Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          D9lop5l++oIX2dCdLJPOf6IpBXVkgtUozt/9HxRJ3x8=
Subject key identifier:   DF:94:6A:64:BC:9D:56:9A:0A:66:72:94:17:50:DE:FD:E1:18:51:D2
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       01962F3D99BDBCB5655829A5A061B910AE69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: 8gvSRkioiol7AtclW0w3QDNdRw0.roa (hash: pAF2HpC02c8LxHhm/ivKqiw2U8OBqawxXoZZFN2vllM=)
                          2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: GtuXliKw2taDnaPOSob12h0dNYYqZUOIm0tWurNjXGk=)
                          3: VqJZEln3bccahadYDW0ePgV1gdw.roa (hash: CgpHiF36vVgykBJlcL4O9MnI1LRoTpD9E00VJ7RhYwg=)
                          4: wQk6P3JazTtfJ7Qbak1iF7pmDzU.roa (hash: yyhyj8+uWZT4ObCsZinsPoUAt/nN+0r3AmItPKtF2y8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:99:bd:bc:b5:65:58:29:a5:a0:61:b9:10:ae:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=df946a64bc9d569a0a6672941750defde11851d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:c2:0d:6d:26:42:47:05:5b:4c:4e:a9:d6:
                    b8:47:9f:ba:9a:e6:5b:46:0e:94:09:73:2f:d2:e8:
                    57:a8:c6:a1:65:47:6c:0a:90:14:32:21:74:a1:28:
                    6a:14:ad:33:06:85:6f:6c:30:db:88:59:97:91:b7:
                    78:20:63:75:9e:4f:21:0d:63:bb:a7:83:36:a6:45:
                    4b:76:60:21:37:6a:3d:bb:6c:61:a7:49:22:9f:a8:
                    c6:ae:12:5b:46:e0:78:b7:b5:c8:66:96:91:7e:01:
                    64:92:c8:33:37:5b:f1:93:c5:f2:de:4d:10:25:2d:
                    6c:d7:14:42:9c:64:fe:0b:d1:42:a6:72:d4:93:03:
                    f5:46:b0:4e:3b:4e:ca:f6:69:ac:a0:f9:26:16:71:
                    0a:30:a2:5c:6a:5d:c7:7c:a4:76:6b:4a:a9:90:c3:
                    1b:ed:39:60:72:f5:a7:91:93:82:bc:06:b3:06:23:
                    97:d4:6d:b9:5c:33:73:e8:f3:0d:c0:c0:93:27:38:
                    74:de:9b:bb:2a:9d:07:95:84:37:6d:dd:1d:36:5a:
                    52:a8:f3:ed:6e:37:09:a7:e1:b1:60:33:b3:47:f1:
                    de:a6:f7:e9:5c:12:1c:0c:68:d5:60:93:c6:0c:4c:
                    31:80:76:5a:a7:bb:36:e1:0e:81:2f:21:91:c5:14:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:94:6A:64:BC:9D:56:9A:0A:66:72:94:17:50:DE:FD:E1:18:51:D2
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e9:34:46:18:9e:34:c4:ac:54:35:fa:6a:29:59:cc:89:c3:
         c4:67:c9:b9:ba:5d:48:cf:ad:be:b0:e0:00:0b:2c:33:eb:b0:
         e2:d5:aa:66:a6:77:41:a5:cf:1b:2f:37:03:25:92:1e:1c:74:
         c9:bc:45:49:3f:0b:59:64:1b:26:05:0d:53:b2:38:d3:56:c7:
         59:8a:09:65:d6:2d:05:4c:2a:2d:9e:57:15:77:fc:b8:ba:c3:
         78:b5:b3:00:57:21:04:b2:fd:f8:fe:0d:07:89:8a:a7:33:c7:
         04:8c:f8:23:b9:eb:5a:e5:a1:37:f8:67:fb:46:40:48:7e:1a:
         1e:40:5d:f2:2e:45:18:f8:39:06:2b:d9:0c:4d:c7:b4:72:1a:
         c4:8f:92:2e:8d:00:bd:41:cd:a3:5b:63:5b:b4:d9:f2:d7:7a:
         be:c3:0e:f9:6d:f3:9a:90:c0:60:4b:6d:ef:fc:5a:b3:f3:9f:
         e7:34:ef:83:bf:9a:ab:52:19:bf:e9:6e:8c:83:92:59:f5:39:
         e2:22:16:83:dd:fe:80:95:71:e3:7e:b0:a4:bc:af:f8:fb:c8:
         f5:a1:02:54:2e:70:42:7a:73:e8:2e:96:16:b9:dc:57:9d:e0:
         9a:72:a7:39:45:55:99:c8:39:0d:1d:08:72:bf:a4:02:79:1d:
         66:28:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----