Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          BM8VTcBDNjzGAmgUFYEKDW1zM4toSxC+tXogdZuT9rY=
Subject key identifier:   40:41:17:26:09:FB:25:44:1E:1D:B4:7A:EA:4D:38:49:6A:1E:8A:89
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       01962FAB642337B51B35FFEEEA3E3907EA06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          0130
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: 6U6cy/zPk+xxLGBS1/1rYHXjZm2mErJkAIfCZ1R1+Kg=)
                          2: PJg6i8bSTOaaHuAf64uU7RgQ9X0.roa (hash: yqj+o3D869BdUEpdNxfbAfsWgWZ/Cc+Y5gzfpaAYQRA=)
                          3: RCUtTKBPBoSKR2wwa8B0W47XWEM.roa (hash: AEJlL4bhsHAgCbizEJxDPTW1T7XXa+3+vQvB/un6vPo=)
                          4: YKOzyMuOAG1LkeGOcT0-ojWIUXc.roa (hash: ISZN8vNEVAu/M5iQ7o0aFS/LcAEtbFN5OpqBSYMDPHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:64:23:37:b5:1b:35:ff:ee:ea:3e:39:07:ea:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=4041172609fb25441e1db47aea4d38496a1e8a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:0e:18:95:b6:a7:ab:b3:23:88:b3:6b:2d:
                    1c:ec:54:2c:72:02:57:97:1b:5b:3f:72:c6:85:47:
                    c3:36:21:ca:2d:1e:0a:5d:9c:f5:cc:54:bf:82:ea:
                    7e:30:d6:d3:45:8d:24:5e:b8:5c:fd:c5:b3:cc:61:
                    82:a1:6f:04:a8:d4:84:04:46:86:d4:6f:41:4c:79:
                    91:fd:6a:47:49:1d:88:b5:eb:2e:12:8a:73:24:f5:
                    84:5c:18:6b:21:e3:ae:b6:c7:c5:2d:7d:37:7b:4d:
                    e7:4e:4d:98:16:8a:83:25:58:2c:20:32:3e:f2:60:
                    a6:05:10:bd:1b:5c:2d:ad:70:2c:ae:4e:fa:63:07:
                    ec:2e:b7:47:fe:63:6a:dc:c5:c3:d0:e8:1c:28:63:
                    d9:2b:82:91:77:cd:89:01:79:e6:d6:c8:4e:c6:a7:
                    ad:5b:86:82:1c:95:69:bf:40:e7:6c:20:0c:5c:6c:
                    ba:33:9e:a3:65:7b:04:dd:fa:c3:79:8a:39:42:73:
                    38:f5:01:2b:22:1c:ce:98:84:93:e2:f0:54:5f:62:
                    a9:5f:10:2d:29:93:a4:9a:3b:17:d1:47:09:7b:24:
                    cc:77:a7:ab:0d:28:9d:c5:e3:32:cf:bc:98:0f:b2:
                    fc:84:4c:54:28:8a:90:62:4b:71:58:8a:4b:2f:3e:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:41:17:26:09:FB:25:44:1E:1D:B4:7A:EA:4D:38:49:6A:1E:8A:89
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ec:63:e6:6b:27:d6:61:1b:00:1b:2e:b1:20:df:5f:91:79:
         e0:f5:49:12:d9:d1:ab:6e:b4:ba:d8:05:a0:df:c4:6e:02:f2:
         bf:5b:99:d0:f2:ef:74:ab:f4:26:d2:eb:38:45:c1:40:68:e1:
         c4:b2:f7:18:10:b4:86:bb:e4:09:56:f2:e5:e8:40:43:a4:98:
         31:bc:c5:37:ad:e8:aa:ef:14:f3:47:d3:27:24:0c:55:78:c2:
         e8:15:a5:f1:92:19:e7:3f:5d:dd:a6:10:85:97:0d:0b:7c:5f:
         19:f3:c0:66:e9:09:57:bd:20:c9:ec:73:ec:76:1d:a1:69:33:
         9f:fc:2b:37:38:07:0a:6c:6c:a3:e9:d4:7a:5c:46:4e:7c:80:
         3e:67:bb:3e:ed:d9:ff:ec:ed:51:81:5c:12:e6:5b:f5:24:38:
         5b:97:d8:b1:78:e5:ea:24:31:a7:8a:d1:a0:66:39:63:6c:4b:
         62:c3:08:f5:d5:cd:c6:93:6e:55:84:b5:36:9b:11:d5:f2:be:
         f0:44:03:69:69:d1:19:d7:3e:00:c3:a5:a0:d9:3d:52:9c:61:
         80:17:3b:d3:a6:4c:71:81:3d:4b:01:4d:4f:08:00:f2:19:65:
         a0:e6:c7:46:39:9a:c9:be:56:48:ca:ab:e5:c7:26:b1:c5:d6:
         23:98:e8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----