Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File:                     ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier:          GBPAHHdQkWZ1IdzxCNF9c2ihyIU2ODFMcn0uFYons+o=
Subject key identifier:   DA:48:F2:A2:77:7E:F3:B4:17:C9:D2:01:AC:63:D5:E7:2F:9E:83:94
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer:       /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial:       01962E2ACEAE25B1DE8B3FD565779E912912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number:          0C4D
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa (hash: vbFOlrrgXdMpjETv1aLsSB82Hd5tfAVSxkqVBCr2Gvg=)
                          2: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: z2yjbylCF3PhDBdocjz+lu1MGgV7NLbarA+O4QuO5G4=)
                          3: N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa (hash: 7JAL5BQj0VZ9gyQ5lYPxo8x5psJ8VR/uqd1dUx7XOiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ce:ae:25:b1:de:8b:3f:d5:65:77:9e:91:29:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=da48f2a2777ef3b417c9d201ac63d5e72f9e8394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:67:c8:23:63:1c:7f:d9:14:88:7b:ed:c3:
                    15:65:ff:31:1f:76:32:17:46:33:f5:90:dd:fe:c7:
                    35:cd:c9:fa:95:d4:56:fd:4c:f1:d8:10:2a:70:41:
                    98:30:72:50:4a:49:be:56:33:e0:ef:63:20:1c:af:
                    74:3d:3c:00:d2:a9:a8:91:91:a0:0e:a9:06:da:4f:
                    73:1d:d5:8c:ca:35:df:d4:b4:60:f0:1e:7d:4a:f0:
                    a2:72:dd:42:3b:df:69:74:1a:ed:c2:ec:95:c8:87:
                    60:30:52:4e:b3:67:1a:01:31:87:84:f9:3d:f4:ff:
                    42:c8:90:2f:b3:10:95:ac:65:d3:30:ae:d6:74:00:
                    ff:97:20:b7:96:dc:38:0c:c3:bc:15:91:ab:14:f6:
                    72:7d:44:a0:d4:a7:7d:5b:07:8a:4d:e3:66:a6:cb:
                    16:5f:f8:79:70:40:25:0d:63:ec:70:71:45:96:cb:
                    11:62:3f:52:fe:d0:b9:ba:7b:40:a1:e4:d3:a7:d9:
                    2b:3a:6b:34:68:48:dc:58:af:62:b5:bc:af:31:0a:
                    7e:98:8a:55:a7:7a:98:db:f4:62:db:ce:41:8d:90:
                    2b:23:56:c5:c1:27:6a:39:5a:d1:10:48:c9:ff:3b:
                    1c:50:1b:b4:52:31:38:c3:17:3a:56:aa:fa:74:ca:
                    88:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:48:F2:A2:77:7E:F3:B4:17:C9:D2:01:AC:63:D5:E7:2F:9E:83:94
            X509v3 Authority Key Identifier:
                keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:71:c5:16:a1:9d:c8:34:a8:d9:f1:52:be:d1:e4:75:88:2b:
         2a:81:e7:86:9d:67:bf:09:3a:ab:ae:b0:f2:c1:69:bd:e1:89:
         b9:38:1a:6c:7a:6c:b4:8f:5a:a4:93:05:06:dc:7a:52:a6:9f:
         fc:20:63:29:fd:a8:1b:76:3c:8a:64:6b:d1:2f:ec:40:80:d8:
         7a:34:7f:49:e3:cb:cf:56:ce:57:34:e5:d0:96:58:4c:c1:e8:
         c8:86:e8:5f:f3:99:35:ac:b8:e1:6a:09:37:70:81:18:3a:e3:
         20:6f:d4:f4:76:11:d5:0a:c9:d0:93:78:57:8c:9d:44:7f:86:
         85:48:49:22:dd:b2:85:d9:56:b5:ef:16:e8:3b:4f:ab:53:82:
         57:bc:58:cd:3c:13:78:b8:f2:45:60:09:c8:96:b8:0c:c6:d4:
         da:db:4d:6b:4b:7d:60:0c:d6:bc:1e:64:0a:1d:01:8b:19:80:
         7d:cd:e5:74:9f:12:f7:35:51:03:ed:e1:b7:c5:fa:34:59:79:
         2b:46:fc:db:f4:ca:92:3d:04:d6:8e:b9:52:71:2d:f7:c8:ba:
         38:03:ea:4f:93:58:d4:36:ca:5a:8d:f9:64:5a:b3:f2:aa:0b:
         39:9c:02:ad:8d:ff:ce:44:6d:a9:57:9a:ca:d1:62:6c:d8:d0:
         63:4b:67:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----