Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File:                     ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier:          qcBdbnNsRB5Vx1rPE7gNQYeleGpCRSbHTtvKGaqRy+E=
Subject key identifier:   6D:ED:D7:7A:9C:E4:76:73:55:C8:E3:32:EE:4A:D0:D9:10:70:A2:6E
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer:       /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial:       01962E993990FF3FF7792352D9AA597D3D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number:          0D50
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: vKzzVZ4xLML55l0+ih5g2LBD+sgVrmJ8/2D9meDwOig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:39:90:ff:3f:f7:79:23:52:d9:aa:59:7d:3d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=6dedd77a9ce4767355c8e332ee4ad0d91070a26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:73:47:f8:78:7c:55:f3:1d:f1:ac:e5:e6:
                    8b:57:2c:77:5f:cc:32:34:f8:97:7d:fd:32:c5:4b:
                    bf:b5:e5:84:b6:7c:ca:dc:b1:fa:6c:d8:2a:95:01:
                    e1:70:65:12:f5:3a:dc:51:62:8a:02:00:3e:f1:98:
                    79:99:7e:43:0f:7e:05:90:a4:9c:fc:e0:23:e2:7d:
                    4f:7b:c9:d7:f3:a6:29:89:61:e8:3b:bd:c0:e3:00:
                    dc:5c:fc:f4:f8:d2:04:f1:eb:22:80:09:fe:8e:a4:
                    20:dc:7a:95:58:61:5b:0e:4a:a0:75:fd:75:fa:33:
                    4d:dc:80:e9:9d:ac:e3:60:95:56:b4:a6:6d:23:23:
                    7d:59:60:d8:6d:ce:f5:2d:c2:54:8b:48:82:de:ff:
                    95:63:8c:7e:22:8d:ac:31:3f:b6:87:06:0c:b3:fc:
                    d8:73:6e:d8:5a:69:f8:10:85:c0:42:c5:45:f3:54:
                    ef:b0:34:a4:6f:dc:fc:07:94:bc:58:ba:bc:a2:1e:
                    aa:32:ff:fb:d2:68:5b:cb:36:62:d1:a2:f7:7a:e6:
                    9a:63:fb:91:08:65:6a:3a:8b:6e:e0:49:97:6c:48:
                    7f:9b:84:55:22:9a:f0:54:51:19:ca:47:25:dd:82:
                    58:43:c1:13:15:a8:5c:df:5c:09:8b:ae:4e:1b:77:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:ED:D7:7A:9C:E4:76:73:55:C8:E3:32:EE:4A:D0:D9:10:70:A2:6E
            X509v3 Authority Key Identifier:
                keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:fb:33:47:01:55:d5:62:e7:77:9c:3f:f1:1d:84:bf:b5:
         84:8d:88:4f:a5:8e:00:27:e5:f6:c4:2b:d3:df:66:96:f7:3c:
         8a:fe:8a:2e:6a:f2:22:12:81:bc:19:22:e7:4a:e5:ef:f5:f7:
         cb:5e:b1:a0:8f:0c:cf:af:32:30:b6:5c:4f:14:1e:a5:2b:a3:
         54:10:58:69:ec:d9:bc:9a:35:13:33:3e:17:f1:09:32:b0:61:
         0e:27:53:1a:9b:21:f1:f3:29:43:d4:0c:b2:10:0c:cc:aa:32:
         7d:b1:ca:9f:c5:ae:65:20:43:2a:07:a5:68:60:e5:71:59:b5:
         e0:78:01:65:ed:7a:2b:d7:9a:68:85:49:4b:42:e3:07:42:06:
         79:67:93:ed:b5:ef:64:ab:6a:2e:9a:4b:a5:ca:8f:67:75:7d:
         a3:3f:6b:ac:28:3e:69:be:c3:5d:76:ed:5b:15:7a:63:ec:5a:
         18:e1:ba:26:9a:a0:20:7f:72:1b:76:dc:b9:a8:74:8d:ff:7d:
         73:b6:c1:34:ba:5c:ca:b1:39:4a:f5:26:f9:b5:99:09:37:71:
         b2:18:f2:fa:ad:28:81:07:ec:7d:fb:ed:7b:44:98:37:fb:ee:
         0a:22:0c:9f:22:6c:36:18:8c:5d:56:d1:40:90:19:bf:7f:c9:
         c2:d0:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----