Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File:                     E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier:          4oBsVbs8Q/+gXE/CXcU96d5v8m7v3XdZaAEI7fy5LlA=
Subject key identifier:   0B:AA:C1:CB:0C:AA:3C:1E:5F:1E:C7:BB:15:90:DA:83:41:C8:97:1A
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer:       /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial:       01962ECFA7D91ADE8BF6036706AFE051186B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number:          03BA
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: gRX+EPsoeeGAd46WhCN5xUn8f9hjyRUY0fnqCtVsfE8=)
                          2: JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa (hash: QG1yL1zcYsT8fBEaDP08SL61cVF4WfYEKH5BAPzFTBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a7:d9:1a:de:8b:f6:03:67:06:af:e0:51:18:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=0baac1cb0caa3c1e5f1ec7bb1590da8341c8971a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:0d:f6:37:e5:86:36:8d:c9:c2:19:e6:18:
                    7e:40:d6:c1:04:87:41:11:7f:8e:04:e5:b3:ed:98:
                    d6:fe:b0:d1:96:99:4b:d9:3c:12:c4:18:ec:ac:a2:
                    48:d0:af:6c:af:ae:e9:eb:af:42:3b:d7:d8:54:31:
                    67:a2:8a:e3:c7:88:91:ea:15:dd:75:3d:81:78:b8:
                    1a:f1:14:18:8b:d3:3b:23:86:7b:59:88:96:56:85:
                    79:b3:9d:df:8a:47:d1:50:cc:90:41:ba:40:d2:85:
                    9c:e3:be:b2:3f:ce:f0:69:8f:62:25:8a:fb:1d:84:
                    78:c3:36:f6:91:c6:33:60:a3:cd:c4:1c:04:03:3c:
                    b8:5e:02:0c:82:06:31:54:b8:c3:e6:fd:39:88:f0:
                    b4:93:f3:48:60:6e:30:ed:3b:46:d6:6d:25:ca:e8:
                    86:5f:fc:d7:6b:8c:14:07:73:aa:0d:b8:25:9c:85:
                    07:67:83:92:ac:6d:6f:fd:74:ff:98:5e:58:6d:95:
                    40:15:17:f2:c3:84:e9:5f:c9:cd:47:42:67:e5:09:
                    4c:92:b6:27:04:4e:e2:b9:6e:80:25:0b:1a:45:ed:
                    9f:ff:71:8b:4a:c0:92:46:1a:af:57:bf:60:80:49:
                    0d:11:e6:7d:0e:cb:9a:39:e3:e6:25:14:7d:95:cc:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AA:C1:CB:0C:AA:3C:1E:5F:1E:C7:BB:15:90:DA:83:41:C8:97:1A
            X509v3 Authority Key Identifier:
                keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4b:08:36:f4:20:13:91:39:52:2e:ec:50:3d:dd:40:9c:9f:
         aa:87:92:88:48:75:c1:90:ba:e6:03:fc:8d:67:c8:5b:af:78:
         e5:ec:72:44:f5:bb:80:9f:50:cb:9a:1f:c1:21:5f:f7:c9:57:
         33:f0:98:15:13:6e:5a:9f:ec:8f:3b:f5:31:53:82:99:1f:cf:
         3f:8a:f0:98:ff:08:55:74:e6:37:26:63:b4:3e:b5:e1:a2:39:
         55:57:15:d1:56:ab:2d:b0:c4:73:a4:0d:66:a9:21:32:f6:24:
         c3:06:e3:09:16:d9:3d:ef:0e:5d:48:af:f4:99:b1:4e:38:7f:
         8a:0e:e5:4c:a7:60:a1:04:0c:04:67:b6:ba:4c:d4:3d:4f:ce:
         bb:0c:af:2f:d4:5e:bf:47:cd:1e:5b:c3:1c:f3:ac:11:c2:58:
         7e:4b:01:c8:20:ff:2f:0d:d2:b0:03:33:49:fe:29:d0:72:0c:
         7d:bb:fe:03:15:e4:4a:95:d5:14:14:e7:84:ff:df:dd:20:20:
         92:d9:65:de:43:05:6d:30:87:5b:d7:f4:82:1c:01:6a:67:98:
         ef:d3:57:e4:25:ac:48:63:bb:6d:d5:04:28:9c:f9:f3:cd:32:
         fa:2e:7c:f7:08:1c:4a:8c:dd:e1:55:e8:05:c5:51:a6:d2:b7:
         06:0e:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----