Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File:                     E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier:          34NSleav78yzEbboVY/8gXPnHbGchqf+Sd8eoaAhOg8=
Subject key identifier:   15:7C:3D:6F:85:7E:A3:6E:54:6B:2E:08:7D:C9:DC:53:A8:14:E1:E8
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       01962DF3C7947A7B9CDD438519F005D5B802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number:          102F
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: v26YKGVqUJpsAGjrQtgHYTUVgW+JjaAjyT9BGsOOTgc=)
                          2: z7S0Dz882RLcbziuzTp5d0_DNew.roa (hash: KUS+jL9qYhHGYv1E9XE/X3yjSFhxo3sbNNAyJ3Cg4aE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c7:94:7a:7b:9c:dd:43:85:19:f0:05:d5:b8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=157c3d6f857ea36e546b2e087dc9dc53a814e1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:5a:ef:70:29:69:63:93:8e:4e:4f:f2:3a:
                    98:b1:0e:2c:f8:f2:be:dc:f9:c6:1d:49:35:15:c7:
                    b9:e9:cf:9e:36:fd:d0:68:e3:4b:ea:9d:73:89:a8:
                    6e:88:27:59:30:3d:2d:30:87:09:34:11:5b:68:fe:
                    fd:08:02:58:55:46:21:72:a7:85:5a:58:5e:df:99:
                    ed:1f:ad:cb:9f:ca:13:ef:44:d6:54:ac:65:76:4d:
                    0b:ce:f2:7e:9f:31:ea:2c:d7:4a:90:43:37:f0:8c:
                    93:1d:3f:42:08:00:b0:6c:91:ef:40:52:99:30:55:
                    a3:06:f9:4c:70:0b:38:c9:0b:8e:24:2c:00:d9:b7:
                    0d:d7:6c:de:9f:8e:cb:28:21:a9:0f:f0:34:e4:71:
                    0f:9c:bb:70:f0:04:3f:23:34:34:5d:39:be:38:50:
                    23:ad:c8:af:43:d7:05:a6:ff:97:53:fb:b3:b3:b2:
                    a0:c3:77:df:71:e7:fe:7d:07:6e:3a:c5:b6:d0:fe:
                    77:a1:90:34:c4:4c:ab:76:d9:b7:2b:3a:7a:d1:36:
                    c0:0b:7d:64:3c:ce:2d:91:b6:5f:cb:0b:46:15:d9:
                    5d:b1:15:d8:a0:ec:0c:b6:54:24:cf:39:09:25:55:
                    63:fb:c4:10:e6:ff:8c:57:7d:6a:30:c8:3f:d0:82:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7C:3D:6F:85:7E:A3:6E:54:6B:2E:08:7D:C9:DC:53:A8:14:E1:E8
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d9:cc:2d:59:b6:eb:4c:72:cb:eb:1c:2d:61:f3:00:ed:6a:
         ea:c4:f3:49:28:75:41:48:2e:2a:3c:2c:a1:26:71:73:ab:69:
         60:af:0e:02:67:d3:0b:1e:3f:ab:37:90:b7:93:67:6b:22:e5:
         fa:bd:8d:22:97:6f:bb:7c:ca:a0:ca:6e:3e:8c:0e:3b:a4:8d:
         c5:c4:a8:20:bf:28:fa:05:60:e1:d9:93:e5:25:cf:a3:26:5c:
         e5:5f:1b:2b:8d:c9:f1:8a:52:16:c7:af:68:b3:ec:1e:e8:c8:
         f8:01:72:1f:71:ad:d8:98:1e:1f:b2:d3:d1:b8:c0:16:11:0f:
         2b:6c:7d:05:85:23:c4:cd:27:2e:38:c2:b2:28:53:1a:ef:82:
         73:55:08:e2:5d:cd:5e:fd:c0:cb:94:8f:83:1b:07:9a:28:30:
         32:e2:e7:b5:76:87:c5:d7:02:95:16:50:f6:67:29:e2:82:a6:
         13:6e:f8:76:ce:81:0f:eb:5a:29:5b:74:d8:e9:ef:3b:2c:8a:
         6a:a7:09:d2:dc:7c:db:07:b7:a8:fc:f8:f8:b0:1a:6b:11:5d:
         dd:6d:bd:9b:2c:53:7e:b1:a5:56:a9:99:4e:10:b8:80:cd:df:
         7e:89:1b:81:29:a0:2d:fe:83:2e:cd:88:bf:51:b8:cc:93:6a:
         26:02:1d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----