Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
File:                     E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft (raw, json)
Hash identifier:          /O2aNWSIXwRJDRBRg3D33QIUI4LzDYUize9PFNmnud4=
Subject key identifier:   F5:2C:41:8A:99:78:E2:B5:DB:F1:E1:45:40:BC:A0:01:3E:D9:DA:A2
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Certificate issuer:       /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial:       01962F071E5A693D055E712688B0D7F4F1E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
Manifest number:          0774
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl (hash: BthmcsDpd1yISVgEp9wqoS5IR4mtVYmcNDtn9O0soJw=)
                          2: JwyhTY3gBjH_DHx6X1gPB4EC1Hw.roa (hash: Y38jvMStrd7/OGI8zyUcvfpz5v5z/NCYXMUYLkJSmbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1e:5a:69:3d:05:5e:71:26:88:b0:d7:f4:f1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=f52c418a9978e2b5dbf1e14540bca0013ed9daa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:d5:d6:c6:3b:cc:ea:8e:9c:69:80:75:91:
                    16:73:63:83:35:18:9e:ec:29:94:db:1b:f1:27:e0:
                    b6:50:29:5c:73:07:84:7d:68:4a:3d:bb:d0:5c:03:
                    ae:c4:99:cc:0b:11:b8:57:71:af:1e:b2:f3:08:d1:
                    87:2d:a5:d0:b8:bc:cd:cd:1b:52:3e:ee:d5:37:31:
                    ab:81:88:23:5c:e0:c9:ab:13:bb:3b:5b:89:80:da:
                    4a:38:9f:ed:84:cf:47:eb:8f:6c:54:60:21:b8:62:
                    e7:d8:73:c3:1a:81:8d:3c:df:a6:91:4a:33:7b:19:
                    cc:96:16:90:a7:88:a6:46:a7:9a:fc:81:d8:33:57:
                    b6:ae:02:fe:f2:26:b4:77:fc:da:d7:d5:6d:22:f9:
                    37:75:95:d6:aa:89:d6:c1:66:a3:57:20:d5:42:1f:
                    20:36:ab:17:fc:00:57:b8:6b:cc:05:dc:05:82:93:
                    30:bc:e9:13:0b:00:1f:39:b6:ed:41:b0:4e:c0:6e:
                    82:d1:94:06:01:30:49:a7:32:dd:c2:49:ef:14:d1:
                    12:a6:ae:64:3e:8c:f7:d7:f0:78:f0:62:4a:03:09:
                    d3:77:9f:cf:d7:61:72:a0:c9:d6:62:82:b8:b6:57:
                    b6:07:64:e2:ae:46:48:90:2a:38:8a:71:fa:6e:dd:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2C:41:8A:99:78:E2:B5:DB:F1:E1:45:40:BC:A0:01:3E:D9:DA:A2
            X509v3 Authority Key Identifier:
                keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cb:5d:34:09:c8:81:20:f8:32:a4:5e:4e:64:41:0e:89:8e:
         36:71:20:fc:bb:c2:fb:17:05:84:08:5d:3b:22:61:9d:16:26:
         09:89:0f:f3:24:da:04:c7:62:41:4d:11:b3:e9:07:8e:3c:9c:
         ae:ad:f9:5d:44:a9:44:01:77:12:05:28:eb:1c:ab:7a:e2:08:
         b3:b6:7f:d1:bb:6e:af:32:8e:07:e9:db:d3:e1:35:8e:cf:44:
         e3:a1:aa:ab:be:97:36:43:2e:ac:4e:6f:01:f4:d6:10:5c:fc:
         10:63:18:2c:57:82:2e:b0:4e:d3:fa:8e:c2:c9:ed:22:3d:83:
         8a:3b:5c:90:fb:d7:06:f4:fd:eb:54:c3:23:b1:05:4a:90:68:
         d0:7b:6a:72:89:cc:f3:91:af:2f:38:b0:e6:72:5c:7c:32:22:
         45:9d:5b:e9:33:bf:9d:d9:4a:08:0c:a9:b8:f8:5e:51:f4:37:
         70:7f:08:e5:9f:4a:b8:68:a3:f2:9f:d4:e7:c9:56:73:87:17:
         17:b8:58:0e:f0:1a:ee:d2:f2:2d:23:2f:4a:c2:3d:50:31:a2:
         01:ba:ad:e9:b1:37:70:5d:89:93:c8:3c:fb:ca:e5:92:41:17:
         7e:7e:88:1f:df:03:bd:a7:2a:74:c1:bf:21:1a:f1:23:37:27:
         2e:c7:94:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----