Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.mft
File:                     7KLpXDl5RMPObT9DcUiLc55C5C4.mft (raw, json)
Hash identifier:          3eT4NSI6wryWy1tKx47IUSBktM+PnFw1dktW23NSo2A=
Subject key identifier:   B6:E4:92:7F:27:07:4B:BC:37:4E:72:0E:86:4D:34:57:4E:69:52:43
Authority key identifier: EC:A2:E9:5C:39:79:44:C3:CE:6D:3F:43:71:48:8B:73:9E:42:E4:2E
Certificate issuer:       /CN=eca2e95c397944c3ce6d3f4371488b739e42e42e
Certificate serial:       01909B71A80E1E6FEC2C7D9461116A441721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7KLpXDl5RMPObT9DcUiLc55C5C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.mft
Manifest number:          0B84
Signing time:             Wed 10 Jul 2024 07:00:35 +0000
Manifest this update:     Wed 10 Jul 2024 07:00:35 +0000
Manifest next update:     Thu 11 Jul 2024 07:00:35 +0000
Files and hashes:         1: 7KLpXDl5RMPObT9DcUiLc55C5C4.crl (hash: 12R4wsUx3z3W0ULzGbzreaWO5fqMw4+yBKAKfWhOpmI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9b:71:a8:0e:1e:6f:ec:2c:7d:94:61:11:6a:44:17:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eca2e95c397944c3ce6d3f4371488b739e42e42e
        Validity
            Not Before: Jul 10 07:00:35 2024 GMT
            Not After : Jul 11 07:00:35 2024 GMT
        Subject: CN=b6e4927f27074bbc374e720e864d34574e695243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:f0:9d:08:43:5b:21:ef:12:3f:4d:c9:84:
                    7f:31:f9:93:d7:7c:3c:4a:34:1c:d5:40:69:0e:6f:
                    f3:58:dd:19:45:0f:d3:5c:53:61:f2:1c:39:9f:76:
                    d3:96:12:38:ca:10:d7:2f:6b:84:53:05:e3:5d:67:
                    bb:db:f5:7d:fa:ae:4e:0d:8e:45:b2:bf:69:21:14:
                    65:a7:fc:c1:93:1d:33:8e:be:c7:aa:8f:4b:ca:84:
                    14:c8:6f:97:c3:26:3e:08:c3:1d:d0:e8:68:df:a0:
                    bd:72:48:c4:9a:56:f9:fe:bc:28:4c:6b:18:cb:af:
                    24:1f:00:56:cb:45:ba:f4:f4:04:00:96:a2:05:a0:
                    a5:cc:5f:f1:e4:c7:d6:cc:ff:0b:79:1f:7b:4e:e1:
                    06:0f:48:26:0b:6e:40:eb:1b:0f:ed:2a:fc:f3:e5:
                    dc:1d:09:5c:1b:f1:0a:67:6a:3c:46:a5:ca:be:4b:
                    4f:23:08:75:ce:6c:9a:4b:21:34:06:34:89:6f:9a:
                    f3:94:f9:f6:35:ab:d3:c9:00:97:38:33:de:ff:df:
                    89:06:20:10:50:30:7d:9a:9f:7c:00:25:4f:2c:0e:
                    07:4c:54:ef:ae:ca:2f:f6:39:4e:bc:c7:bf:fd:25:
                    59:ce:c5:ef:8b:4b:70:82:09:0f:fb:a0:85:9d:ed:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E4:92:7F:27:07:4B:BC:37:4E:72:0E:86:4D:34:57:4E:69:52:43
            X509v3 Authority Key Identifier:
                keyid:EC:A2:E9:5C:39:79:44:C3:CE:6D:3F:43:71:48:8B:73:9E:42:E4:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KLpXDl5RMPObT9DcUiLc55C5C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5954db-9cd5-4357-a211-7993972840b6/1/7KLpXDl5RMPObT9DcUiLc55C5C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:79:b9:73:9e:75:02:7c:76:1e:08:f4:51:65:76:c7:7e:83:
         80:b2:9c:80:e3:20:49:6e:52:51:1c:83:93:91:3f:9b:9f:7a:
         1e:a9:dd:93:15:4c:7b:38:fd:8e:0c:83:63:e8:11:77:c2:80:
         16:d0:af:01:ee:fe:5b:54:e0:86:a9:90:5b:bc:50:7b:fe:64:
         c7:69:17:2b:3c:79:85:49:b4:30:fe:15:16:74:ee:c4:93:e3:
         75:12:22:3c:66:c1:27:9f:c1:7f:07:6b:52:67:fb:3b:f8:62:
         1e:72:eb:b0:d6:d6:11:d6:da:dc:d3:7a:60:ee:dc:3a:cd:dc:
         51:71:7c:f0:d0:28:df:eb:81:ee:72:bc:66:83:c9:56:40:68:
         24:54:82:c8:e5:65:7d:c6:9b:0d:cc:88:3b:15:47:fc:30:be:
         5a:29:56:ff:3d:c7:aa:47:2a:0a:0a:db:7e:6f:8c:46:3a:2e:
         b9:12:8f:21:5b:c2:8e:3e:6a:43:5e:28:d0:75:09:0e:b0:45:
         ce:24:e2:e1:d4:9b:d1:05:56:9c:a3:d5:c6:4c:27:50:72:a6:
         0a:35:3a:e1:d8:53:db:d9:6c:4b:51:39:3a:1d:7d:a4:48:8c:
         a1:84:a9:66:20:52:9e:ce:74:03:22:c7:19:df:62:f9:1a:74:
         0f:f6:b1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----