Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File:                     0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier:          JF3aXKmr45EmtEjvtk5UrxIBvqOgXypXd4oLjZSZjIE=
Subject key identifier:   11:D5:F4:D0:D2:F5:0B:30:D4:9B:63:4D:73:C1:72:0D:CC:6A:83:BE
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer:       /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial:       01962F3D503E014DA41A15D52C7C3ACBC7E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number:          0E26
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: LjrNd50XHknonKbrmyFGscwT53xtcTZsoVIiQDx7pWA=)
                          2: qHgPIcF0pz9j4TEEkIAHX7Dd0Xs.roa (hash: +F3TXNG5tHAq0c+WeS6vtqr5NrxVAYlw9IQBeKyvga0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:50:3e:01:4d:a4:1a:15:d5:2c:7c:3a:cb:c7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=11d5f4d0d2f50b30d49b634d73c1720dcc6a83be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:89:a5:80:4e:a3:40:98:c3:ce:aa:06:01:
                    7e:c9:75:7a:69:a2:af:b9:a2:f9:d0:c2:54:84:85:
                    b3:3c:a2:e7:b9:0f:42:a1:fc:9b:ea:12:78:1f:e3:
                    71:24:fb:32:03:8e:27:41:93:f7:13:cd:58:98:53:
                    ce:90:c0:04:f5:a4:c5:cb:8b:a4:a2:d3:87:9d:19:
                    09:0d:06:28:6a:e7:65:f5:42:ae:d1:9d:a7:be:f7:
                    d0:2c:7a:1c:ce:b3:4c:8f:0e:d4:f6:fc:e2:a4:18:
                    70:fe:08:23:70:c1:74:67:2d:61:dc:db:75:57:f1:
                    8d:f4:c7:5a:97:07:84:9f:cb:2f:62:99:42:e0:83:
                    48:ea:18:83:2c:0e:96:62:03:e4:c8:c9:41:2d:96:
                    b4:53:30:a5:21:dd:84:80:f6:f4:7f:0c:7f:8d:b5:
                    44:57:df:cf:c6:ae:5f:3e:14:86:de:98:a6:dd:76:
                    40:cd:29:c9:01:93:72:f7:d5:f1:82:f0:09:8a:cd:
                    fa:c6:d2:af:52:a4:8e:e9:e6:4b:de:05:3c:32:c3:
                    20:20:f6:25:24:db:59:5a:e8:92:93:5e:65:04:2a:
                    43:61:7f:65:55:88:01:6a:17:87:29:7c:b1:f9:a2:
                    3f:c0:ed:f9:7a:d6:6a:bb:db:16:df:b3:35:41:22:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D5:F4:D0:D2:F5:0B:30:D4:9B:63:4D:73:C1:72:0D:CC:6A:83:BE
            X509v3 Authority Key Identifier:
                keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:43:a7:f1:5e:ad:22:f6:69:59:a0:17:e5:80:80:85:02:75:
         cb:6c:a1:d7:07:08:de:9a:53:5e:87:7b:39:07:1c:5a:18:42:
         9a:a7:72:a2:e8:36:b0:0b:39:f2:74:82:c9:4f:85:93:a4:aa:
         65:95:54:7a:73:a9:d2:a2:72:ef:70:b9:d8:22:45:ac:df:67:
         b9:52:4b:ca:1b:fd:f6:27:fa:23:44:2f:9a:56:3b:99:6c:2f:
         b4:37:e9:d2:96:9b:f1:f2:cc:07:88:36:cf:d8:68:18:09:bd:
         1e:8a:61:48:4e:16:28:fc:ad:e7:d4:6b:ea:f3:f2:a0:32:de:
         14:20:2b:ea:6d:63:9d:83:1f:f1:f0:fe:44:b1:d3:8c:fe:2b:
         73:9e:0d:c6:c9:4e:69:ad:fd:81:b9:d2:77:3b:6a:64:3f:33:
         7a:02:f8:b9:03:7c:dc:52:a7:e4:7f:43:38:a8:f1:e9:fc:8d:
         a7:05:a9:1f:8d:8e:4a:fb:17:c1:11:62:2f:7f:d3:1d:fe:e4:
         a0:2d:a0:66:2d:dc:07:fb:82:b5:78:3f:56:f8:fa:3f:05:e4:
         0f:43:d3:27:2a:69:6c:0f:20:ac:fd:11:fe:a5:96:0c:3f:cd:
         31:0a:a7:84:e5:3b:41:ee:8b:3b:d2:8d:94:f8:99:0c:5d:47:
         23:80:00:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----