Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File:                     c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier:          KB3I306vpQKLJCTWenXYJwlvPY3rz/HflTvkNgH8z9c=
Subject key identifier:   38:49:AF:A0:A0:01:81:F0:8D:B0:03:13:21:76:16:A0:A4:6E:66:8C
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer:       /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial:       01962F3DC073232A7400351763B8F60FB93C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number:          06E3
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: gYeBoahcvOBnsT/aPQH6DW2jRcGleN3lmWi+5tJZRpA=)
                          2: zxcUujcSrD8SI1LnYGJEIzlJLRs.roa (hash: 9DpZ6fCwMNxgzvUI8W4qG2/5GfqMuaNy171SPmB26NM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c0:73:23:2a:74:00:35:17:63:b8:f6:0f:b9:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=3849afa0a00181f08db00313217616a0a46e668c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:c5:5b:89:f7:27:74:55:d7:62:ea:be:07:
                    0b:cf:57:42:ab:8e:e1:9c:8f:08:90:98:6b:2f:ad:
                    02:78:f2:10:b4:dc:87:03:85:a7:fb:89:7a:65:9a:
                    ea:7c:84:94:e0:cb:d4:68:3f:d7:fd:3e:64:8d:7f:
                    d8:98:e1:d6:de:23:3e:03:7e:83:60:aa:68:10:37:
                    28:33:b3:4c:30:1e:ec:85:45:34:89:bd:01:a1:6a:
                    3b:ea:d8:34:b1:e9:ca:ff:3f:9c:cc:30:0b:a9:57:
                    e7:11:8e:2f:64:52:58:7e:ba:bc:94:e3:d0:a1:30:
                    fb:38:d1:73:c8:83:7f:25:8e:5c:df:a0:64:00:79:
                    1d:97:49:08:62:17:0b:13:59:b8:85:23:88:0b:e1:
                    2a:7c:4e:08:66:aa:69:43:b2:37:45:97:53:d6:26:
                    0a:80:bf:c3:2f:1c:27:ee:92:65:4a:88:a3:55:46:
                    c5:40:ff:c5:aa:ba:c3:88:c5:b5:81:82:c0:fc:bc:
                    87:10:2d:7a:9c:dc:e7:13:c6:9c:60:d8:0e:6b:f5:
                    90:87:46:6c:92:af:08:84:ee:06:e0:63:30:42:5b:
                    a4:d0:af:b3:ab:b9:5e:1f:d7:cd:72:c2:89:ba:c9:
                    e6:c0:20:f0:76:6a:6a:4c:31:50:b9:97:80:e3:e5:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:49:AF:A0:A0:01:81:F0:8D:B0:03:13:21:76:16:A0:A4:6E:66:8C
            X509v3 Authority Key Identifier:
                keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:50:6c:b3:1b:65:99:65:a8:f7:6e:d1:11:8c:ef:ab:0b:
         06:7f:5b:2b:4d:02:62:21:eb:73:c1:37:db:0c:40:6d:69:07:
         ba:77:d7:09:cf:11:ff:85:87:44:50:af:d8:40:83:df:d3:9d:
         fb:96:ca:99:a0:d6:b7:a5:09:fa:72:9b:81:d8:f3:75:8a:8f:
         dc:87:8e:9a:f1:46:c3:51:1d:3d:a8:aa:f2:55:51:97:bd:6c:
         df:45:17:b0:3c:b5:c7:55:13:cd:ff:63:d6:b3:62:8e:64:4f:
         d4:e6:0e:4e:c5:f3:45:5d:b6:0c:56:6c:27:97:ed:2f:c1:47:
         a0:ff:ef:40:93:f9:35:b1:b1:33:23:fe:51:b8:e9:a8:8d:1a:
         65:95:64:52:11:83:2f:ca:66:a5:85:b7:88:5c:0f:75:8d:ee:
         67:d3:e4:8f:70:69:06:37:f1:17:47:4a:e5:8e:de:72:0d:28:
         dc:2f:61:04:ec:40:b1:b6:d9:08:59:bd:09:ef:89:23:76:ff:
         cd:3e:70:2c:4c:3c:2e:9a:9d:ea:13:98:79:10:09:b6:c0:9b:
         73:6c:e2:bf:8f:05:fd:82:4b:ae:ee:a3:d2:f1:60:01:70:9d:
         f1:2a:fc:c0:5a:88:d4:44:23:f3:d6:02:be:c4:d0:11:a8:cf:
         81:ec:e8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----