Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
File:                     E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json)
Hash identifier:          flbkgwPn/ax2fXj2VT/fDZ+U2ax8l+qZ+/1NV2p0YIk=
Subject key identifier:   57:83:DE:6E:72:58:51:BF:4B:58:87:67:C7:09:AC:93:62:61:4E:3A
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Certificate issuer:       /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial:       01962ECF7F6929FA1D188B2715DC35ED1242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: nQRmkwnWXtV21QJGh8otIQdbf2z8S0eUhwErmccccaI=)
                          2: Lwv2z50TacEXDfAgt2QQ5TnpkCs.roa (hash: tYAhzY7EkxkcdKAd1e+CEruoxf+PG643EXDIhg1GnKY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7f:69:29:fa:1d:18:8b:27:15:dc:35:ed:12:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=5783de6e725851bf4b588767c709ac9362614e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:ee:cc:b4:09:9d:15:0b:b1:ba:2d:d8:a3:
                    b7:91:7e:80:e4:e1:2d:b2:5a:97:b5:22:b2:a5:ae:
                    20:70:f0:25:f1:4d:76:ba:49:26:18:d2:24:11:12:
                    12:eb:f5:65:5d:bc:4f:72:6e:a6:88:26:a0:ee:4d:
                    61:bf:62:b6:df:8c:81:3b:67:79:5a:8f:ec:24:17:
                    7f:ee:77:8d:28:de:43:81:ed:78:e1:5f:3c:49:ea:
                    36:67:a3:7f:4b:d6:d0:76:41:11:9a:6e:05:39:db:
                    ea:e6:70:df:b9:29:84:07:10:fd:82:5b:f0:c5:d2:
                    d2:5f:53:72:82:91:1b:e6:9a:0a:9a:db:f7:7b:9b:
                    10:d1:fd:e1:6f:e0:12:ff:96:92:ea:f1:7c:d2:d8:
                    c8:c4:70:03:02:70:3d:5b:55:65:86:02:ed:c4:90:
                    fd:96:ee:4b:31:c3:53:b8:e0:69:29:8f:24:67:19:
                    37:98:77:cf:40:2e:3e:76:24:cb:e5:32:7d:9c:fa:
                    92:06:d8:c4:49:3a:1e:9e:d5:23:8c:96:e3:72:45:
                    87:62:83:09:a4:08:78:8a:8d:d9:e0:7a:da:48:76:
                    8f:54:a7:c1:16:7e:35:22:0a:6f:68:93:f1:1e:b6:
                    34:82:7b:61:29:2f:38:81:9f:64:e0:3b:6f:2d:aa:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:83:DE:6E:72:58:51:BF:4B:58:87:67:C7:09:AC:93:62:61:4E:3A
            X509v3 Authority Key Identifier:
                keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:09:ce:6f:b7:f4:66:39:4f:12:85:55:9f:39:e5:c9:17:a3:
         e0:62:a1:22:48:90:01:a2:f8:95:4b:6d:19:b2:a0:97:a9:ee:
         a6:fb:80:e8:67:e5:1f:ef:5f:93:92:37:97:1b:c4:a3:e0:3b:
         cf:3b:a3:ab:72:64:bc:2b:e0:5d:3c:09:86:5f:dc:6c:41:f5:
         76:3b:38:1c:25:4d:af:96:96:fb:d1:27:4c:74:22:5a:e5:47:
         d1:0e:13:00:39:5b:94:dd:f0:90:76:65:81:ab:0b:4a:74:c3:
         0c:b5:e9:17:6c:2f:49:3a:b1:0b:f9:3a:37:63:78:b9:f1:76:
         a2:03:4c:d7:25:69:6d:a3:ea:59:90:89:85:49:59:95:72:a8:
         1b:7e:ab:cc:81:71:ce:f6:a7:2d:85:60:98:38:ed:af:a8:00:
         ee:61:ec:bd:50:8d:96:85:95:e1:0f:06:17:3c:fe:9b:ad:b6:
         67:23:b3:33:6f:a2:9d:a7:3a:fc:a8:2e:31:62:85:f2:c8:48:
         50:5a:91:2a:98:27:bb:41:5d:ae:5b:9c:5e:9f:41:2e:83:1c:
         03:86:b4:94:1d:e0:95:8d:e8:f3:2e:a9:57:db:8f:44:f5:0d:
         a7:1c:ca:09:06:e3:a5:dd:ec:15:c0:2a:4a:1c:1c:27:b7:e0:
         8f:fc:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----