Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File:                     Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier:          P417titMONNJfZpLDSeScgEGsBHVBeVZSxzs80XjxIo=
Subject key identifier:   80:A4:D5:20:01:8B:11:78:C8:B5:C8:A3:F7:62:AE:53:E4:66:E0:C3
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer:       /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial:       01962DF413079EA3C841AE1F6F58C306B615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number:          1468
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: urd9kApvz3waemSBVzd18P0YNcNHK6kdFIAQ+QPph5U=)
                          2: aTQzWebpqg_T1Vz72K8wYxcCH9E.roa (hash: sU4u/yCI9RN4etvN429ld52OXctixi8Cp3brB5244bc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:13:07:9e:a3:c8:41:ae:1f:6f:58:c3:06:b6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=80a4d520018b1178c8b5c8a3f762ae53e466e0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d9:66:13:e0:38:a1:42:b2:00:13:e8:6f:38:
                    45:4c:c2:97:69:d9:c7:b9:74:b0:28:af:c7:fb:2a:
                    ca:32:70:e9:1d:0c:0f:a8:96:53:bf:d3:25:3c:fd:
                    05:f8:b4:4e:b1:15:35:e9:fe:44:b5:70:8b:88:06:
                    1a:24:15:b7:4e:da:7f:d7:32:53:41:d4:7d:7c:0c:
                    f8:90:a4:6f:72:65:5f:92:8d:27:b3:91:d2:1c:6b:
                    10:69:59:88:a8:bf:73:84:45:ed:22:f5:d6:c9:b2:
                    80:63:c8:0c:9a:a2:f1:6e:e1:32:24:20:99:bd:ba:
                    ad:5a:fb:98:55:57:1d:72:bd:fa:11:e3:25:ed:38:
                    3d:76:12:df:93:b3:ec:f3:e3:2e:59:f1:2b:b6:b0:
                    24:e2:74:74:dc:1a:6f:3f:3f:51:95:60:5e:c7:c3:
                    f7:d5:6d:5d:ca:a0:d9:75:54:f7:68:1e:d9:1b:97:
                    27:cb:8c:68:59:b3:51:7b:e5:e8:8a:3f:be:fa:7a:
                    a7:7f:dc:04:b4:57:f1:8e:7d:54:98:95:dd:e0:6d:
                    c0:c3:d6:0f:da:0f:3b:51:44:39:de:ec:96:40:8d:
                    c4:8c:be:42:94:a0:ab:11:ae:a3:7f:6b:c5:01:bd:
                    bf:9d:1b:16:e9:e3:d1:3e:aa:ca:ec:d1:21:33:b3:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A4:D5:20:01:8B:11:78:C8:B5:C8:A3:F7:62:AE:53:E4:66:E0:C3
            X509v3 Authority Key Identifier:
                keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9a:a2:12:ec:3b:c3:a7:07:18:43:da:4d:f0:24:a6:5b:17:
         f3:84:9f:19:ea:54:ee:13:fd:56:fb:15:57:b7:2d:b7:05:6d:
         b7:0e:6d:f1:53:93:0d:7b:a2:02:d4:87:c8:c9:da:7f:8d:b7:
         ca:ed:a6:d4:a7:f2:9a:6b:a3:b2:80:28:97:fb:af:42:c8:40:
         82:ab:48:71:e6:a6:75:d7:c1:26:54:cc:22:05:2b:f4:93:4f:
         7f:5e:5e:59:a3:c0:2f:82:d4:bf:d2:cb:ed:40:28:33:ce:b4:
         f8:8e:16:28:36:aa:ca:d2:b1:ad:5b:79:05:1c:27:34:ab:11:
         12:c8:b5:b0:2b:be:e8:39:3b:57:fd:84:0d:25:45:3b:22:a5:
         89:70:06:66:8a:b9:43:df:36:9d:90:d1:8f:67:ad:73:4c:5e:
         82:97:6d:c5:13:c5:9c:4f:93:62:b3:2b:31:0e:30:54:a4:ee:
         63:38:2e:ae:92:4a:1b:48:7c:8d:8d:25:d8:ec:2e:69:62:67:
         54:cc:40:79:f6:dd:84:51:02:2e:ee:de:88:dc:c9:a6:f6:41:
         f4:a5:ee:6b:a2:b9:4a:aa:c3:13:f4:3d:39:7b:68:65:04:24:
         13:fe:33:19:98:06:e2:b4:a1:31:40:00:c0:5a:02:d5:ae:c1:
         09:70:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----