Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File:                     EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier:          43ggwJY2kfpp9KPCWS+9NG87AjJp8nACC17ML1aBpiE=
Subject key identifier:   B9:15:65:5F:E0:C9:F8:6E:95:4E:4B:BA:CF:DD:99:9E:30:70:CC:D8
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer:       /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial:       01962FAB6D038FFE1C0D78C50D3B6BC2B519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number:          0CDF
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=)
                          2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: odVI2mAVY4DBtDY3RahdGFUXleOknIlUh6KlF4xGJ6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6d:03:8f:fe:1c:0d:78:c5:0d:3b:6b:c2:b5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=b915655fe0c9f86e954e4bbacfdd999e3070ccd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:45:ff:d5:54:9c:0f:43:b6:7d:a1:d8:07:
                    52:49:ab:93:82:a8:d2:87:08:ca:a1:77:c1:9b:33:
                    2e:e7:b2:61:e9:3d:29:3d:3f:12:95:5f:77:a1:10:
                    79:e0:f6:8a:5b:6e:a8:32:c4:67:a2:d4:c6:7a:98:
                    b3:05:65:fc:22:07:ad:45:89:79:38:e1:3c:2d:d4:
                    28:fd:87:04:b4:c4:f9:ae:a4:49:08:56:02:b0:26:
                    46:26:1c:13:82:31:8c:ec:4a:43:43:4b:03:c0:ff:
                    96:26:6d:b5:f9:70:29:56:c6:f3:6f:16:b3:e2:c3:
                    3b:fb:ee:f6:61:b3:99:05:1e:2c:c1:cc:a2:0b:04:
                    e1:8a:24:7c:0b:29:af:ed:57:f9:ae:e6:8a:e9:be:
                    5d:f0:d0:25:8b:34:45:62:b2:aa:fa:da:8b:9c:8a:
                    46:e2:15:ca:7f:a5:62:e4:8f:65:7e:33:5f:25:11:
                    65:2b:e4:cd:e5:bc:36:56:eb:12:08:9d:b2:89:7a:
                    63:c5:ba:ce:d3:8a:66:a5:62:ca:98:9c:24:dc:4b:
                    59:9d:ab:e8:1d:7b:e0:0a:b7:b4:92:cd:2b:c7:15:
                    a7:c7:e9:d1:fa:73:40:a8:ec:a1:f6:48:ee:05:75:
                    90:d7:7b:00:36:e0:8c:95:cb:02:0a:98:de:77:70:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:15:65:5F:E0:C9:F8:6E:95:4E:4B:BA:CF:DD:99:9E:30:70:CC:D8
            X509v3 Authority Key Identifier:
                keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ab:27:75:b4:d4:1e:fc:37:6b:a6:c2:55:a0:3e:ce:9c:30:
         88:bd:f3:3c:19:16:aa:88:59:a2:b9:20:81:4e:77:45:9e:40:
         f5:4f:35:f7:6b:5f:9d:58:0f:ea:38:be:40:ae:4f:b4:47:73:
         8c:62:b4:b6:e0:7a:c6:f0:79:12:5f:88:15:28:3c:52:c3:f7:
         82:90:57:1e:06:49:c2:df:95:4a:3e:7b:96:3e:7d:b9:50:4f:
         be:63:a1:d1:ce:a9:c4:a4:ae:cf:ef:02:13:79:41:e8:4e:5d:
         43:68:59:76:0d:dc:8e:28:d8:70:f6:26:19:50:ee:13:4b:32:
         e6:ab:56:9e:28:f8:02:af:81:cf:0f:17:8c:51:ff:8e:e2:a0:
         10:50:dc:08:92:65:0c:11:7e:f6:9e:ae:c2:29:c1:72:ad:de:
         dc:e4:2b:0c:c1:8b:54:41:ee:f8:23:35:13:b7:03:82:83:3f:
         1b:09:1c:4a:e5:f3:3d:b5:97:cf:0a:ef:44:2e:c7:aa:de:d6:
         4c:f4:1c:4c:09:84:9c:f5:58:54:87:14:91:ff:42:04:8c:11:
         fc:f9:ea:ea:9c:31:91:37:c3:91:16:29:19:91:7f:6d:d1:cc:
         76:28:ad:ab:dc:75:e7:f3:52:54:34:ac:9c:58:31:49:05:ca:
         6f:21:13:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----