Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
File:                     EEwNyHsCIy5J3FTU_79Ele4DNlU.mft (raw, json)
Hash identifier:          PeSep2AXPjCZMJ33NebQdduR4Oe+vPqrlV0Pax9l2Ik=
Subject key identifier:   F3:B1:0C:5B:C8:44:9C:44:40:C3:86:22:A7:6F:D1:96:10:57:9F:1D
Authority key identifier: 10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55
Certificate issuer:       /CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
Certificate serial:       01962F742756D75858760A947693762B2101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
Manifest number:          09DF
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: EEwNyHsCIy5J3FTU_79Ele4DNlU.crl (hash: aFYQSMm2NVwE+3ZA3zR6k6fKgEp//KNPrrq6VIxTj7U=)
                          2: gFd5tgCJMeij35zzi5bD-2NK_Kg.roa (hash: Z6aGas3PZ0QdIX51TPr1IW3EEbWOk5nQI3+RmZvvBLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:27:56:d7:58:58:76:0a:94:76:93:76:2b:21:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=f3b10c5bc8449c4440c38622a76fd19610579f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:d8:b9:1e:e9:7f:3d:2d:94:f1:a4:02:7b:
                    59:3c:41:0d:f8:52:18:4f:ec:07:f3:b7:e9:22:a6:
                    68:f1:d4:25:38:87:02:d6:e5:ea:98:e2:b2:1f:fd:
                    a8:0d:fa:23:ec:3d:16:45:e9:3d:0d:75:cf:4e:57:
                    6d:ef:8a:56:6b:30:83:e1:b8:ff:30:4b:5a:cb:62:
                    9e:99:d2:8f:d4:d6:bd:f5:07:d2:24:25:74:1b:e5:
                    ee:3a:05:b5:e1:a6:16:92:c3:bf:36:c7:6c:32:77:
                    c4:88:e3:51:f0:a7:b2:6b:2b:55:3a:9b:04:a5:4e:
                    ec:1c:fe:c9:5d:35:4a:df:70:4e:dd:4c:3a:a5:fb:
                    a3:09:36:36:4a:5c:80:e0:05:62:df:ea:9f:f8:92:
                    78:d0:77:5d:76:95:a9:aa:98:c4:c3:cf:40:5a:e6:
                    b8:5c:9c:29:02:a3:ef:a5:ea:e5:40:61:e1:9c:7e:
                    2e:95:d6:b9:5c:9e:87:b1:b8:36:41:7a:05:4c:7b:
                    a9:6d:5c:cb:9c:2a:f9:7f:24:a3:28:70:ac:ff:35:
                    fe:1b:34:e1:30:06:53:b6:8c:6a:18:80:14:55:f5:
                    88:13:4c:41:14:90:72:70:20:54:10:43:ca:7e:cd:
                    45:90:17:bd:d6:26:4f:d7:7f:44:28:c0:0c:ab:30:
                    09:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B1:0C:5B:C8:44:9C:44:40:C3:86:22:A7:6F:D1:96:10:57:9F:1D
            X509v3 Authority Key Identifier:
                keyid:10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:a7:13:a9:e4:42:85:79:9f:a8:40:e3:f2:ce:bf:e4:d6:
         12:12:d8:98:7c:20:e5:6d:65:d2:c8:7b:03:1a:8b:70:f4:47:
         54:7b:5a:69:56:be:c0:33:d5:67:8a:c5:dc:29:95:e7:eb:7c:
         7f:4c:df:d4:90:1c:c7:86:e3:b5:5b:a9:a6:b0:36:d3:8a:02:
         34:e7:31:5b:df:94:37:5e:84:a8:46:4a:13:6a:c7:99:b6:d8:
         59:95:f3:44:11:58:b1:12:51:7b:d7:cc:f0:f1:e8:df:81:b6:
         16:3d:75:34:39:9f:86:7c:2c:7f:e8:d9:81:f3:12:31:0c:ed:
         8e:95:7d:a8:f3:98:1a:b4:f0:d7:d1:de:25:dd:02:a2:32:0d:
         2e:0b:65:40:e5:39:ab:74:a1:e4:c0:3a:05:aa:34:5c:86:7d:
         94:30:47:f9:c3:60:d8:cb:26:a7:02:99:7a:9a:03:c4:da:a7:
         4d:44:46:be:78:de:a6:52:97:a5:88:28:46:df:ef:21:18:21:
         8c:3f:8f:3a:b2:72:a0:21:f2:e2:b4:90:3a:20:ab:e0:3b:1e:
         37:58:c4:14:96:44:e9:28:4b:19:15:3d:0b:d3:0d:86:b0:9d:
         3d:60:00:50:22:d6:1a:15:9b:0d:e2:70:4f:80:95:cc:c9:44:
         34:51:0f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----