Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File:                     EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier:          30wy/bBk7DKcTgsKkveut9YboK4mRXHZipfI0x0XPok=
Subject key identifier:   DA:6E:67:02:62:C8:E7:DF:58:CC:FC:C0:4A:92:4F:95:7E:25:07:62
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer:       /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial:       01962ECFC897C98D2A95CB92226EB4FC257F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number:          0FE9
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: 7bDewaTTEhogzrumz8J4bCzDyB+yGAFeQRhwSfOy2RE=)
                          2: OeOSm1lTsF2ojoWr7AK5puld71w.roa (hash: sBfPXwoK80Ap89UcF88+lv2T3MvsaF6wu5UIRm/3Bkk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c8:97:c9:8d:2a:95:cb:92:22:6e:b4:fc:25:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=da6e670262c8e7df58ccfcc04a924f957e250762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:9e:2f:36:4f:c2:43:5a:2f:e9:f3:2b:34:
                    7d:d9:b8:68:c2:7d:78:1a:65:f7:9c:e4:f5:ad:04:
                    86:29:6c:1d:da:32:83:40:d3:09:82:71:4e:af:68:
                    61:9c:98:6e:c5:b0:e0:34:5a:a4:17:30:3a:a2:56:
                    80:82:6f:0c:e2:f1:83:fe:21:93:29:fc:6e:e1:6f:
                    3e:de:ab:9c:b6:7c:8b:9c:4e:0b:a0:19:4b:2a:dc:
                    e7:5a:e8:1f:21:52:7a:84:d7:b5:e8:76:8b:cd:f9:
                    0a:ca:7c:32:f2:ed:2b:c2:e2:dd:5d:e4:3b:db:4e:
                    6d:03:45:dc:a2:1f:44:d9:53:a9:e3:74:0e:22:91:
                    ed:58:3e:f7:82:04:5f:4d:c5:4c:ab:a4:da:36:56:
                    80:47:f6:f4:2a:2c:fe:28:96:8c:7c:53:f9:6c:fd:
                    57:3e:e6:af:20:8e:51:5b:61:42:44:f8:d9:18:66:
                    ce:92:30:4d:30:97:5b:1b:f7:94:41:a8:55:e6:12:
                    3e:c5:9a:6a:7f:b9:5a:a5:3e:e4:03:32:f4:06:99:
                    a2:f3:ea:c0:9e:a1:0c:e2:2a:b3:84:b7:a2:e2:e4:
                    67:81:22:22:7e:81:de:ea:1b:53:a9:5e:3a:46:19:
                    da:48:a0:9f:76:bb:fb:de:53:f6:c5:34:2c:a2:81:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6E:67:02:62:C8:E7:DF:58:CC:FC:C0:4A:92:4F:95:7E:25:07:62
            X509v3 Authority Key Identifier:
                keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:18:09:d4:72:39:d0:39:8e:19:ad:ba:e7:45:36:8d:3f:e9:
         ac:8b:7d:26:9b:c5:7e:39:09:ff:03:2f:85:08:78:b7:06:44:
         04:8f:46:dd:c5:18:1b:3c:24:50:74:5c:9f:83:a8:f5:77:b3:
         73:42:b4:bc:62:b9:50:f3:71:1a:1f:02:41:f9:bb:6a:b7:9c:
         31:c1:48:8b:34:aa:6c:be:3f:f0:98:cf:66:a1:0e:38:6b:dc:
         41:30:14:18:81:83:4c:3e:81:60:9d:66:38:1f:c9:e0:cd:ea:
         80:5f:d6:f9:82:7b:71:df:84:99:46:34:25:a3:4c:e1:3c:19:
         50:84:7e:cc:50:93:0f:76:e6:5a:a9:37:55:6f:e6:84:69:82:
         e0:1c:39:b2:a2:d0:29:d8:07:90:df:e5:69:61:67:4f:9b:5f:
         6a:7c:78:ca:c6:e2:4b:58:4e:77:f0:52:f9:ff:94:a4:b2:09:
         ed:7f:b6:36:86:ea:f1:13:51:f4:a9:22:f4:f8:02:13:9e:14:
         d4:8d:84:02:63:8d:25:6c:29:12:57:60:e9:4b:35:36:8d:a0:
         5c:9b:25:1d:cd:93:3f:3d:0d:c3:ac:d4:12:2c:cd:4e:ff:89:
         db:8e:55:95:ee:2e:ec:fd:67:bc:79:8a:e4:27:1e:43:1f:bd:
         5b:32:19:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----