Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
File:                     E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json)
Hash identifier:          MG9SqqDMljKwdpAAGxQIoyORVEaGBiDWQKb61OKVs/Y=
Subject key identifier:   CC:50:04:91:5E:6D:30:7B:16:AA:53:03:F5:F6:A0:40:B3:57:F3:E8
Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35
Certificate issuer:       /CN=137f23944e3d78da920055d72c74d02be5455f35
Certificate serial:       01962ECF599733028B2B4B094D32533CFB35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft
Manifest number:          1443
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: w99xbT9J2gqeDAPWbXUNB8iGZ3aGaAwQMdITlvFQXC4=)
                          2: pPGln_tGe3Wb0dePm4ie5BM7xaM.roa (hash: e7lXmv0/qA8zwcIJTP+HZzZQ8eseEaVWqcUevE7q2Nk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:59:97:33:02:8b:2b:4b:09:4d:32:53:3c:fb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=cc5004915e6d307b16aa5303f5f6a040b357f3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:1f:7f:d1:26:08:5c:95:a1:79:c0:3f:ad:
                    3a:4b:f6:96:85:c2:7d:6b:7f:0d:14:c0:36:b6:8c:
                    ed:61:b7:e7:1b:f7:51:38:ef:cd:2e:96:d6:9d:02:
                    34:ff:b9:89:a0:95:6c:fa:af:0c:23:6b:03:a6:81:
                    e8:62:cf:7f:a3:12:55:9a:9d:39:ce:47:26:24:20:
                    41:93:3a:76:5e:32:5e:af:ed:c9:da:f9:7a:85:d7:
                    bc:e2:d7:d0:78:8e:80:6b:94:88:ac:9e:36:99:a7:
                    6e:8d:84:ae:3e:4a:61:47:b6:59:c3:0c:d4:d1:59:
                    2c:49:2c:da:48:0d:7d:f8:7c:46:9f:19:17:01:d4:
                    e5:6f:83:79:94:59:21:75:3c:a5:11:0f:1a:9c:86:
                    d8:58:e1:6e:de:05:4b:92:a9:b6:39:8d:18:48:b7:
                    15:ab:e5:9c:c9:0a:08:42:89:53:9a:c2:f1:7e:d6:
                    d0:77:a1:0a:8e:23:42:f5:17:2c:b7:97:24:af:07:
                    6c:ca:80:ef:03:24:1a:c9:21:cd:8c:f4:e2:fc:f1:
                    71:0a:47:b0:a6:a7:b8:a4:c3:bd:46:fe:2d:ed:71:
                    3b:da:d4:d0:1a:64:9e:44:0f:34:1c:6d:2e:43:6f:
                    c0:1d:49:41:6e:b1:3c:82:5d:5f:2b:24:e3:b3:e7:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:50:04:91:5E:6D:30:7B:16:AA:53:03:F5:F6:A0:40:B3:57:F3:E8
            X509v3 Authority Key Identifier:
                keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2a:15:40:37:12:c9:2c:fa:60:f3:6d:66:d2:66:ce:87:01:
         d5:b7:04:6a:db:a8:c1:d9:99:0e:42:fb:2c:54:d3:e8:74:f4:
         13:0f:0e:d6:f2:88:ea:d1:ad:59:fc:1f:d5:07:1d:21:64:bc:
         fe:3b:a6:ef:f2:dd:b3:8a:86:8e:d3:b8:f7:25:56:2b:3d:0b:
         6a:f9:70:13:45:bc:c5:20:40:5c:0e:9d:b5:4f:8d:d0:e6:10:
         16:ab:f6:26:d5:d9:f6:4e:66:6c:cd:cd:3f:7d:b8:30:fe:26:
         90:24:d1:85:22:cf:b3:57:5d:49:a5:42:54:7c:49:ae:7d:65:
         1c:00:e9:c8:e4:27:9b:23:6b:a5:49:ae:31:ba:eb:1b:92:ad:
         1d:22:d1:36:25:84:e0:a5:bb:8d:d9:2c:d7:bc:88:8b:0d:f1:
         61:55:28:1f:66:e5:4a:17:ad:5c:9b:2d:77:d5:bd:59:44:f5:
         1a:c5:85:4a:bd:25:98:c2:0b:35:3a:15:14:de:82:14:54:0e:
         c8:b3:b3:6f:5c:dc:31:ec:a1:34:18:1c:52:c0:f9:b0:cc:d3:
         9f:6e:67:25:d6:7c:3b:8c:30:f4:ed:46:6c:a8:64:6f:37:98:
         61:a3:af:0b:67:ff:f2:6b:5e:4f:c4:95:8c:4e:bb:1a:89:0d:
         75:f5:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----