Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File:                     eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier:          Ft4J4OCqFxjn8dpsGCOnazrxdwWRl17UoopbzwwJ8HM=
Subject key identifier:   CD:00:DD:4B:1E:15:FC:02:9D:83:2A:F7:3C:09:6B:37:5E:89:D2:29
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer:       /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial:       01962F74B078D912E5C3E726D8A49FD3E34E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number:          0EAC
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=)
                          2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=)
                          3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: +/65yO8ZeFhxjHTGpDdpJ38UONH359hUpZkjOpb1woM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b0:78:d9:12:e5:c3:e7:26:d8:a4:9f:d3:e3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=cd00dd4b1e15fc029d832af73c096b375e89d229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:a6:0e:f3:dc:83:fc:17:a2:50:41:56:3f:
                    e3:f7:57:08:02:2d:96:ab:2e:a7:07:73:a8:54:19:
                    a8:75:9b:f3:fe:a5:bc:ce:fc:56:9f:36:e4:8e:b6:
                    a8:22:1e:65:2c:d9:56:84:97:0f:66:7f:5f:a2:be:
                    2e:11:0c:56:8f:36:f2:db:0b:12:e7:51:94:4e:95:
                    a2:13:b6:4c:62:c3:78:e2:b7:a5:f5:fc:04:86:9a:
                    7f:38:b5:4d:83:7f:63:26:78:ae:fc:b7:02:35:af:
                    c6:3f:61:c5:45:3c:17:01:8b:ef:43:81:48:32:03:
                    ee:1b:d1:7e:c4:6c:fd:93:65:62:b1:87:6a:82:06:
                    04:ca:ea:d1:56:6f:28:f4:69:20:11:e5:ed:8e:f4:
                    89:d5:87:09:9a:29:8c:33:d6:b0:9b:51:db:cb:5c:
                    0c:bf:3a:e9:75:40:20:6f:71:35:9b:6c:95:75:3c:
                    de:26:5e:40:52:d1:a1:f8:45:86:fc:8d:e2:81:d5:
                    2f:9e:1c:bc:76:32:ea:c4:e7:7d:82:c9:06:a1:cb:
                    ba:95:8e:05:b8:4d:2d:fb:68:fd:35:c6:28:3b:dd:
                    dd:9d:3f:e9:e9:74:66:bf:e7:87:0e:f5:5f:c9:71:
                    ed:c1:4f:dd:09:a7:c9:99:4b:39:da:09:b4:ca:d7:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:00:DD:4B:1E:15:FC:02:9D:83:2A:F7:3C:09:6B:37:5E:89:D2:29
            X509v3 Authority Key Identifier:
                keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:29:26:55:e8:71:71:6b:1a:79:07:25:85:5f:a3:47:6e:73:
         e3:5b:3b:e7:86:92:67:d1:26:d2:f5:1f:79:99:6e:63:78:37:
         aa:28:f4:42:e1:2b:7c:18:a2:f2:49:09:0e:b1:cb:67:33:17:
         e2:d2:48:cb:43:99:be:79:4f:e3:bb:1d:7e:4e:c9:fe:48:9d:
         4d:cf:91:82:4e:90:a9:5b:97:d8:c9:48:db:3d:7f:94:cb:71:
         5f:06:28:df:ad:c2:be:eb:54:a5:95:42:35:33:18:4f:e1:7b:
         35:19:ea:a1:dd:79:ef:2f:7f:01:11:9e:16:6d:0f:76:f8:32:
         a3:dc:9d:95:0f:e5:ab:f7:7b:42:fc:d0:95:b7:fb:cf:ea:bb:
         7b:0e:a0:66:a2:bd:b5:ff:83:c8:27:09:8c:e7:73:54:3d:de:
         53:c0:a8:f4:55:d6:37:95:1c:0c:f6:16:5e:63:ec:7d:28:00:
         8d:97:ad:94:05:7c:01:59:fe:5c:5d:96:e3:15:85:4a:48:6d:
         9e:f9:40:c8:c4:31:95:f5:ef:e0:e9:ca:d5:95:b7:41:20:35:
         c7:83:28:91:2e:2e:d9:91:1c:91:f3:9e:0e:11:84:8e:ef:ee:
         9f:e1:43:4c:2a:69:a5:93:ba:80:b3:11:58:15:06:81:53:04:
         2c:e4:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----