Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File:                     Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier:          4FzEmljjHQRN8KjFGpLhH7wEJMElDskh0+jYEiOVP2A=
Subject key identifier:   2C:7A:4E:23:68:6A:0A:1E:F4:53:D1:B3:C5:A1:3D:FF:9B:8D:7F:7A
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer:       /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial:       01962ECFA4AD4E53A1A32A3A69522BAC6FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: KxWnYSMmyJ8qtNLxunlp1aiJ7zHCyWhqFzM5SBYrKOg=)
                          2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a4:ad:4e:53:a1:a3:2a:3a:69:52:2b:ac:6f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=2c7a4e23686a0a1ef453d1b3c5a13dff9b8d7f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:c0:4e:28:dd:7f:da:04:30:3b:3a:fc:0c:
                    de:61:fe:29:c3:cc:a9:27:dc:20:88:d0:8e:4b:a2:
                    8b:6e:fa:bd:96:5d:48:8d:50:16:86:e9:e5:59:2d:
                    46:d3:54:a3:7f:66:b8:98:7d:52:94:ee:05:7b:f4:
                    c7:39:e4:70:10:16:53:c6:94:98:c3:69:b8:35:4a:
                    6d:5e:dd:3b:d1:c9:16:2a:3e:52:19:ca:93:1c:88:
                    66:37:29:60:35:1c:58:ef:2f:15:15:cb:3e:88:a4:
                    69:50:22:39:a8:2f:7b:4f:5d:94:7c:76:cf:80:bd:
                    00:a0:c0:b8:61:b6:0c:24:da:c7:f3:28:de:b6:a0:
                    c3:ff:80:8a:c4:1d:a2:2d:30:91:80:9e:85:a6:07:
                    7f:a6:98:7b:94:e7:fc:35:83:fc:8c:e4:ad:8a:70:
                    d7:4d:45:70:6f:fe:b0:04:8b:d9:dc:75:5b:f5:c1:
                    09:6a:10:60:05:81:e6:a9:70:d2:f3:04:d1:cc:d9:
                    ab:fa:9e:7e:a6:6f:b9:98:a0:ae:8b:85:55:e2:06:
                    0a:5a:f4:77:1a:9a:0a:86:b0:78:ae:77:c2:cc:2c:
                    0a:c7:82:8b:ee:59:06:16:c4:82:9e:9a:da:c4:fa:
                    a7:6f:5b:fd:12:b6:b7:85:0c:71:56:f6:0f:35:a9:
                    ab:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7A:4E:23:68:6A:0A:1E:F4:53:D1:B3:C5:A1:3D:FF:9B:8D:7F:7A
            X509v3 Authority Key Identifier:
                keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:cd:83:38:ee:ad:33:2c:04:24:fb:05:b0:8c:4b:ca:5e:
         ae:0e:47:0c:26:2b:ae:eb:24:98:f0:9c:84:6a:66:73:2e:6e:
         8b:eb:bc:30:57:47:a3:77:22:95:4c:fa:3d:6a:88:4b:b6:56:
         5a:86:12:66:eb:66:9d:2f:2d:d8:da:ff:04:28:d6:9d:d3:ab:
         20:53:5a:82:5d:bf:6b:0d:c2:90:3d:d7:60:da:fb:e3:fc:ff:
         7c:49:be:82:64:ce:cc:56:38:eb:c1:22:52:5b:04:f5:11:06:
         77:76:96:b7:30:57:66:4b:04:43:e8:64:d9:fa:b7:0b:d2:8d:
         02:15:c5:92:f1:23:74:93:93:72:e0:d2:1f:ff:1b:61:7f:e6:
         ad:05:33:49:29:e9:e9:b7:b2:1e:97:a5:e0:c4:7c:3f:ea:ac:
         8a:e4:d5:9c:9e:7d:15:e4:b9:9b:fc:6e:c0:1c:e4:42:f2:61:
         ba:92:1f:d8:8a:62:8a:9f:9b:26:8f:97:80:bb:1f:5f:a0:cd:
         57:b1:5d:34:6c:a0:18:c8:92:37:1a:16:49:7e:8f:24:b7:05:
         77:41:73:15:cd:ec:d7:8d:a0:ef:4a:27:c7:3d:15:4e:18:19:
         51:92:c5:36:e0:e6:46:64:cb:a7:1a:3c:5b:5d:43:3a:fd:f0:
         98:e0:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----