Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File:                     4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier:          ZyarINNR2sSRMYv1nn+FIAQqEqjfTtsjlAHwugHp3bs=
Subject key identifier:   C3:BA:3E:60:39:76:5B:D7:E5:DB:C0:93:14:94:23:D2:DF:FF:5A:B2
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer:       /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial:       01962E2ABA821CAA58835FCDE72DFF0A5CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number:          0728
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: LJf1wwWS7Nz1MeXO0/GxqbAkR9eUaxjZpt5iD86Qam8=)
                          2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ba:82:1c:aa:58:83:5f:cd:e7:2d:ff:0a:5c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=c3ba3e6039765bd7e5dbc093149423d2dfff5ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a5:8f:84:7b:d6:1c:24:fd:71:64:39:ba:e2:
                    75:df:c6:f2:4d:8e:23:bf:3e:95:6d:41:6b:db:92:
                    79:86:5a:da:55:88:37:1e:70:5e:3f:b8:f9:ec:b4:
                    4d:f2:19:29:f6:24:56:25:9b:72:89:cc:74:f6:36:
                    e6:6e:ed:e4:59:01:f0:8c:3a:83:ca:73:23:71:d8:
                    87:7a:fe:91:da:29:bd:c1:d4:c0:2f:63:50:ba:37:
                    02:c4:eb:ba:ae:b3:de:c4:e4:98:0f:6c:de:d6:5d:
                    56:bc:c3:b1:3f:35:1e:55:3b:f7:4e:a8:48:50:d2:
                    67:d5:0c:0e:0a:66:1b:c1:06:9d:e5:39:e4:97:6d:
                    ba:47:2a:c4:0e:6f:03:03:9c:ff:93:20:53:b9:1f:
                    0d:da:9c:09:86:11:c3:5e:f0:ac:5c:02:62:61:b0:
                    b0:80:a3:bb:f1:db:b6:eb:79:65:1f:5f:49:7e:d0:
                    4b:b4:ba:54:5a:29:98:40:1d:29:99:c3:28:ab:4b:
                    b2:8b:00:02:7a:a8:fa:6b:64:21:e5:48:b5:90:a5:
                    db:34:00:e3:81:34:e0:7f:26:30:6c:0f:57:a2:b6:
                    6c:e7:cc:99:ad:c1:d1:6b:5b:80:d8:3b:00:b0:5c:
                    ca:36:50:e8:a2:5c:e3:7e:b5:bd:8f:3a:c3:3d:8a:
                    38:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BA:3E:60:39:76:5B:D7:E5:DB:C0:93:14:94:23:D2:DF:FF:5A:B2
            X509v3 Authority Key Identifier:
                keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0e:b0:e2:6c:65:c5:c2:2c:f2:ac:02:55:bf:20:e6:19:f6:
         43:99:fd:76:21:bc:3f:a7:c9:0b:5d:b8:5a:7c:53:f0:51:4f:
         a9:da:00:09:ff:d6:d1:4d:dd:01:5c:3e:74:d0:8c:9d:d5:2e:
         9b:e1:b2:45:45:22:f9:56:89:29:10:a8:95:68:26:47:39:40:
         99:b1:13:6b:fc:f0:67:a2:20:b6:ba:d2:e1:5f:6c:c0:a8:4d:
         3b:1a:97:65:14:2f:03:36:ec:c7:27:a3:db:96:f7:22:b5:6a:
         38:de:c1:a5:33:48:90:b2:e5:9d:bd:38:cc:f2:9c:76:a9:d6:
         8a:6c:e5:da:89:e9:61:dc:13:fd:ce:57:b7:b2:dc:51:33:76:
         af:a0:d6:bb:39:70:ac:ca:0e:fe:86:7f:f2:d4:f8:54:98:39:
         ad:6f:d3:27:eb:48:51:0b:a8:7e:0d:c3:e4:74:61:26:f7:ec:
         06:b0:81:5c:96:61:98:5f:a4:8c:87:82:f7:46:b1:9c:58:fb:
         5b:5b:cc:30:03:60:35:ca:9c:15:61:25:c8:43:f2:16:3f:72:
         58:43:b1:cd:7d:10:9e:cd:ce:7e:d2:b7:aa:d5:6e:b2:d7:23:
         bd:36:a3:1f:53:b7:35:8f:07:fc:b1:42:12:ac:ea:de:e9:6b:
         89:55:22:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----