Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File:                     4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier:          msaMupMzvD6GOpGh5YrV6exkgCpLgnQKGeu5EP/AR7E=
Subject key identifier:   79:68:26:7C:8B:C3:18:32:2E:A2:D0:F8:A2:CA:B2:09:AA:1D:CB:35
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer:       /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial:       01962F744230DD01AC6A99F6CE48D156F004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: 26ZaozWyw6WS9LOiGA/6DSx0NNZsnAwqul+QoOHiIvQ=)
                          2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:42:30:dd:01:ac:6a:99:f6:ce:48:d1:56:f0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=7968267c8bc318322ea2d0f8a2cab209aa1dcb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:48:47:1e:1d:a0:d0:3c:92:d6:43:14:2b:
                    5a:6f:33:9a:7a:3b:40:cf:dd:63:7e:17:97:4b:71:
                    e6:c9:46:a2:34:94:7d:df:19:1c:ed:c4:cc:7b:f8:
                    a5:53:27:69:8d:ad:03:78:14:ea:26:ee:a7:4a:9f:
                    35:27:ba:57:15:03:88:c3:d6:f2:de:d5:fb:41:bb:
                    de:e4:b5:20:8f:77:0e:5b:36:2e:08:5d:d0:08:3b:
                    3f:f3:72:77:6e:38:f4:8a:94:92:6c:d8:96:73:3a:
                    80:82:18:60:58:35:c3:13:08:ca:1f:45:3c:cc:21:
                    07:ac:dc:a6:80:4f:e9:6d:1b:06:c1:2f:bd:25:46:
                    d1:99:69:cc:2a:c8:50:c0:59:e3:2a:0a:23:f1:29:
                    fa:d6:85:dc:73:b0:a0:6d:f3:8c:ca:ab:c4:87:81:
                    f1:df:e1:18:05:b5:0b:dc:66:18:7e:a4:28:d8:c7:
                    a5:cd:6c:22:a5:64:b7:52:5e:ad:0f:78:62:f8:fa:
                    79:f1:86:4b:88:0d:7e:87:56:a8:c2:8f:17:69:5b:
                    a5:fb:5d:86:5f:af:02:93:0d:d6:27:01:9a:d3:54:
                    6e:32:28:b6:66:4b:9c:24:dd:25:0b:6e:81:37:6f:
                    73:78:36:ae:51:9c:7f:f3:eb:5f:4a:37:1d:54:bd:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:68:26:7C:8B:C3:18:32:2E:A2:D0:F8:A2:CA:B2:09:AA:1D:CB:35
            X509v3 Authority Key Identifier:
                keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:05:a5:51:96:58:9e:81:35:4f:11:9a:34:58:c3:ac:41:2d:
         0d:ff:d4:a4:07:ab:15:98:76:1d:bd:58:4f:64:77:0f:55:d5:
         58:ef:28:d3:eb:9e:a5:c2:5c:de:75:60:3b:e8:b9:0f:ee:16:
         12:40:b3:fe:73:bb:9d:cc:92:2f:88:3b:e3:bd:f6:6a:a1:6c:
         7b:43:18:41:3b:36:a5:4f:6a:8c:8e:f0:ae:ec:81:a3:96:92:
         a3:29:ee:dd:63:b9:7b:b8:49:06:fc:6d:c0:68:bd:0c:69:a0:
         f0:d4:33:7a:a2:24:fb:10:2f:aa:26:4e:ef:b6:4a:61:ad:e6:
         9d:a2:1a:d6:8a:62:a9:4a:05:2f:3e:87:da:98:c6:fc:35:8a:
         8e:e8:84:b8:50:f5:14:ec:dd:af:bc:21:6c:fe:d0:2b:a1:70:
         5d:9e:e8:33:aa:53:56:c1:9d:ff:45:cc:28:f5:d6:ff:bf:2f:
         14:8b:0e:cc:8d:6b:90:15:90:74:74:c7:be:0a:0e:d7:09:b6:
         33:32:6d:53:7e:fc:a7:e7:e2:89:58:8b:d8:fc:7d:81:e9:ef:
         1b:2d:e1:66:e9:93:1c:f4:e3:50:83:f4:28:f9:6f:4f:ca:81:
         38:e1:9b:46:44:d0:e0:15:26:09:14:69:07:6b:c0:eb:da:92:
         0a:74:dc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----