Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File:                     EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier:          KbZLBvuSCKHldVlrnEnT5j9CLQ0pjzHy1IAqgITuMWk=
Subject key identifier:   B9:7F:AE:9D:0C:56:F2:A5:A2:57:CD:C7:37:85:85:2F:38:AD:CB:F7
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer:       /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial:       01962F74C0F3A0B32CB9FD6449B4F549F084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number:          0F47
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: iNQcxMigi9QpVpeTI4lhDrzgncoORBRXoiNQp+JMybE=)
                          2: H9wALBVXz4YwYBX3cpmTiB3IeME.roa (hash: gBTMmmcoRwZuz+Iunak49khAmqfa7PJZOswCtQszyKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c0:f3:a0:b3:2c:b9:fd:64:49:b4:f5:49:f0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=b97fae9d0c56f2a5a257cdc73785852f38adcbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:1d:ff:77:38:05:2b:90:51:cf:54:91:4b:
                    14:26:ec:10:d0:54:28:8e:7b:49:01:b3:de:31:ca:
                    8d:8b:29:f9:bf:96:ea:37:ac:bb:fe:5a:e9:41:57:
                    9b:70:86:c7:e2:16:d8:d2:b3:cd:77:d2:67:b9:f9:
                    a2:6a:31:af:51:70:17:ff:8a:8d:9d:ec:07:9e:5c:
                    96:89:95:7b:54:22:98:6a:01:bc:54:75:4b:bc:02:
                    50:71:67:cf:e3:9a:d9:cf:13:6d:fc:8a:9e:20:c5:
                    da:e5:0b:31:86:bf:1a:3c:d5:73:ac:b1:42:2a:d0:
                    0a:94:dd:2e:ea:08:ea:58:d5:12:40:af:f4:92:e5:
                    07:c8:b6:2f:f5:71:ce:0a:cd:17:a9:d4:54:9c:dc:
                    8b:4b:64:c3:f8:6c:d1:af:69:ed:e6:3c:ab:9c:b2:
                    9b:83:af:f2:b5:74:20:a8:be:11:41:eb:6d:a8:05:
                    17:9e:35:1a:9d:7e:86:f0:dd:2e:ee:33:19:a5:ec:
                    fc:ce:bb:e0:93:40:2c:07:ec:93:1f:01:89:d4:24:
                    07:d5:94:87:bc:02:19:ee:b4:85:b2:0f:98:02:f0:
                    ee:6f:d3:2c:6b:da:7d:19:37:3b:dd:1a:c1:a7:16:
                    ed:5c:a2:26:4c:f8:f2:46:bc:c9:38:f6:8a:83:c9:
                    8b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7F:AE:9D:0C:56:F2:A5:A2:57:CD:C7:37:85:85:2F:38:AD:CB:F7
            X509v3 Authority Key Identifier:
                keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:43:88:3f:2a:3d:37:d0:f1:be:36:f0:ae:80:6f:df:f5:5f:
         dd:46:47:40:85:55:c6:c4:bf:17:dd:73:19:c0:d2:39:17:58:
         db:b4:9e:3b:df:b6:b2:af:07:bb:71:89:37:8c:55:0a:09:52:
         98:74:4a:69:28:23:7d:ac:ec:12:a5:1e:56:9e:18:91:b7:cc:
         6e:8f:77:9f:af:6c:1f:0e:66:e3:2d:04:fb:9a:cf:2e:99:25:
         18:b3:a2:77:85:7b:b6:e3:f1:a3:e7:ae:be:65:27:0c:b6:e1:
         95:1c:93:9d:12:d0:55:ff:14:69:cc:5b:8b:2e:6d:6b:c8:79:
         7c:7f:d1:21:76:95:47:71:97:66:4c:24:24:b2:7e:15:d3:1c:
         8e:e6:68:1b:3c:81:0a:0a:32:9f:02:61:58:7d:8f:a4:7f:b6:
         11:76:30:13:2b:d8:8d:3c:88:a3:74:4d:ee:1e:f7:92:d4:f4:
         c9:74:14:96:e4:ce:79:97:4b:d6:fd:41:04:35:b2:3f:b0:8f:
         01:aa:23:a5:69:a0:ba:c7:13:0f:7e:08:4f:df:f3:79:76:de:
         a2:d3:1d:e8:0d:72:d6:50:bb:c4:04:e1:e5:82:05:65:db:a0:
         f7:4d:d0:32:44:6e:4b:84:f6:92:2d:d3:37:5c:bf:f5:5c:be:
         05:a5:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----