Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
File:                     E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json)
Hash identifier:          2q88G/NMZ0Ja5ncyWym6GzLezFhQRZdQv2YNQxmfTLE=
Subject key identifier:   F2:2B:57:9B:6E:38:C7:EC:60:B9:91:7A:A4:D5:D3:CF:67:34:00:B7
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Certificate issuer:       /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial:       01962F746D61CC6644C23E93E325F3C2C90B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
Manifest number:          0423
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: 8FXx6e-u5uU4oX7I2qEVdoZijzg.roa (hash: wEhTzMM4+HaPiSo3UljIAbk1aEVV4QI7TvJR33027+I=)
                          2: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: EFVgIqI2VLGgEUN09q2L9LmrTz7TdEhli4oCqY9CqfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6d:61:cc:66:44:c2:3e:93:e3:25:f3:c2:c9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=f22b579b6e38c7ec60b9917aa4d5d3cf673400b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:60:2a:d6:f4:c8:19:6d:35:27:95:19:1e:
                    6a:6e:8f:c7:1f:b3:ae:34:15:3b:7d:0a:0c:0c:1e:
                    87:c5:88:b6:bb:18:b5:54:32:72:b0:26:65:fa:1a:
                    ef:ff:76:be:55:e6:c1:5b:66:25:1e:03:80:da:54:
                    99:23:8c:ad:7f:03:63:35:fc:5f:5b:6e:85:f8:79:
                    4f:f5:b1:23:0d:f0:66:ce:b5:b0:1f:77:2e:6b:32:
                    5a:d0:75:ff:6e:ef:22:3a:0d:15:f1:c9:e5:42:3e:
                    81:df:9c:3a:67:5d:aa:f0:1f:39:8b:b3:51:32:5f:
                    98:46:90:93:dd:8a:c1:3a:48:fd:0c:2b:3a:dd:65:
                    96:25:b5:a4:8a:04:37:0c:c0:ea:27:0f:bf:eb:0e:
                    fc:e0:c1:b4:68:ff:1b:c6:10:89:93:79:3a:ff:f3:
                    21:39:a3:8c:e3:d7:cf:14:b7:dc:dc:30:73:71:c7:
                    4f:f3:10:27:bc:2d:89:b6:42:8e:a6:11:8a:fb:2d:
                    be:0f:d0:f3:bc:8a:27:f7:c0:c2:74:84:59:a5:47:
                    17:76:c9:0d:8e:87:f4:39:85:91:dd:54:08:a6:5d:
                    3f:8d:3c:01:22:cc:6f:41:fe:94:5a:e5:ee:40:36:
                    e1:57:c9:1d:3e:eb:33:ae:88:7e:d6:9a:6e:36:c1:
                    48:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2B:57:9B:6E:38:C7:EC:60:B9:91:7A:A4:D5:D3:CF:67:34:00:B7
            X509v3 Authority Key Identifier:
                keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:80:ea:d3:e4:1c:95:9f:2f:f5:e7:56:22:e9:a3:3d:04:19:
         16:3a:5f:34:61:0b:3e:35:5b:29:62:e2:e4:d8:58:6d:e1:b4:
         4b:9f:2c:69:99:54:94:d6:9e:07:ed:23:c3:4d:29:78:98:88:
         33:d6:4e:e9:e6:6d:c2:6a:dd:26:0f:9e:60:d3:4b:f9:4c:21:
         3f:2e:e3:6b:a5:67:75:46:10:cc:bf:42:79:bc:e4:6b:e8:25:
         56:59:4e:3e:f4:5d:e7:1b:41:f9:28:f3:b1:ee:27:03:01:34:
         2b:2a:08:26:da:97:e2:17:5d:38:46:d6:06:07:ca:ff:16:7b:
         5d:0b:91:15:05:c5:86:b4:56:69:49:4c:d2:48:c3:ad:0a:6f:
         e0:33:79:af:2b:f6:e2:40:ca:3f:66:c9:6a:c9:ce:e0:ba:c9:
         8e:87:b2:7f:f4:6d:e0:32:b3:39:0e:c4:3b:ca:74:04:17:26:
         76:54:eb:09:2b:9e:de:17:ff:02:e0:67:28:92:17:39:c6:a5:
         d4:4f:5b:4f:7a:5c:d2:f5:93:9f:80:d7:da:60:6c:ed:c3:2d:
         e7:89:a1:ea:79:47:a5:d0:f3:c0:9f:a2:64:9c:a1:3e:fa:29:
         a0:6c:6b:17:4a:ad:68:30:35:09:58:d0:85:d5:67:2a:74:c3:
         f1:b9:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----