Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File:                     EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier:          qGxqRX6j7VzAMyc+4xvvZqWW09OeoYZ+dEXyLFXX3dY=
Subject key identifier:   36:8D:B4:F6:09:C3:D5:23:09:3E:49:1F:CA:31:50:E0:E8:F2:0C:74
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer:       /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial:       01962F06DE78C0762A3D64D26D9E087C5A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number:          032E
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: N69dmH0re3gdh+6HAss7QTn+a8THIRf7XVd8jZ66tLc=)
                          2: lEOnyeTSrhVKx1TLByVlPzDKz8w.roa (hash: n8RWZqmzmommBj8oDYR9O53K32j7DKyp4tQyqLf5eY0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:de:78:c0:76:2a:3d:64:d2:6d:9e:08:7c:5a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=368db4f609c3d523093e491fca3150e0e8f20c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a0:aa:ef:30:04:2a:6e:25:db:cd:65:5b:68:
                    ff:d0:52:35:14:04:e5:4a:b7:2b:07:35:1a:6b:fc:
                    c5:30:e7:b0:1f:66:27:7f:bd:eb:4c:39:58:b1:1a:
                    a6:a7:ff:1f:b5:01:84:16:68:fd:69:ce:2f:9c:32:
                    84:38:ff:cb:86:c1:b8:88:7a:a1:21:3b:16:bc:19:
                    be:0f:1b:45:58:d6:55:29:9f:cd:8c:1e:c1:ad:6b:
                    b9:f9:d8:f8:7d:dd:03:97:8d:72:25:6d:c1:fa:0b:
                    32:67:ea:8c:bc:c4:b9:3c:94:42:54:64:8d:3f:26:
                    3f:dd:41:44:cc:28:17:ee:75:eb:2f:23:cf:ae:09:
                    c5:d7:45:ad:ef:08:b9:bd:65:b2:0b:8d:b4:57:fc:
                    21:77:93:3c:0d:db:9d:54:8c:95:26:90:db:db:58:
                    ca:94:f4:b1:a3:6f:fb:99:13:63:d7:5c:02:a2:2c:
                    4d:30:5d:3d:fb:09:29:84:fb:98:93:78:27:26:ef:
                    7b:da:42:b4:af:55:00:ed:1f:5c:4e:29:ef:aa:de:
                    b3:6b:f2:72:74:bb:58:4f:b7:c8:2d:e4:ae:3e:74:
                    4a:a5:d3:61:49:e6:55:01:a5:5a:ae:0d:2d:ce:59:
                    3e:0f:62:76:c6:b4:b0:75:29:81:d4:1e:d8:7f:74:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8D:B4:F6:09:C3:D5:23:09:3E:49:1F:CA:31:50:E0:E8:F2:0C:74
            X509v3 Authority Key Identifier:
                keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f5:1c:b8:3d:1d:c7:a4:a1:52:6e:48:bc:74:eb:c9:7c:d0:
         a5:74:66:a6:62:75:12:05:c8:6d:82:6a:f9:27:39:df:ee:76:
         3a:a7:2e:04:df:5b:06:a5:2c:e4:b6:a6:e0:b0:b5:b9:bf:6b:
         ea:a7:00:a0:65:c3:38:de:e2:d7:b0:fc:da:25:8d:7e:55:45:
         c3:09:7b:08:4e:2e:9b:c0:90:bd:3c:97:e4:c9:17:21:c8:d4:
         56:6f:97:30:ff:22:b2:85:5c:4a:bf:cc:3d:15:ac:77:f6:cb:
         0e:77:2d:aa:1a:2a:25:d9:9f:c2:f3:0c:cf:40:e3:51:15:ae:
         98:6c:be:2d:b2:60:8f:85:c6:1c:db:c6:4e:c6:da:77:2f:7b:
         0c:bb:fe:17:c5:5a:ab:16:04:18:e4:7a:fc:49:23:fe:52:8b:
         52:30:cc:53:54:3e:73:08:c6:70:65:68:47:98:e3:f5:4c:a8:
         c2:c5:74:16:5f:1b:80:c7:c3:c6:f8:87:22:00:5a:19:19:c7:
         8f:1e:4b:ff:63:12:fe:e4:43:64:b9:b2:47:6f:41:84:e6:67:
         82:d2:ed:ce:58:89:e8:65:33:0a:bc:9f:93:56:66:11:1b:fc:
         70:b7:09:e5:b7:02:dc:ec:f5:4d:61:ed:d8:65:12:ca:3d:da:
         bc:bf:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----