6:c9:1a:35:72:3c:
                    25:8d:77:22:1d:cf:0c:c4:88:93:66:36:3a:ee:31:
                    02:8e:47:b6:4d:de:fd:e4:62:2e:bb:c0:a8:a3:dc:
                    c6:42:91:f1:77:92:1b:36:fb:57:0a:28:ac:4e:2a:
                    42:db:c0:d7:dd:65:66:c0:b3:16:31:47:90:da:80:
                    54:23:e6:15:59:40:f7:10:bf:1c:7d:52:27:8d:9b:
                    0c:01:22:22:db:d8:05:ec:d1:95:f9:96:ca:60:c3:
                    29:1b:e5:44:da:86:e7:6a:ae:9d:6e:ec:cc:d5:4f:
                    84:6b:8e:b6:15:ef:55:8a:c0:26:3d:de:18:19:7c:
                    50:c6:2d:cb:24:e5:09:d9:e8:58:d6:3c:62:b7:77:
                    a4:58:87:b4:0f:ab:79:d2:63:41:d6:39:51:b5:dc:
                    c8:10:d1:11:48:b0:f8:91:92:13:41:a6:0a:ca:a6:
                    a5:e6:65:c8:0a:d7:20:76:75:c5:d2:ec:15:80:91:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E2:EC:8A:26:91:84:74:84:D5:11:91:D4:16:82:79:24:13:E2:FD
            X509v3 Authority Key Identifier:
                keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:c7:14:1d:94:d2:91:a8:77:09:98:c2:1b:89:c8:57:06:4a:
         28:6f:82:89:9b:df:38:d1:25:f5:dd:f1:1b:a6:86:e3:eb:6b:
         87:7a:d7:ca:11:27:74:0c:b3:1e:dc:67:c0:d4:4f:5d:bf:3f:
         13:66:a9:53:54:53:ca:fb:f2:b9:f4:36:d5:56:20:df:e5:03:
         6b:41:d7:f2:72:01:81:e0:80:40:40:9b:27:55:88:91:84:10:
         b0:a5:42:ce:55:5a:92:62:5d:3f:c1:a2:5d:71:53:82:1f:2c:
         26:27:3e:40:f6:9e:85:a7:67:f7:f1:ec:28:bb:a8:23:a7:3a:
         3e:02:1a:60:db:2c:2c:cd:90:1a:ad:f1:54:88:75:b4:9e:ce:
         d9:80:31:0f:c8:ab:ec:5f:e5:e2:11:ea:46:85:22:4c:9b:67:
         69:f6:d0:98:4e:14:fc:68:29:c3:73:c7:db:be:7d:7c:ae:cf:
         87:fc:5f:90:aa:e9:59:ae:c2:b6:fb:9f:dd:07:c6:a9:ee:25:
         34:b5:f3:59:b1:21:59:a3:8c:2d:be:01:5e:05:c4:70:81:39:
         79:f1:64:ef:fd:01:b5:f6:ed:ef:1c:e5:14:54:97:fa:c9:26:
         d1:ea:fd:50:3b:6e:e8:3d:f5:19:af:68:ac:ad:78:1d:f4:eb:
         95:8b:61:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----