Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
File:                     ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json)
Hash identifier:          kACjpNKw5kCjUq2Beoe9gH1gGGVwHDFzYZyTrc3fOE0=
Subject key identifier:   59:79:F0:8C:85:30:4F:A2:58:01:A1:0A:95:F1:2A:25:00:B4:D7:94
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Certificate issuer:       /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial:       01962E2B366AF6F772E5B288CDC3283CB627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: +wHUvRmaiJgGuQRswhrrJ/H8qWG3regiaPNEvaOwSDM=)
                          2: SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa (hash: WHZNVk5rkxUgRKY5cx0WN0Gw305ahmbGMR8jfHweazo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:36:6a:f6:f7:72:e5:b2:88:cd:c3:28:3c:b6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=5979f08c85304fa25801a10a95f12a2500b4d794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:12:91:93:5b:46:d4:a0:01:9f:d7:a0:0f:
                    27:a4:5e:bc:b8:9e:78:a6:13:82:cd:6f:f1:5b:9b:
                    23:6e:e1:c1:b0:94:7d:53:eb:6d:4c:56:1e:39:a8:
                    2a:9c:92:94:8b:25:ea:2b:94:95:fb:a3:7f:69:b4:
                    19:63:47:ff:f9:17:36:20:6f:6b:56:65:61:95:39:
                    60:9d:71:98:3e:0d:ca:d9:f6:dc:43:ac:92:03:76:
                    ee:84:35:c0:49:68:6d:25:01:dc:eb:85:50:d5:18:
                    61:5c:8e:c7:a8:7a:59:6e:52:23:54:d1:eb:b7:a4:
                    43:98:e3:b2:6d:2c:73:04:06:30:ba:4f:41:b2:9f:
                    bc:1c:bc:90:16:26:86:3f:75:06:a3:95:d6:14:da:
                    7d:96:bf:b2:40:91:cb:fd:41:9f:59:4b:13:d6:06:
                    c2:8f:6f:af:f2:33:0a:9e:86:81:2b:57:c7:67:b1:
                    d6:8e:4d:a0:3e:0a:b9:14:c1:13:86:24:a5:59:ef:
                    40:2a:4f:3c:3e:dc:ab:7d:43:77:75:02:54:3c:6f:
                    50:4e:60:bb:6e:c5:38:b2:0f:68:6a:3e:66:5d:fc:
                    46:af:86:c6:89:d9:09:b2:90:5e:26:ce:47:15:e5:
                    90:58:d6:25:b9:f5:cb:2d:20:1e:e0:a3:ff:20:5e:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:79:F0:8C:85:30:4F:A2:58:01:A1:0A:95:F1:2A:25:00:B4:D7:94
            X509v3 Authority Key Identifier:
                keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:67:f3:26:dc:67:d8:13:31:c6:63:b3:2e:f5:cb:09:b0:ad:
         56:9d:a1:9b:84:fa:8f:53:ee:4c:2c:4e:5f:eb:81:31:58:e9:
         d7:d6:c8:72:b8:04:21:8f:13:47:45:4b:d1:01:09:e2:1b:80:
         b9:89:bc:f6:de:3b:90:82:9f:68:45:07:97:fc:4b:d1:24:73:
         30:aa:3a:c6:a3:aa:98:51:da:b6:74:06:43:8b:24:c7:1c:67:
         e8:94:d5:bd:61:0a:a5:30:2d:8a:72:dc:45:33:a9:ef:c3:6d:
         7d:e7:a5:c5:fe:da:d5:21:6b:d7:85:02:4d:62:8f:ff:83:b0:
         98:93:a8:6f:d9:38:d8:03:38:60:d6:a5:f0:ca:36:44:e5:c1:
         d8:22:cd:67:2d:63:88:c7:b6:6b:3f:f4:ba:4d:ba:b0:26:d6:
         70:db:68:98:76:ff:c3:e5:f2:48:0e:71:37:05:bb:12:2c:b1:
         ab:17:6f:4e:73:85:1d:db:e7:c7:7c:3a:4d:39:d5:4b:d8:76:
         8d:34:e7:7e:99:64:db:bf:62:b3:d9:17:e7:b9:c9:72:23:6d:
         2c:4c:c0:31:62:44:92:2a:89:ba:23:4e:7d:64:4b:da:b0:34:
         ea:ae:6a:71:23:1f:f7:ab:89:d0:48:c5:72:c3:10:a3:53:f1:
         3d:94:61:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----