Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
File:                     ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json)
Hash identifier:          gjaSf1lbmVMMz9uqOv5OviaOatoirlZsnAnCZ79Igh0=
Subject key identifier:   48:3C:71:C6:B5:62:BC:CE:28:77:1A:99:11:CA:B5:3E:EE:1A:FE:BD
Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F
Certificate issuer:       /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
Certificate serial:       01962DF3E78D62C5192EBB33DD5355D7678F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft
Manifest number:          056D
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: A9uyxDgQSxsPeKC9J6gtCl+u/FrUxjvVv0Nfgi0fmZg=)
                          2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e7:8d:62:c5:19:2e:bb:33:dd:53:55:d7:67:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=483c71c6b562bcce28771a9911cab53eee1afebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:88:0d:34:c3:af:4b:56:a1:5d:3f:c8:89:
                    cb:94:e5:57:e2:e3:e4:9d:75:e7:18:ad:12:ee:53:
                    c2:18:ee:f2:16:56:11:61:da:4e:64:e1:67:2e:40:
                    19:32:7e:eb:2b:ff:1a:bd:b7:4f:5a:c3:a2:ec:7e:
                    42:ff:e2:3f:94:bd:53:1a:5b:09:da:3c:0f:9e:42:
                    0b:ba:6f:c1:5f:fe:25:3a:a9:a8:6b:8f:f1:6b:2e:
                    94:3d:b3:2f:d0:51:6b:77:d0:b0:0c:f0:6c:f3:af:
                    51:c1:2c:08:42:a2:0d:55:5e:4a:42:ab:23:5f:22:
                    04:3d:91:34:9d:00:0c:43:ec:d3:61:66:d8:b6:20:
                    11:45:ef:da:6f:ae:18:67:ed:b3:9f:97:2d:d3:5b:
                    44:df:48:16:83:a7:3e:89:97:6a:20:bf:85:f2:9f:
                    b5:1e:25:75:47:70:a4:35:6c:a4:4f:92:97:73:3a:
                    4d:2a:a0:58:fa:b4:d9:d0:f9:d1:b9:37:8c:d1:0e:
                    6c:cb:b2:23:1a:d8:7e:79:9e:5e:f5:f0:f7:f0:73:
                    da:bc:25:cc:7f:f6:34:59:d2:24:bd:f5:45:80:96:
                    2e:09:84:20:43:f3:a1:9a:0b:e9:e5:35:3a:77:ac:
                    ef:ad:b2:f6:e4:37:ea:2a:eb:14:6c:2e:c1:58:0e:
                    1f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3C:71:C6:B5:62:BC:CE:28:77:1A:99:11:CA:B5:3E:EE:1A:FE:BD
            X509v3 Authority Key Identifier:
                keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a0:09:74:57:a5:97:1a:0c:3d:ad:2d:1a:2c:82:9c:d6:26:
         ea:4a:84:7e:ca:66:e6:01:22:e3:02:35:4b:00:55:09:52:8a:
         d0:01:ad:59:f8:a5:27:c5:65:80:7b:09:b6:5a:91:fc:00:e7:
         cb:63:6c:c6:e0:d8:8f:7c:bf:42:95:26:68:61:83:d0:26:54:
         f7:b6:50:a9:91:e0:5b:8c:ad:cc:08:bc:f3:80:e8:7a:73:ab:
         b2:c4:de:dd:a8:53:ff:d3:af:5f:9d:71:ee:9b:b5:aa:5a:88:
         91:bc:3f:5e:93:53:b3:20:67:b1:14:9b:05:14:26:87:ad:aa:
         8c:f3:76:df:b7:9c:3b:c1:85:cd:6f:af:2a:e9:94:32:36:14:
         ca:1a:86:5a:91:2c:45:4f:bb:c9:6c:4b:6b:e4:bd:40:c3:3f:
         48:2a:2f:fa:fb:5f:25:ce:38:85:f6:c9:96:13:12:33:2e:c5:
         5d:76:fd:1a:57:eb:24:aa:d4:1a:72:9d:02:cc:71:dc:28:8c:
         eb:47:29:4e:a2:bd:74:e7:1c:67:2d:bb:bc:4c:28:a9:24:c5:
         bc:56:4c:73:1c:fd:aa:b7:04:14:09:d4:dd:e8:b6:46:ff:47:
         8e:22:16:74:32:0b:04:77:b8:cc:d9:a1:1e:fc:48:97:20:a8:
         11:e4:3f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----