Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File:                     x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier:          /3OvHQH91tdzn1cMlmrXba3z6H+UVX+OhNHc4GEE+Ng=
Subject key identifier:   55:D7:89:DD:12:91:FF:01:85:D8:3A:B0:39:72:3B:16:F3:35:F4:6D
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer:       /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial:       01962E61EDD0B85D4121979A2035A087B7C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: 9QkZQFFq52UED9EyY0jKnFH-pX8.roa (hash: qLNZsCVw5BE1cHr6HyybImHSaQWc8kutbUnGNRzqfeU=)
                          2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: eFPFNWI7SBauqrW31UpCcVeuBZzpHW2F05aLG/FUMtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ed:d0:b8:5d:41:21:97:9a:20:35:a0:87:b7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=55d789dd1291ff0185d83ab039723b16f335f46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:f2:b1:6b:6b:c5:dc:75:3b:48:b5:91:4f:
                    b5:f5:bc:07:d6:df:57:22:7b:cc:ea:8a:29:41:96:
                    73:67:21:3a:6e:1c:40:96:70:54:de:7a:22:2f:d0:
                    47:5d:1f:2e:6c:ab:8d:5e:dc:c0:13:5e:90:a7:24:
                    27:1f:58:5e:a2:2e:05:58:35:28:da:56:e6:53:f8:
                    d9:cc:01:d6:5e:2d:ff:a1:ac:f2:c4:fe:bd:b1:42:
                    1b:7f:7e:f4:6e:23:94:9a:bc:7c:f5:88:7a:ee:7d:
                    4f:e9:93:04:34:54:3b:0d:02:73:0b:28:86:b4:72:
                    a3:e7:dc:c6:4a:8f:e5:8a:a3:5a:bb:d8:bb:04:8a:
                    a7:2d:cf:ac:1e:62:81:c5:11:26:9a:62:4d:62:57:
                    37:7c:12:19:2f:ac:d1:c0:2d:74:7e:b9:14:78:2c:
                    0a:ee:ba:3d:a4:5f:c4:83:79:19:91:50:f0:09:31:
                    75:3a:50:6d:12:cf:e7:97:da:a5:90:4a:ae:5d:54:
                    36:5d:c8:03:fc:e5:51:a0:ac:e0:18:e7:e0:85:aa:
                    d1:cc:04:73:aa:11:b5:56:7a:b6:95:35:c4:60:0d:
                    96:19:32:e5:e7:6f:8b:2d:0a:aa:d6:4c:c3:e9:73:
                    98:2b:1c:30:c3:c3:e4:64:80:6f:96:16:68:62:e9:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D7:89:DD:12:91:FF:01:85:D8:3A:B0:39:72:3B:16:F3:35:F4:6D
            X509v3 Authority Key Identifier:
                keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:03:1e:5b:fe:f8:31:90:ee:b9:89:2e:da:5e:8d:b7:f0:b7:
         1b:51:bb:a8:2c:6a:2e:97:44:e5:22:8b:c3:7f:cd:3b:ce:2a:
         e8:97:0a:4f:c4:f9:36:e1:d1:ab:e0:db:b3:5b:68:ec:2f:34:
         5c:9a:af:36:46:99:d4:f3:41:9b:01:f5:81:5a:4d:47:b9:c9:
         ed:90:47:4d:9d:59:fa:99:b4:64:b0:84:14:79:e0:17:8b:0e:
         a5:70:c4:e9:0b:8d:1f:13:11:d6:df:09:29:bd:34:6d:4f:d6:
         a7:09:b5:f3:b2:d1:3b:e4:50:fe:c2:cb:00:56:08:cd:50:3e:
         9c:91:05:89:37:64:12:9b:15:59:a4:e2:37:83:46:47:9b:b0:
         6a:a8:56:7d:1f:4f:da:70:c1:f2:df:fa:3a:86:af:df:46:58:
         0e:ef:c0:86:a4:3d:45:0d:5f:20:bd:f3:87:7a:d0:12:aa:0f:
         28:d0:a9:82:ac:1f:c4:e5:7d:3a:51:64:b2:10:08:e4:e2:94:
         e6:fb:b5:65:69:d8:92:73:38:eb:07:e8:f4:c7:0c:73:15:53:
         11:8d:ef:a8:67:e4:8e:96:31:cc:b6:f6:22:9b:eb:00:ca:4e:
         9a:80:5b:2f:a1:2c:56:78:42:fc:71:fa:b6:8f:25:e8:0f:77:
         6e:4c:c2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----