Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File:                     EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier:          b9n6ycIyntWtMYaRbviQjCqf1LFJOj8b7La0Uxb7/Rs=
Subject key identifier:   90:88:82:38:C3:8F:87:D3:17:54:08:A2:FF:98:77:E8:9C:07:C9:DD
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer:       /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial:       01962ECF58DE1323C43B49942A6763AC1489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number:          1050
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: fVktnJS28a5x8wWlNOFeEZcl8k1Uegt1n+7btha7aG4=)
                          2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:58:de:13:23:c4:3b:49:94:2a:67:63:ac:14:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=90888238c38f87d3175408a2ff9877e89c07c9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:ae:78:c8:57:da:af:dc:eb:22:b6:f1:5e:
                    f7:b5:e4:2f:b6:ab:07:9f:d0:7f:53:6a:30:da:92:
                    d7:33:b1:b6:41:c4:4e:32:72:fc:d8:a1:c7:6f:68:
                    a3:12:d4:f4:fd:4c:6e:09:c5:c3:d6:89:50:ef:8a:
                    54:39:6e:18:9c:aa:71:37:e1:12:fb:3e:d9:9f:7e:
                    d8:8a:61:34:8e:5a:c7:26:c6:f1:fa:b6:b0:d6:ae:
                    78:01:da:c6:d0:66:88:ad:0c:8c:e5:cf:d4:a0:8a:
                    1f:28:02:0b:d7:70:e0:ef:7c:5b:a1:2e:25:6b:14:
                    1b:76:b8:c8:c2:61:c2:1a:3e:94:0d:2b:f0:62:7d:
                    70:3e:cd:5c:29:b4:96:b0:61:54:19:32:a4:f9:4b:
                    34:89:46:ad:af:c0:dc:4d:26:75:35:ad:f0:3e:da:
                    e3:2c:c2:10:4c:0b:4d:95:7a:70:44:9a:e9:77:c4:
                    71:c9:1e:02:2f:d6:1e:0d:a3:40:3f:e8:4b:af:59:
                    e0:b0:d6:53:a0:4b:78:2f:e7:59:ff:1e:92:22:02:
                    70:f0:48:70:2b:ed:c6:50:60:88:ff:f2:b5:b9:7c:
                    87:3b:c8:72:2d:9e:fd:8e:cd:9d:10:33:fc:9d:9a:
                    8c:21:af:2e:f4:63:11:ef:3f:69:a4:d5:22:ba:43:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:88:82:38:C3:8F:87:D3:17:54:08:A2:FF:98:77:E8:9C:07:C9:DD
            X509v3 Authority Key Identifier:
                keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:eb:2f:9d:df:33:df:18:15:af:93:f9:57:73:c4:5d:48:74:
         30:e3:90:eb:a2:f1:e5:9c:a6:ed:e7:61:6d:44:09:c1:87:ca:
         41:d4:b7:a7:9f:d9:80:50:59:7c:15:fd:9c:fd:7c:1d:9e:04:
         14:c6:c3:13:02:88:2d:40:53:19:da:23:4a:7f:f0:a4:cd:2a:
         61:9c:3b:5d:a0:87:04:cf:37:8e:93:eb:e7:2a:df:96:44:5a:
         b6:51:c5:73:c9:8c:26:87:73:93:3e:d1:7d:f2:e8:1f:14:be:
         7b:30:d4:a7:c4:1e:44:d5:4c:98:6e:c7:86:bc:40:ee:cc:8b:
         e5:c7:9b:19:2f:50:da:42:8b:7c:c0:83:ad:b2:00:fb:a1:b4:
         eb:ae:3d:06:81:1b:04:ea:29:05:34:ad:b8:66:f3:e2:32:06:
         68:8e:3f:63:d0:6f:e2:ae:da:43:b8:ab:80:e4:49:48:3d:51:
         80:ea:1c:32:0f:b6:ca:56:d0:60:83:86:58:8b:02:5c:01:e8:
         1a:98:c4:c0:e5:19:da:bc:05:85:4f:18:14:47:60:94:4b:38:
         4b:94:dc:7b:11:17:18:6f:1a:c0:e2:fe:12:54:d5:40:a4:b4:
         a9:e0:4e:77:1f:a0:af:cb:dd:c5:a9:0b:0b:99:73:47:4b:fc:
         88:d6:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----