Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File:                     Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier:          E80WcxCm0wCE6/FIUkVGKV04mWL1mF7Ae6GvsSG9xfg=
Subject key identifier:   A8:18:57:FB:57:4A:C2:86:90:F6:C1:05:35:4E:E0:14:DB:3C:F8:CE
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer:       /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial:       01962E6180F662D3964ED823DDAA6FC28920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number:          07BD
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: xzTrh9kuPGQ55QPKwiozBZ5N/qkQIocguQwSv3bch8w=)
                          2: _xRBA0-FJYAq2bhvbQe3j68XREg.roa (hash: Gym+lS7Pb7qSAGCB20Y3Am819Ocp8b/loNBlr9diFjw=)
                          3: q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa (hash: XO5fotFJ+du20eg1ObsZCqOM3JLAQslX928MaBxUf9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:80:f6:62:d3:96:4e:d8:23:dd:aa:6f:c2:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=a81857fb574ac28690f6c105354ee014db3cf8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:72:93:86:c3:12:70:6f:0e:bd:77:62:96:
                    46:dc:16:b6:77:1e:52:97:b0:40:13:da:db:95:91:
                    c9:f1:b5:a0:bb:69:1b:49:7e:90:64:37:f0:9e:c7:
                    d8:29:bc:0d:4f:99:a7:c9:33:62:b0:dd:67:a6:a8:
                    a0:84:c9:df:52:da:07:26:54:cc:b0:fd:c9:a7:11:
                    aa:55:55:7c:d4:2a:cd:53:51:2e:0f:c7:2a:b5:76:
                    db:de:62:03:a8:2a:de:b1:9a:77:67:26:dc:5a:f2:
                    09:4c:27:f9:95:13:21:87:9e:91:04:f6:07:45:f8:
                    70:24:06:8a:4a:60:5e:f4:61:46:95:ee:dd:2e:eb:
                    62:81:c1:38:25:fe:d3:d6:ea:1e:3b:4a:6d:e1:1c:
                    89:9a:1e:25:69:3c:39:6f:9c:8d:4b:7f:be:7c:92:
                    30:73:b4:89:9a:00:2e:e6:ab:c0:51:9f:88:3a:e3:
                    91:52:fd:04:19:44:c4:45:c6:c9:e7:41:be:30:31:
                    b3:11:33:1d:e0:39:21:68:d8:2d:7a:f9:e4:fa:7e:
                    5b:95:a2:2e:4c:34:67:cd:d1:7c:48:4c:cf:36:96:
                    b0:ee:d2:73:9d:a7:b0:c2:1e:09:ab:0e:12:1e:05:
                    fb:69:d7:d5:d9:2e:a9:8f:7b:1b:2b:73:0a:c6:36:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:18:57:FB:57:4A:C2:86:90:F6:C1:05:35:4E:E0:14:DB:3C:F8:CE
            X509v3 Authority Key Identifier:
                keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:33:4c:5e:d6:95:c1:02:de:e8:32:e0:95:90:55:c4:f2:f7:
         95:6d:be:8b:1d:55:f7:2f:b3:11:66:ce:02:0c:3c:47:0f:dd:
         4c:04:5a:b6:ba:62:54:eb:0c:a2:9f:d3:ea:2c:72:f4:4a:98:
         32:2f:8a:85:79:57:8c:94:a7:e7:cc:e8:ab:21:4d:51:e5:fd:
         1f:a1:4e:aa:e9:f7:f3:81:a8:88:1f:1f:5e:57:0d:67:21:a4:
         42:0e:ca:cd:2b:92:06:cc:b4:c6:a8:39:8b:22:3a:de:a8:93:
         ba:48:a1:1b:4f:81:d3:a0:a4:49:92:fe:3b:ca:2a:87:bb:eb:
         d3:d7:95:e9:52:64:d2:84:04:ec:60:9e:3e:c9:7c:cc:68:8f:
         bd:bd:5e:c2:51:aa:c9:5a:2d:fb:47:c0:18:8f:62:34:58:f9:
         d4:c2:64:27:4e:e5:db:4c:22:0c:55:d9:1f:4a:81:fe:57:13:
         95:fa:94:95:8b:1d:87:f9:62:5b:27:5d:86:f5:b0:cf:2a:8b:
         67:64:40:5d:74:76:a0:2b:d6:3d:bc:94:94:1a:49:8c:71:e1:
         37:42:3c:6c:1d:bb:fe:48:19:4c:75:fc:ed:46:34:00:bd:42:
         b8:0b:b9:84:83:82:f8:81:c1:f7:4d:fa:71:09:35:b6:4b:18:
         68:5b:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----