Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File:                     E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier:          7DaCr2JIWfu9t4M/0GJZklogbg+1VV0qGhs3yL/iaxE=
Subject key identifier:   E7:3D:D0:92:C8:D2:D4:0E:EE:68:63:A3:D7:FF:DD:43:3A:B2:65:08
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer:       /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial:       01962FAB403EB00004379CB68B79160B8418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: Y0EyQtZi068DdCV9bTkrV6gyWQw8IpmhWSwyOus4U80=)
                          2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:40:3e:b0:00:04:37:9c:b6:8b:79:16:0b:84:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=e73dd092c8d2d40eee6863a3d7ffdd433ab26508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:68:34:0e:ba:16:1b:2a:9a:f3:80:33:f6:44:
                    df:78:32:c4:82:b6:85:15:43:f3:dc:5a:f7:cc:a0:
                    91:b4:b7:d1:27:5a:5e:53:02:09:46:6d:3b:de:d1:
                    11:86:ca:60:37:85:ec:ff:7b:4b:ea:97:db:c8:6a:
                    a4:3f:f5:75:bb:f5:00:41:3a:dd:9e:4d:8c:41:b1:
                    8a:fa:ab:5f:56:d8:2c:f4:f9:d8:05:84:08:29:3e:
                    49:f5:8a:55:c1:82:61:71:ae:b8:f1:46:56:75:17:
                    c6:fc:fa:1e:cc:b0:ba:7b:d9:96:16:b7:64:00:e1:
                    d8:c4:72:ff:47:c6:28:da:34:d8:9c:b3:8e:ba:3b:
                    8f:e1:be:f5:8b:05:19:f0:94:47:6b:c7:c6:bf:0d:
                    88:8e:fb:d1:15:47:36:72:31:07:d3:13:05:81:15:
                    e2:02:62:80:0a:1b:cc:f3:96:5f:8b:d0:d4:55:76:
                    28:fb:8e:6a:d9:e9:4f:7e:e6:98:c8:91:59:fc:86:
                    bc:92:6e:88:0a:9a:b2:b7:6b:82:8b:36:68:c0:e1:
                    55:6d:ec:ec:c3:51:56:5e:7e:f4:31:d7:ec:b7:be:
                    e6:d1:74:19:72:22:14:3e:9f:18:d3:ab:b4:d3:44:
                    43:5a:75:45:15:21:33:e0:15:4a:c8:d3:65:52:f3:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3D:D0:92:C8:D2:D4:0E:EE:68:63:A3:D7:FF:DD:43:3A:B2:65:08
            X509v3 Authority Key Identifier:
                keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:62:f3:00:8c:aa:63:20:39:3e:b9:94:19:c9:14:cd:c3:55:
         80:cc:62:6a:90:43:f7:98:1a:3f:35:82:ec:5e:17:66:f7:00:
         08:2b:d7:09:11:29:da:8e:5d:d7:67:7a:ad:59:77:fa:bb:20:
         89:26:5c:f7:b8:18:bc:a1:2e:db:aa:9f:b5:24:d4:04:6f:a3:
         a7:62:29:c6:d9:5c:6f:fa:e0:75:e1:76:2f:3d:25:83:1d:1b:
         72:59:77:ac:07:b0:92:62:eb:39:75:c9:38:08:8a:06:71:79:
         ef:86:e3:61:30:77:a7:a2:23:c3:78:79:59:71:ab:d8:4c:c6:
         d0:b0:82:7c:f4:35:d6:ef:62:93:d3:fa:2e:04:c5:cd:df:eb:
         f4:b5:b8:ca:32:38:4c:68:d0:c2:8d:94:0e:e4:38:13:61:c7:
         b4:25:f4:e1:58:b4:84:df:17:d3:37:43:8f:b7:6b:a1:e9:a5:
         79:3c:62:6b:01:71:f3:38:56:32:4e:0f:d8:91:d4:d0:be:2e:
         96:51:46:dd:ac:5b:cb:29:1e:03:6e:70:39:c3:bb:64:46:59:
         3e:bb:e1:6a:2c:ef:7c:6a:04:89:08:b2:52:35:a4:58:54:ee:
         24:70:41:00:b6:c5:aa:0c:44:47:ab:68:74:07:67:cf:3f:a2:
         06:90:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----