Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File:                     ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier:          oBXfD84Ssk9Mjh2OultQFc8lCyPAPfbI3/8/7Vw4MBo=
Subject key identifier:   72:30:66:75:0B:6F:6E:F6:7F:EC:61:DF:6A:AF:C0:F1:B7:B7:50:11
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer:       /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial:       01962F74D85AE19C807648B6A0CCA67DCF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number:          0389
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: ZdmKnWbcKUYpkJc2FQBgnodEDWTDq4lb4rw60hZpKws=)
                          2: eY3YrLangF39TsrfFYAYI-Ypyew.roa (hash: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d8:5a:e1:9c:80:76:48:b6:a0:cc:a6:7d:cf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=723066750b6f6ef67fec61df6aafc0f1b7b75011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:97:9b:95:4d:ba:a1:e1:9c:31:13:06:28:
                    c8:42:cb:4f:75:8a:4e:7e:c1:56:40:34:c8:49:2d:
                    77:2e:2d:0e:e1:29:ff:aa:74:65:a9:5e:fc:b7:b1:
                    35:22:fd:92:07:7e:da:17:26:fd:ea:f6:3d:fa:e2:
                    03:65:c7:02:16:f6:14:1c:31:fc:87:77:44:0c:13:
                    0e:4d:9d:94:61:ce:ef:8e:3e:4a:e5:1f:e4:6f:56:
                    73:20:ba:26:5b:61:64:c4:c9:05:81:db:6b:5c:f1:
                    75:62:8b:c1:29:9f:3c:a1:a0:fa:8f:57:59:dd:7b:
                    7a:62:06:df:91:fd:f9:5f:f3:db:d9:c8:d5:cc:22:
                    90:be:42:14:60:b0:3b:bd:1c:c6:30:95:2f:cf:4f:
                    03:2c:7f:0d:7b:c5:ed:3c:77:79:91:b0:a1:ed:25:
                    5b:a7:d2:4b:cb:27:ad:3f:26:69:51:8e:b6:24:3d:
                    4f:5f:94:54:f5:57:ba:b5:91:03:0f:75:47:c8:7d:
                    85:08:28:9c:96:a3:92:8d:ca:0b:2e:2c:21:60:14:
                    e5:6b:48:31:67:64:ee:c6:a4:b6:a6:a5:08:8b:c4:
                    da:69:d4:60:47:fc:05:c4:b3:cb:bd:7b:8c:69:52:
                    d7:97:41:f2:67:cf:af:75:20:e2:b4:74:fb:26:3b:
                    0e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:30:66:75:0B:6F:6E:F6:7F:EC:61:DF:6A:AF:C0:F1:B7:B7:50:11
            X509v3 Authority Key Identifier:
                keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e6:bf:dd:16:36:2b:c4:a8:4e:44:0f:38:8c:ff:87:62:b1:
         82:a1:f3:14:79:94:a8:19:8e:81:95:a1:e3:ee:62:31:86:0f:
         84:4c:94:f1:90:80:70:41:1a:ad:67:0b:a5:53:55:cd:d4:7c:
         9d:66:93:a3:a7:9c:8b:f6:41:d2:74:6e:cc:1c:0e:ce:e5:72:
         95:26:50:97:8b:c3:55:c5:49:26:99:ac:37:89:47:b8:cf:bd:
         f8:24:6c:bc:b3:28:6c:71:a9:33:aa:b9:9c:58:2d:44:59:2c:
         a6:97:95:bf:98:0e:fb:d4:7e:34:25:d3:73:26:c4:94:07:1e:
         6e:18:8b:f9:6e:0c:c3:53:5c:4a:1c:da:4c:fe:13:84:7f:b9:
         20:e0:29:ef:7e:61:cf:49:fe:06:61:7d:d6:af:a9:46:0b:34:
         21:9c:3f:0a:38:14:b0:f6:15:be:35:c1:e9:26:47:d0:f4:38:
         30:09:d1:56:43:87:bc:16:f9:dc:9b:c2:fb:15:6d:96:d5:a8:
         bf:0c:4a:5e:be:24:c1:05:ae:83:1e:dc:82:90:9f:27:b8:36:
         c4:b5:60:0c:0e:3e:07:90:5f:35:2c:07:b3:b6:2d:3c:86:26:
         4b:ac:39:09:ff:49:c5:34:9d:3b:1e:36:9b:60:89:a3:03:0f:
         0e:33:89:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----