Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
File:                     eMceZc96PS4vwrjMPUPUXSs1DfM.mft (raw, json)
Hash identifier:          tf5hPsxkEQG4sqUGNEAQlbNnvf/fEDGnmdyi13ks2DQ=
Subject key identifier:   47:4D:ED:65:06:E7:97:E0:85:1A:FE:32:04:E0:1E:C5:3D:F9:39:59
Authority key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
Certificate issuer:       /CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Certificate serial:       01962F74CD05947329231E849884DF42F45F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: Ox2PlsCArfAxGifmEfuqjyRe0E4.roa (hash: P6BNeUEGLL42TOaGFO8umGbX15BxZNmI6g3Fgb2PRFA=)
                          2: eMceZc96PS4vwrjMPUPUXSs1DfM.crl (hash: 33USrpCGJQQO7RDBxbG1fGyfMDZ4a5jpsvmYiLsCA7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cd:05:94:73:29:23:1e:84:98:84:df:42:f4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=474ded6506e797e0851afe3204e01ec53df93959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:15:19:37:7c:e3:bc:a2:29:be:35:5b:26:f3:
                    bc:41:c1:96:59:99:34:29:15:9a:94:50:cf:09:7c:
                    0e:88:09:94:dd:36:00:77:a0:e5:49:c2:41:a9:4f:
                    1e:bd:18:19:e7:2c:51:0c:9c:ea:ac:e0:0d:2a:3c:
                    a0:c0:97:88:bd:d4:d5:49:2b:9c:a7:68:ad:ac:e5:
                    d9:ca:f5:ad:42:a8:93:5a:84:e5:66:b5:6d:e9:1f:
                    a1:16:09:b6:e3:1f:ce:79:bf:ed:bf:c0:1a:82:fe:
                    8c:2a:34:40:03:f3:92:d5:00:8b:7d:e3:32:0f:ca:
                    82:ba:ce:0d:37:a1:1c:11:0c:3c:06:20:43:57:45:
                    8e:71:22:b8:82:43:90:d7:70:a7:67:1b:1b:0d:3b:
                    9c:a8:74:af:71:c6:96:23:c5:58:d5:ec:61:20:2d:
                    6a:11:84:fd:64:12:d6:a1:3f:1b:da:45:5a:29:f8:
                    98:52:d1:3f:53:b5:44:0c:39:33:20:36:2f:e7:f7:
                    4e:a6:71:48:a7:8a:1f:23:69:8d:6e:a0:39:55:31:
                    22:35:95:29:78:ec:e4:07:7b:c6:75:76:1f:1d:3b:
                    67:28:5a:54:a2:3c:cd:e9:33:25:24:52:51:f8:54:
                    6c:57:6f:ea:8e:01:7b:19:53:ea:f7:2c:16:71:42:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4D:ED:65:06:E7:97:E0:85:1A:FE:32:04:E0:1E:C5:3D:F9:39:59
            X509v3 Authority Key Identifier:
                keyid:78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5e:2c:84:eb:d5:75:10:c4:29:14:4a:c0:b2:a3:cb:7e:b5:
         21:70:a0:98:80:1b:f9:d2:16:f7:3f:7e:d1:7d:f1:b6:86:c7:
         8d:e4:8e:ae:09:ba:00:36:d0:f3:02:5e:89:ea:8a:b2:8c:24:
         df:aa:6d:28:97:43:a9:75:e7:37:0e:58:67:37:3c:7c:ac:d1:
         af:b6:de:28:a7:19:38:8c:49:45:1e:02:57:dd:70:24:56:ae:
         4a:cc:05:33:60:ed:fd:cd:7d:ce:4b:14:b6:0c:cc:76:fb:bb:
         02:fa:a2:ae:1e:71:df:4d:27:1e:e4:a1:f0:96:5d:1b:87:9b:
         64:18:f8:c7:40:92:62:8d:ec:61:95:5b:c8:d5:08:da:b8:4e:
         39:5c:c1:3e:d4:5e:aa:b5:9c:b4:3e:37:20:b1:9b:2b:54:58:
         9b:9a:c7:b5:b4:a0:b4:ee:82:ba:9a:79:8c:c7:61:1f:eb:9b:
         a4:3f:a3:10:c7:c0:5a:fd:53:1e:02:e6:bc:39:78:68:1c:2f:
         e5:7d:f7:dd:83:bd:0d:4d:95:f7:07:df:0b:3e:e9:29:fe:ce:
         38:a8:08:35:f8:51:bf:34:ae:b1:81:32:6b:6b:f0:12:49:be:
         33:24:9e:9a:95:55:c7:3a:61:76:d1:79:a0:d1:86:e9:64:53:
         8b:82:58:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----