Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
File:                     EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft (raw, json)
Hash identifier:          I5xANsKAQ/trdULwJOtNJITkhuQlJ1BxbJzr4OInwlc=
Subject key identifier:   D8:39:E7:E8:25:CC:97:AF:71:DD:BA:FF:A3:1B:16:7E:C8:E6:0F:8F
Authority key identifier: 11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
Certificate issuer:       /CN=114ad0faea03f60593b940ba4c1b7c8660403653
Certificate serial:       01962F067A78210ABBA178A3EEE7B8FD694D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
Manifest number:          028D
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl (hash: pxEvkeU7aWVtRSkeMwXrQqvumEBtF54/9O81rD9uk1U=)
                          2: sxJ4adnYKO7gli2y2qrSkbqN80g.roa (hash: zIiuKl1GBABWNnrsEF/02SPcAT6HuQK8fZBVndJMElk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7a:78:21:0a:bb:a1:78:a3:ee:e7:b8:fd:69:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114ad0faea03f60593b940ba4c1b7c8660403653
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=d839e7e825cc97af71ddbaffa31b167ec8e60f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:73:6f:71:78:3d:3e:bb:72:6c:9f:c3:a5:
                    fb:64:ee:54:5d:34:84:20:76:4c:9e:20:6e:63:2a:
                    2d:d6:72:5e:b9:d0:89:6f:2f:0a:48:7f:13:38:52:
                    ff:d3:24:37:4b:bb:b1:1d:43:e3:3e:dc:c2:9b:22:
                    ce:e9:29:6e:75:01:21:31:bf:93:fd:48:1c:8f:c1:
                    b2:79:7f:1f:34:57:7f:4a:ce:e9:70:bc:36:e5:1d:
                    db:3e:13:ff:ca:57:ea:3c:01:9b:32:9e:d6:40:f9:
                    a4:87:52:11:b4:8b:f8:16:7c:7b:84:1d:52:0c:68:
                    7f:6c:02:78:ee:f4:f8:f5:58:d2:33:47:2a:25:04:
                    e6:c7:89:ac:fc:f7:dd:55:4b:aa:13:b4:b5:4f:7f:
                    a2:a2:2d:fa:27:56:87:4e:de:08:25:68:65:7d:76:
                    7f:14:05:f0:eb:92:9c:5e:0e:73:67:bd:5c:5d:ab:
                    d8:d1:cb:50:31:08:30:8d:76:dc:ec:a9:14:8b:2c:
                    88:6b:39:b4:e7:eb:d6:79:c0:c9:08:25:4b:f4:ff:
                    50:3d:18:2b:ee:ce:3e:68:e8:a7:88:25:79:43:72:
                    6f:d0:64:d9:0e:82:36:f0:04:89:af:03:1c:09:04:
                    a5:55:7f:b6:17:f9:ff:a1:a8:fb:55:dc:be:3c:2a:
                    8d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:39:E7:E8:25:CC:97:AF:71:DD:BA:FF:A3:1B:16:7E:C8:E6:0F:8F
            X509v3 Authority Key Identifier:
                keyid:11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:28:f6:44:15:a5:db:d8:24:5c:24:0b:c8:8e:1d:43:1d:ce:
         f2:e2:8b:68:06:27:cb:a2:cb:be:c6:52:91:0f:b9:c9:82:d1:
         e7:48:85:78:bf:f9:02:50:1b:8f:0f:0f:ed:54:d5:56:c4:21:
         a6:9d:7d:4e:b8:da:1a:ef:49:24:98:b3:5a:fa:61:02:de:8b:
         11:6b:31:a3:94:a4:3d:52:bc:57:c7:d2:cd:a8:92:3f:c5:cf:
         aa:c2:a8:bb:12:55:4d:e2:dd:e5:ee:1b:ed:79:68:3c:fe:d1:
         36:ca:03:24:46:e3:fc:19:e9:e1:9f:96:3e:53:07:3e:7e:84:
         39:5d:76:7a:43:4e:b1:a1:36:9c:5a:39:b0:e8:70:d5:90:d9:
         97:34:18:2c:e5:6b:c3:cf:57:34:43:11:2f:7f:17:cf:0c:3e:
         b3:4a:82:fc:18:e3:a9:e6:e1:d2:aa:f6:c1:3a:f7:ee:52:23:
         ef:1e:2f:35:72:60:e9:70:c1:59:34:af:f9:35:eb:2d:ac:ae:
         ee:93:2c:03:86:2d:01:1c:80:f4:36:57:13:b5:6b:54:d6:34:
         f7:d0:36:3e:98:e5:1f:31:8f:46:df:fd:38:0b:7a:a5:18:22:
         29:b1:30:2a:8b:b9:8d:37:25:66:fc:db:a1:de:ce:85:4e:d6:
         4d:8e:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----