Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File:                     E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier:          OxXNlQvwj9NuDyKTNstZVto7wTcEIkTDDbxchepNen0=
Subject key identifier:   E2:9B:0B:76:48:01:3C:2E:4B:1E:24:DE:FF:81:E7:10:6A:22:A0:2B
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer:       /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial:       01962F06986896A65692C5A4EB2C43D40DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number:          074E
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: U4Ez7B+24gSnlt05znZbGU3wjS5rfLxogYc3DFdQRC4=)
                          2: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (hash: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:98:68:96:a6:56:92:c5:a4:eb:2c:43:d4:0d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=e29b0b7648013c2e4b1e24deff81e7106a22a02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:61:f6:9c:4b:51:f6:a1:95:2a:39:55:1b:
                    69:ca:3e:82:3b:ab:b8:11:31:69:09:53:81:44:d2:
                    df:51:0e:1f:67:0a:2a:a9:43:7d:8e:25:dd:44:d6:
                    1d:37:02:4a:fe:c7:33:8b:09:39:63:e4:1c:15:b1:
                    ef:a9:88:52:02:cc:48:ec:2e:f5:21:b4:9e:94:cc:
                    3d:06:64:5b:a4:6f:ea:96:73:4c:59:37:20:8d:7c:
                    54:25:d0:70:f3:8f:45:a0:2c:c3:bf:18:07:af:5b:
                    42:fb:a4:1e:4c:9e:81:18:8a:32:be:00:db:b1:91:
                    48:74:c6:60:3d:37:40:e5:7c:9b:78:57:77:cc:6e:
                    78:ed:8b:54:19:c3:7e:fc:8f:3d:73:58:99:48:ab:
                    56:0b:a0:7d:84:ae:10:3b:9e:33:e3:3b:3d:ed:21:
                    45:0e:6d:57:0d:03:7c:e6:ed:18:09:1e:64:83:10:
                    22:94:3b:65:be:6b:15:b9:7a:d7:28:d5:19:5d:a1:
                    45:b0:5e:6d:15:5a:dc:40:11:6c:a2:85:d4:b4:85:
                    88:0d:dd:b4:2c:5c:69:29:a7:8d:c2:ac:b2:91:50:
                    0d:3d:4b:49:ea:00:fe:b9:a8:0a:1e:ae:a7:e5:0e:
                    02:d7:6e:1a:02:c1:68:04:5d:e7:f1:1a:30:b1:51:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9B:0B:76:48:01:3C:2E:4B:1E:24:DE:FF:81:E7:10:6A:22:A0:2B
            X509v3 Authority Key Identifier:
                keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:bf:72:c2:f9:e8:fd:2e:b1:da:e2:4d:59:17:1d:af:85:75:
         b6:90:39:4a:51:0a:a6:25:2a:bf:0b:32:7e:c2:39:d8:7e:24:
         7e:ae:1d:7a:8d:15:43:bc:97:16:0e:b8:7f:53:6b:fb:b0:1e:
         15:27:45:4d:3e:02:6c:24:d1:d4:77:ad:4f:06:7b:11:5a:d2:
         15:c5:6a:a7:29:e3:88:be:8c:e6:1f:a4:d8:87:86:c7:d4:5e:
         9c:66:ae:e8:27:32:0e:11:8d:32:a9:4f:e0:1b:d9:6f:17:d3:
         a2:fa:6b:d3:de:a4:c7:15:e1:72:fe:c7:f4:72:95:57:12:b5:
         b2:59:2f:68:46:fc:89:67:fb:70:6e:c2:7f:1c:13:96:3a:dc:
         a1:e1:61:3d:89:fb:41:38:f0:46:9c:10:23:c7:e0:9d:6a:e9:
         72:78:41:98:f4:18:b3:d8:0e:47:39:d5:03:0f:ec:00:80:c5:
         02:d9:0a:81:28:9d:e1:62:56:c8:f1:3e:22:5d:c2:1b:e5:4c:
         ea:b7:16:1d:c5:9a:c2:42:e9:85:56:7f:82:9d:98:32:59:f7:
         ae:f2:a7:52:81:05:49:e1:4c:c0:e1:cb:1c:78:a0:f8:8b:a2:
         ca:55:c2:f9:a7:3f:f0:32:5c:e1:ec:a2:7c:9d:59:bc:09:bb:
         7c:77:f1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----