Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
File:                     eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json)
Hash identifier:          D01CSydB/2TrX8tLXZFsdc8e3mGTlSvO0DQmDThDtbA=
Subject key identifier:   BC:9A:E7:DD:0B:EB:0E:11:12:CD:87:AB:4B:8B:51:A3:8B:F9:27:76
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Certificate issuer:       /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial:       01962F74BCD609C7E7123344A06D0EEFADB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: PyWPC5/HDGVJiFyMo9AkznNF1gDcEyqxpn64jpFgtmo=)
                          2: kO8QB2zrXRxl2N43GaWd_Repq5M.roa (hash: IUmtRjKzI10q9uvO/9zEmrcKLU0qcJf4Uhid1F3g4yw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bc:d6:09:c7:e7:12:33:44:a0:6d:0e:ef:ad:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=bc9ae7dd0beb0e1112cd87ab4b8b51a38bf92776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:9d:5d:4a:50:5a:ea:f1:51:28:3d:b1:63:
                    c4:2b:d9:e7:7f:e9:83:fc:7c:d6:1a:d8:da:04:7e:
                    36:b3:51:90:14:05:50:24:b1:34:f4:fb:77:85:e4:
                    8b:e0:29:36:3c:d4:dd:44:8d:cb:57:92:cc:80:99:
                    93:f5:0e:89:8b:cf:20:43:94:8b:10:48:e2:9e:f7:
                    94:f8:4a:8f:3c:f6:11:27:3d:09:9b:a8:fa:f6:6d:
                    7e:9f:03:5d:22:b5:d6:b1:22:29:1e:9d:03:44:c4:
                    a2:6d:7a:7e:85:17:39:8b:0f:2e:fa:cd:1f:3c:1c:
                    51:53:55:99:86:0f:68:b9:90:9a:90:2e:44:c0:60:
                    03:d9:95:bc:d4:b9:b5:49:6a:6b:57:d5:fb:39:65:
                    2c:dc:bc:12:62:4f:e3:6f:a2:bf:d4:d1:1f:14:2a:
                    0c:0f:3a:fb:3d:d5:13:28:ab:27:23:54:9c:3a:fe:
                    5d:8b:48:47:05:d8:c3:39:8a:8a:7b:b6:2f:84:c0:
                    57:7a:90:b7:07:63:9c:65:f9:c6:d6:4f:30:25:87:
                    31:ae:d2:4d:f0:7e:05:87:7b:b4:42:5e:4f:d0:7a:
                    cf:60:c7:51:c4:41:04:54:20:8e:46:1d:37:95:4e:
                    be:c5:8d:97:79:cd:71:e5:18:dc:23:e9:cd:6c:29:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9A:E7:DD:0B:EB:0E:11:12:CD:87:AB:4B:8B:51:A3:8B:F9:27:76
            X509v3 Authority Key Identifier:
                keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fc:c2:c8:cf:7a:27:55:5a:66:98:8a:24:73:ac:77:62:fb:
         8d:74:3d:cf:27:fb:26:6e:68:92:1a:79:4b:94:a1:80:a2:2a:
         4f:de:62:32:92:b5:6a:7c:b9:f6:01:d9:0e:b9:30:cc:68:b8:
         92:01:8c:72:56:cc:d6:1e:5b:fb:be:1d:8c:b8:9d:7e:80:40:
         67:af:a6:4a:13:96:46:ec:80:f9:cc:58:f0:1d:39:48:d5:c1:
         2c:7b:59:b0:ec:1f:d1:09:1c:a5:84:7e:f6:4c:bd:56:13:f0:
         71:c1:67:2d:79:f4:7f:41:7d:65:e0:de:7c:fc:6f:3d:27:8c:
         20:c5:4f:85:0c:10:69:77:44:0c:d6:2e:2a:97:d8:24:3a:74:
         4d:75:6c:8e:07:72:d0:87:f0:31:65:56:49:0a:de:e0:13:7e:
         1e:0e:c7:b8:31:32:33:1b:76:c0:04:40:0a:af:43:d6:08:47:
         99:80:84:89:da:d7:d8:8d:60:84:b1:d7:0b:35:6c:c5:64:25:
         b3:a3:d2:e9:83:ea:a2:dd:49:fc:b4:f4:06:45:92:da:c2:a3:
         36:b5:99:a8:e7:8a:b6:fc:79:b1:11:50:02:13:bc:36:6c:dc:
         cc:1b:4d:b5:aa:15:d9:17:a9:94:26:29:02:0d:23:92:a3:96:
         97:a6:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----