Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File:                     E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier:          mlaozZ69OzFpyZqf2jOJG03WFK3Ji+1cbtmWUMqZYmY=
Subject key identifier:   BE:70:20:4E:2D:3B:48:90:4F:EE:07:11:6F:9B:B3:56:63:0D:06:23
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer:       /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial:       01962E6189384CC22BB71ADF1354ECFC7801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number:          1068
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: 5Xy5Xz+UIxoNJeMKOLFsPNA9dz9YGEVl5bCVcDDXgjI=)
                          2: EfwdFjXVhRXWX5ii0NrhIm4Va4g.roa (hash: rkgBBwT7155haQFS5qhcb+40oim+InAz1f/X+wiaZP8=)
                          3: JoUWdKjnvYv36EECrdw-DD3L2JE.roa (hash: A24wnWQHwaxLRVm8zSKIhvI+f81n1EoreHc8UbUVP5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:38:4c:c2:2b:b7:1a:df:13:54:ec:fc:78:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=be70204e2d3b48904fee07116f9bb356630d0623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:54:b1:42:97:f7:b1:c2:f7:17:4e:d3:27:93:
                    59:f9:8b:0e:f0:13:c6:48:73:ed:77:d6:b3:d9:7c:
                    ec:47:ab:7b:14:df:bd:09:8d:da:39:e1:dc:70:a2:
                    48:49:7c:a7:2c:ad:1f:02:2f:1b:bc:d8:87:8b:e9:
                    9e:ad:35:85:49:89:d2:1f:41:f8:f8:67:7f:35:e3:
                    e2:7f:0a:72:cb:78:d5:21:e0:31:59:4e:1e:3f:09:
                    18:b6:ec:0a:79:28:dd:b3:f0:7c:1a:29:74:fb:c3:
                    c0:91:68:a6:00:8c:93:72:5f:57:34:29:0a:4e:f4:
                    ff:28:d6:c5:88:8b:a2:5c:39:ee:31:32:e3:4d:d6:
                    f1:f1:64:0b:d5:4b:f7:27:5c:8a:47:c7:aa:93:b0:
                    e3:d7:c9:8e:72:b3:95:2b:c6:4d:74:c1:85:d5:88:
                    de:a1:50:86:ac:ed:59:80:27:e7:23:91:0e:17:7f:
                    34:25:6d:1f:5f:c5:1f:cc:e6:34:56:8c:41:a0:ca:
                    37:0a:6f:b6:36:ca:37:72:fd:7d:67:a4:d6:41:05:
                    8b:16:fe:e7:7d:16:51:6a:67:b9:12:8c:24:a7:7c:
                    c5:c2:f7:28:44:8c:08:c5:8d:92:dd:ab:8c:26:9c:
                    5d:57:fb:c6:b4:70:1b:7c:90:11:d7:10:4d:8a:49:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:70:20:4E:2D:3B:48:90:4F:EE:07:11:6F:9B:B3:56:63:0D:06:23
            X509v3 Authority Key Identifier:
                keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e1:4e:d3:dc:48:55:6b:12:e5:3c:31:65:33:4c:5e:2b:2c:
         33:62:31:24:8f:e0:02:26:8f:85:53:52:eb:4f:f5:58:7e:7d:
         0c:fb:f8:97:d5:76:92:33:ae:c1:11:35:38:a1:c8:37:9d:bf:
         a1:68:95:c9:44:e6:48:0f:e1:d8:b8:bb:81:55:b3:ef:da:e2:
         2c:16:e1:9b:e1:fd:26:29:51:9b:c7:8b:68:77:89:14:e8:49:
         7b:23:e2:6d:20:69:3c:d8:fc:ff:97:d7:9e:5b:de:6b:cf:e5:
         36:01:54:8c:73:ed:a4:ae:3a:19:82:0b:61:03:73:3d:29:2d:
         9c:2c:90:97:79:94:d4:fc:48:96:ec:07:83:8a:9c:3f:e3:72:
         61:d7:48:90:a0:42:c7:dd:3c:9c:e7:45:b3:00:e9:3c:3f:f3:
         c2:d5:34:22:05:dd:be:f9:5f:6a:80:1d:d5:fd:e7:17:aa:7f:
         ef:be:07:fb:14:28:5c:dd:e8:7e:48:92:71:02:83:ce:c1:29:
         5c:56:f0:40:a9:e1:7a:6f:f7:fd:74:5c:c5:69:7f:31:a9:c1:
         cd:93:c6:e3:92:df:2d:97:6d:1c:9e:88:c4:dc:3a:f3:30:10:
         81:23:29:b3:ef:35:cc:23:82:ef:1b:02:c2:45:ae:22:e3:d0:
         a6:62:17:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----