Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File:                     e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier:          6rNO8OThiKPhNYekp8L0wrWt0XAX7P4uomBIsRgQeuM=
Subject key identifier:   83:DA:12:83:25:96:09:2D:B5:B4:F6:43:62:86:62:D2:99:17:3D:9F
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer:       /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial:       01962F069C1509E40D2B0A50F3D89CD4BB88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number:          0A11
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: X1TlKjqQxQOIUE9nmZNVP4vjBXo.roa (hash: YEcDQS5RtxJGLo4gojN6ANb19cB9cM3e9I1XVwuKzs8=)
                          2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: bV8f7nCv7jM92V2dK3iFD2wii3AL5APteZv1/iWNquw=)
                          3: pbPgbOFAYYSbv86NqTphvTqH-ss.roa (hash: 2bo0N8otfq6/P5RuOu/G2vL2kcq6chqi1fFShZ0tEtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9c:15:09:e4:0d:2b:0a:50:f3:d8:9c:d4:bb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=83da12832596092db5b4f643628662d299173d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:56:a3:cd:83:58:10:6c:7c:00:2f:fe:19:
                    8b:0f:be:c6:ac:3e:ce:1e:d2:e7:f8:7b:b0:8e:1d:
                    2a:47:ed:4e:d4:5f:41:45:72:ec:73:d2:fd:38:94:
                    18:63:81:99:f7:5f:63:78:bd:cb:88:48:b0:16:95:
                    c9:bb:bb:56:35:87:a4:7b:fe:f0:51:d2:23:cc:c7:
                    e9:34:77:a2:1e:e1:02:79:dd:18:cf:bc:db:06:25:
                    dd:ae:02:5f:1a:23:96:26:22:d6:27:bb:34:8c:7b:
                    48:4c:3a:bd:a5:aa:c8:0c:3d:a0:95:c7:20:2b:c2:
                    2e:ba:db:6a:6a:53:51:c0:2b:a9:ad:6b:34:9f:6c:
                    07:2c:65:8c:79:e0:6f:80:3a:df:8a:95:2a:dd:dc:
                    5b:e8:51:40:6f:2d:bf:42:fd:11:4d:f3:07:43:5e:
                    30:88:cf:3c:9a:9d:d8:78:2e:7d:5f:c2:50:8e:4a:
                    a5:64:45:e9:62:d8:56:64:bd:e2:20:48:2a:e7:b1:
                    89:26:7a:d4:e6:45:1c:2a:ab:eb:5c:72:50:79:2d:
                    30:89:72:e9:2b:67:f5:f4:58:c3:de:10:0e:02:52:
                    59:60:8f:5c:ed:fb:f6:a6:ea:87:cb:5d:90:a1:35:
                    9a:19:9c:08:bc:d6:bf:08:1e:53:43:c4:29:ab:72:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DA:12:83:25:96:09:2D:B5:B4:F6:43:62:86:62:D2:99:17:3D:9F
            X509v3 Authority Key Identifier:
                keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:45:d4:a1:1b:69:f1:68:c0:7d:87:9d:5d:a2:8e:43:4f:65:
         b3:fb:ad:57:67:58:9f:af:0f:41:d3:9a:91:bc:8b:7c:1e:5d:
         c8:44:43:a1:a9:41:12:e7:e6:94:82:30:cf:72:0a:ae:d3:fa:
         e2:b4:0e:76:88:05:9a:b4:67:e1:37:88:3a:07:21:91:27:87:
         25:b4:fd:ae:5e:71:60:ab:c8:9b:1d:37:be:82:1e:6c:b9:f4:
         64:85:07:20:71:b8:94:9d:47:28:6e:36:5d:0f:b5:2e:7b:9a:
         f9:78:47:a2:a8:69:6b:9d:0c:24:4d:5c:91:36:97:63:28:37:
         df:92:a9:b1:7c:2e:41:22:55:be:f2:ec:cd:bf:5d:40:c0:14:
         4c:e3:79:75:94:41:f2:66:0a:3d:70:4f:f7:01:79:33:32:06:
         a2:53:e8:9c:ab:fb:08:e7:9f:b4:ec:a2:f5:4a:d8:01:c6:fa:
         3b:85:62:2d:13:57:f1:70:77:bb:b1:2c:97:a6:75:21:7c:2c:
         b2:c4:75:ec:ee:f7:8c:18:78:cc:1c:dc:2b:a2:a2:dd:b8:39:
         40:c6:e3:12:cf:55:f1:19:33:29:56:21:d7:7e:f1:dc:1e:e1:
         92:7b:ca:ee:fe:d0:91:25:81:34:82:97:d3:d2:3b:83:b6:99:
         a2:83:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----