Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
File:                     ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json)
Hash identifier:          9/qiAc2K/p5P/4dAzAmiom316WFqDXn+pYTS9OJElEw=
Subject key identifier:   E7:A9:A8:D9:4E:0D:CD:49:A4:33:12:42:B9:1C:4C:9E:9B:C8:BB:27
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Certificate issuer:       /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial:       01962F0678160FF82A7C074F1A1FACFF0162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
Manifest number:          0C97
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: BxyfrN7eLbYXI73Mx5yDFSyHNVh+DWdSZcebz+v2HmY=)
                          2: lTwE90XrCNGA5eJTFjnSjOK1bSM.roa (hash: /sO0aTlcuRH7YD2SVxbEfIzYX6MelmZ8Ycirgk+wG1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:78:16:0f:f8:2a:7c:07:4f:1a:1f:ac:ff:01:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=e7a9a8d94e0dcd49a4331242b91c4c9e9bc8bb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:48:3c:35:ad:f0:6e:ff:94:6b:bd:14:43:
                    83:b0:58:e1:58:52:91:74:22:b0:3f:32:ff:ee:40:
                    43:69:b8:2a:5c:07:9d:d1:01:d9:2b:a4:c3:13:6a:
                    48:06:11:51:a7:cd:69:4c:d7:84:12:5a:f0:52:fa:
                    f1:b5:01:76:1c:d1:b1:fc:62:b3:28:02:73:49:b1:
                    a1:b2:77:5c:de:86:5b:94:9f:ba:dc:df:11:8a:a1:
                    12:ed:7b:ae:15:e7:27:74:65:18:73:97:82:69:28:
                    77:de:f3:31:13:f3:23:43:19:75:04:da:91:b5:77:
                    f8:61:75:10:c5:25:07:b9:90:54:68:ee:6e:47:4b:
                    8e:35:88:7e:de:d6:1b:c8:d9:40:26:a0:fc:78:f1:
                    91:7b:08:88:6c:fa:00:70:ed:a1:0e:8b:5f:0c:64:
                    b9:8b:4d:4e:1e:33:a9:70:65:e7:96:3f:7b:d5:5f:
                    77:a0:39:f1:af:72:07:84:74:17:93:d2:7b:e9:c6:
                    f6:c9:5f:08:ed:db:ea:19:47:35:a9:cd:be:37:d0:
                    5b:d4:a9:b4:b7:06:6e:28:f4:1d:ce:30:08:66:b8:
                    7a:02:93:63:d8:de:da:2e:32:8a:fb:0f:4e:c7:94:
                    7f:76:f3:a0:ed:17:8f:40:cd:22:22:b7:c2:99:c4:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A9:A8:D9:4E:0D:CD:49:A4:33:12:42:B9:1C:4C:9E:9B:C8:BB:27
            X509v3 Authority Key Identifier:
                keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:82:7e:0d:79:43:94:48:3f:28:06:f4:bd:c3:7b:1f:76:31:
         57:04:ee:2e:bd:b7:ff:e6:d7:85:69:ca:b5:62:5a:88:68:c2:
         35:47:40:9a:32:7b:80:13:0e:fd:64:6f:5b:2b:4e:3e:2d:98:
         11:c3:f8:f6:fe:9f:9f:eb:95:17:7b:08:8d:11:63:cd:81:44:
         73:80:80:dc:3a:6e:b7:25:14:21:37:69:7f:4f:35:66:15:af:
         75:84:51:c1:3f:73:eb:ce:42:62:52:3a:7c:2c:a5:26:44:0b:
         db:86:e6:08:7e:03:dd:07:f7:c9:42:b4:4b:9c:86:e7:b4:41:
         fd:35:22:a2:eb:b3:43:cb:ef:48:b8:38:6f:c3:ce:93:eb:3e:
         94:a8:94:82:1f:5a:42:33:ce:a6:35:79:88:fe:7d:ff:50:85:
         02:7c:7c:e5:a8:78:d0:02:4f:2e:51:82:c5:16:e7:a0:34:a2:
         19:8e:43:aa:e9:27:89:ab:c0:10:39:70:9b:e7:c8:6c:7e:98:
         35:73:38:61:ba:af:42:84:ca:a7:07:19:10:07:44:c2:cc:80:
         95:fd:b8:04:d2:0a:7a:5c:17:ae:97:ca:93:12:3d:74:e3:39:
         45:2e:0e:35:4b:58:9e:f1:78:e8:31:cf:af:62:cb:1f:cb:fd:
         fb:bd:0b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----