Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
File:                     edad2YMzVYQB7dGmAWgmXdGg2Vg.mft (raw, json)
Hash identifier:          eHYWh5BWtblgcOluKwLZdcJ2lVujuA72Yszo8Sz697s=
Subject key identifier:   9F:E5:2E:F2:51:C8:23:EE:04:C4:B5:04:50:58:A3:E7:8E:F5:5F:87
Authority key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
Certificate issuer:       /CN=79d69dd98333558401edd1a60168265dd1a0d958
Certificate serial:       01962ECF8B55A6490A02A9B32D229B2EC4A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: edad2YMzVYQB7dGmAWgmXdGg2Vg.crl (hash: UWtHsl0MZ9fuSU9ctaD5Dp3stlf32O9ytTMikjzDR34=)
                          2: hqnI55-BtuuM4vFpZ56v79LAU1E.roa (hash: de3zBJnkxcrGTCeqUEM+8xu6xpr3xr2UbYA58RD5CTg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8b:55:a6:49:0a:02:a9:b3:2d:22:9b:2e:c4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d69dd98333558401edd1a60168265dd1a0d958
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=9fe52ef251c823ee04c4b5045058a3e78ef55f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:a0:4c:94:70:83:c2:74:bf:99:e5:0e:20:
                    f6:df:74:19:2a:c6:20:cf:e6:ae:b9:eb:03:fb:2b:
                    1c:fc:01:79:d2:03:0f:f1:fb:50:6a:01:19:31:08:
                    75:de:4e:35:ad:da:ed:2c:38:c2:b3:3f:85:c1:5a:
                    48:c2:fd:4e:9c:d6:cf:a3:53:a6:92:7d:ef:67:60:
                    dc:f7:f1:39:d8:9f:d1:6e:ed:37:ef:b8:a9:6b:86:
                    88:4a:b0:8c:9e:32:91:17:34:dc:cb:42:e2:b0:ec:
                    d3:16:6d:48:9c:1e:08:58:7c:45:c1:91:71:d7:b5:
                    32:61:23:33:e8:be:cd:85:02:5d:24:42:b3:8e:1f:
                    35:de:fc:41:64:f1:20:2d:bb:e9:68:40:82:d3:97:
                    db:47:e1:d1:21:2e:75:79:61:1f:ab:ac:ff:08:f9:
                    f4:bf:dc:35:fd:2b:fd:06:99:22:71:f2:40:45:17:
                    d1:ca:6d:63:5b:35:c3:a0:61:bd:55:bc:28:28:2a:
                    f2:b6:a4:df:21:8d:ea:0b:d8:f9:20:be:02:85:81:
                    57:f0:e3:8b:1c:17:30:42:e7:ad:bb:aa:34:e6:94:
                    3a:ff:26:69:cd:fd:80:f2:c2:7a:9e:dd:42:7d:0a:
                    9a:07:51:17:06:dd:18:d0:59:47:8a:cb:f3:c2:64:
                    6f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E5:2E:F2:51:C8:23:EE:04:C4:B5:04:50:58:A3:E7:8E:F5:5F:87
            X509v3 Authority Key Identifier:
                keyid:79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ee:23:74:49:f8:0f:2b:53:ee:e1:00:8c:a5:cb:5e:7d:d5:
         99:ca:da:48:a6:64:ea:4c:7e:d2:f4:b9:6e:d0:ff:b8:f7:7d:
         e5:10:e3:73:c3:91:16:05:d3:f1:f9:03:2b:d2:b6:8a:50:bc:
         11:f1:ae:8f:0b:40:33:49:6b:e0:df:a8:a6:82:d9:65:17:39:
         d4:5d:56:19:14:b2:1b:d9:69:2a:d1:ce:71:7f:0a:28:78:7a:
         35:a6:b6:6d:18:ad:ee:dd:87:df:5e:11:02:d3:bb:27:46:02:
         32:a3:60:fd:af:86:40:14:f9:60:f9:2e:38:ac:40:98:97:85:
         4e:ff:d1:c5:44:e9:74:01:5c:a1:51:6b:79:94:76:d5:71:05:
         38:22:fb:fb:04:1e:1a:5e:ea:55:1e:43:d2:ce:a3:97:9b:ad:
         3f:ab:05:48:cd:9d:4e:d2:17:9f:5a:2d:0a:e1:51:80:0d:14:
         4b:4a:91:a2:d5:41:a2:e5:64:62:e2:17:a8:80:98:62:75:95:
         02:1d:c8:d5:cb:29:0e:d2:fb:3a:fb:59:08:0c:4e:be:65:c7:
         92:9b:cf:96:10:3b:36:a7:a5:09:e9:00:33:b3:88:8e:3e:16:
         43:e1:5f:ae:1c:da:d0:8f:9b:9b:6d:f9:3e:3f:fc:dd:11:a5:
         76:7b:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----