Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File:                     4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier:          lFXuCJ+c/DkrQsSTh/ueubGJl1CMjKNa30qHb5mJXFk=
Subject key identifier:   86:8D:20:49:59:73:63:4B:8B:48:28:96:9C:9D:F0:16:4D:EC:C3:83
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer:       /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial:       01962F06D31808003DD546AE2F573FDCCFA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number:          0F74
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: mriPijNprrcpo80CSMpQfSRC9yssYltQv8YEbUZSYt4=)
                          2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d3:18:08:00:3d:d5:46:ae:2f:57:3f:dc:cf:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=868d20495973634b8b4828969c9df0164decc383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:1a:62:15:93:e2:a2:6d:9e:20:fa:c0:db:
                    3f:2a:cd:cc:6b:07:bb:4d:60:28:c3:36:32:07:65:
                    00:7d:9c:2d:01:25:08:48:c1:74:f2:63:7c:19:4b:
                    1e:33:48:f9:23:0d:ea:b1:2b:ea:87:bb:bf:49:f5:
                    07:8c:7c:c2:0a:73:fa:00:9c:37:bf:5d:f3:13:d8:
                    4d:6c:7a:f0:8c:ce:65:07:50:72:45:4f:2f:74:3c:
                    99:5e:57:9a:88:ca:ad:88:e7:e2:76:07:d5:e3:cf:
                    bb:80:8b:eb:d7:ba:a5:9d:19:39:f7:99:cb:a8:13:
                    86:d6:1e:61:d3:13:1e:1f:c8:45:e7:75:52:4d:49:
                    c3:89:f4:8a:d7:d0:8f:bf:7b:bf:27:2b:87:48:b8:
                    d4:b9:86:33:67:21:b3:75:44:21:f5:2f:11:b3:2f:
                    d7:20:41:30:7b:f2:1b:cf:1f:b0:8e:e2:f6:67:ef:
                    a4:80:09:be:c9:69:45:28:d2:69:d5:a3:cb:0a:c1:
                    0c:23:6d:bd:f5:67:39:a3:b8:7a:3a:4b:e0:7b:8b:
                    6c:9a:63:2a:67:a0:52:ca:35:2d:d4:5c:94:8c:7a:
                    4c:ff:36:e9:6c:4c:04:de:55:86:fa:1d:c4:92:fa:
                    13:5b:0b:79:95:20:4d:f4:0a:55:21:8a:86:d0:68:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8D:20:49:59:73:63:4B:8B:48:28:96:9C:9D:F0:16:4D:EC:C3:83
            X509v3 Authority Key Identifier:
                keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:fe:6b:02:c0:d5:45:25:b3:93:40:0d:a1:af:53:32:19:
         16:12:74:81:31:ee:85:b8:ba:89:52:d9:50:45:d4:56:38:5f:
         a2:a4:1c:4d:fe:95:01:b0:46:7c:9a:a9:17:c5:98:32:2f:6a:
         87:55:c1:48:56:7e:7e:8c:f8:0b:0a:1b:5d:33:24:8e:96:f3:
         b2:6e:7c:09:85:ce:31:18:46:17:c5:a9:7b:2d:91:ba:e8:e9:
         68:0d:de:ac:d2:00:c6:96:d1:d1:e1:61:1a:55:8b:82:d6:d2:
         ee:c6:d4:06:87:bc:8a:e0:21:c0:65:05:de:a2:10:55:f4:0d:
         13:96:95:49:a3:98:0f:f8:50:a9:45:d0:07:cb:5b:9e:c9:72:
         4e:4f:3d:32:86:d9:2e:1c:94:23:8f:10:a4:60:ae:aa:65:cc:
         2c:f9:50:7a:36:1c:a1:bf:36:5d:39:47:e8:a8:4e:b0:5d:50:
         74:df:20:29:30:52:91:06:07:38:3e:b0:26:4f:26:24:c8:21:
         43:de:5f:f1:22:f0:4d:ce:19:15:7c:17:9c:d8:2a:9a:a4:df:
         79:bd:c6:9b:f6:df:c2:6a:e3:9f:13:17:f0:ce:24:0c:88:b4:
         5f:b4:67:26:75:16:10:de:aa:8d:83:34:22:ca:43:ea:8e:f0:
         52:ab:f2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----