Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
File:                     EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft (raw, json)
Hash identifier:          8Wj2ur+xzsJSfUww1OtSa7jZFIYsUCrNJOilBOkCuMQ=
Subject key identifier:   DD:76:DD:0F:56:68:BF:5A:F1:50:FA:3A:42:FB:50:C9:5A:2F:55:1B
Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
Certificate issuer:       /CN=110aaf9016a68752fc9132149b91e8fab16e24be
Certificate serial:       01962ECF8E2209348500303EA98CEC569CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: 6R7l5Zc0F8S-RPgHqG7ELPTEGWs.roa (hash: qKcKkoUboZrcqtoprL7lO+GfuPllhw7eINNwNRAw7pk=)
                          2: EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl (hash: h8VO2G/RCLvkBNYMHz8VE2CLCd6icmRlI8SWHTCCrfE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8e:22:09:34:85:00:30:3e:a9:8c:ec:56:9c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=dd76dd0f5668bf5af150fa3a42fb50c95a2f551b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:ca:ee:cd:13:75:df:58:7c:9f:69:5f:c2:
                    df:dd:7b:6d:88:b3:ee:88:13:51:7e:f1:e2:d9:8b:
                    16:7a:dc:91:1f:b4:b4:16:06:21:e0:84:7e:ff:ac:
                    bd:6a:3b:7d:32:81:fc:6a:fa:f7:eb:66:b0:3e:ac:
                    af:ae:ed:6c:84:a5:33:3d:72:02:77:98:3b:a9:90:
                    2d:78:8f:d4:b9:e0:11:aa:37:69:f7:3c:bd:6e:8b:
                    89:d6:bb:b0:8c:62:d4:d1:92:1f:54:0e:4a:a7:25:
                    89:20:b9:29:52:4c:a5:bc:aa:17:f9:4b:1a:4f:02:
                    91:af:d4:7c:a3:ae:dc:ba:4c:7d:51:72:81:53:1b:
                    65:a1:cd:6c:ec:0c:8a:91:27:83:4a:6e:08:af:05:
                    b7:f4:c8:76:7f:f1:27:c7:3c:36:28:8f:0b:7e:ab:
                    72:30:19:69:25:55:04:49:ae:b4:89:6f:43:6c:f7:
                    7c:d4:f5:c6:5d:96:7a:23:58:99:a6:86:4c:00:39:
                    b8:0a:dd:75:a1:e6:c0:fa:91:fe:64:74:52:1c:86:
                    00:03:12:7a:17:21:61:9e:12:b5:d2:7d:64:02:fa:
                    ee:f1:df:a1:5b:30:68:bb:79:38:ca:a0:be:8f:52:
                    3c:b2:6e:0f:fd:45:21:1f:6a:6e:fa:26:16:34:b9:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:76:DD:0F:56:68:BF:5A:F1:50:FA:3A:42:FB:50:C9:5A:2F:55:1B
            X509v3 Authority Key Identifier:
                keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:67:50:f8:7c:25:f1:b0:56:b7:f8:49:05:57:42:6e:e4:
         49:8e:3e:31:55:bd:40:43:8a:4f:56:2f:59:05:8e:2a:57:72:
         78:ab:d1:ad:46:c4:9d:b1:91:79:0e:29:bd:b0:df:72:9e:75:
         0e:83:61:ac:33:7a:24:d4:2d:76:a5:ba:bc:ee:b8:8c:a1:2a:
         a7:e8:5a:c6:5e:88:8f:be:cc:d2:ce:95:08:9e:a3:d6:ed:14:
         33:0b:50:aa:f9:ae:57:36:d2:e9:36:42:f5:50:ea:c3:e9:a6:
         35:a6:cd:45:b5:4f:95:29:8d:12:8e:39:49:c0:80:b5:45:b2:
         32:28:d2:15:57:f4:54:20:91:e1:9a:8d:e2:fb:90:84:26:4a:
         d8:2a:57:1f:48:9c:a2:87:9d:73:7a:08:a4:7a:76:ce:6a:b0:
         77:b3:9e:ef:ef:90:79:8d:ba:34:cc:26:91:c2:a9:9b:48:73:
         7c:79:d1:93:b1:b9:d5:fd:6d:e9:3b:c3:c7:c4:ae:29:13:a6:
         98:c3:e1:57:46:d7:54:80:7b:06:44:89:74:20:f5:02:6b:38:
         2b:0b:44:84:a9:d1:ab:38:7c:19:a4:90:4a:5e:9a:a5:ca:f1:
         43:84:37:be:26:53:e1:77:ae:fc:91:a0:25:f1:49:b8:7d:54:
         ae:f9:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----