Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File:                     4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier:          jiCTqzozTf54C5fNYco7WVdWHWSubDTfq+bsRh4yreE=
Subject key identifier:   B5:19:F1:4F:AB:A2:61:27:5A:B7:F4:D1:DA:EF:97:6D:7A:35:38:20
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer:       /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial:       01962E61E7E58F04A42B612AC2AA03B8E3AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: lpoAtYEK9XF8N+bm1Ago/CCtGDvz8YWLRu/DdP1wd5E=)
                          2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e7:e5:8f:04:a4:2b:61:2a:c2:aa:03:b8:e3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=b519f14faba261275ab7f4d1daef976d7a353820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:e0:a1:d0:0d:96:53:cc:04:96:07:d7:72:
                    fd:a7:88:11:d9:73:f9:21:9e:94:13:c6:65:34:22:
                    1e:74:70:93:04:c1:1f:c3:c0:4a:03:d9:4b:7b:dd:
                    58:0f:a3:11:2d:75:41:1f:74:8e:c8:77:06:39:a9:
                    cc:5d:39:b3:f5:26:13:4f:36:f4:12:2b:9d:49:52:
                    e5:0f:af:ad:e0:77:15:fe:cb:36:cb:cc:b5:45:e2:
                    d8:5d:2d:8b:fa:95:f4:48:34:aa:73:21:5d:0b:29:
                    db:6e:0f:c3:21:0a:24:7a:0a:d8:75:19:df:e8:a4:
                    51:32:99:92:ed:ae:11:a6:30:17:c9:55:c9:c8:ba:
                    fe:72:7f:0b:56:9c:6e:16:f2:9a:2a:b6:8a:54:ac:
                    d7:9b:7d:b0:08:f1:ae:93:f4:ed:4c:ae:24:5c:d4:
                    1c:6c:8f:3f:52:1b:21:be:d7:42:4b:71:63:e8:11:
                    09:9b:28:dc:76:a4:27:31:97:63:84:87:3f:e4:a0:
                    38:ab:cb:6c:24:99:c0:ad:a3:15:8f:62:3d:31:7c:
                    26:cb:54:51:6f:9a:b8:32:37:d8:31:e2:68:95:cb:
                    4c:05:49:2f:e5:9f:e9:2e:41:10:78:bc:b8:f0:e3:
                    ad:be:8c:35:51:32:7a:08:44:f9:8c:83:96:32:0e:
                    c7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:F1:4F:AB:A2:61:27:5A:B7:F4:D1:DA:EF:97:6D:7A:35:38:20
            X509v3 Authority Key Identifier:
                keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:2f:3a:d2:2b:03:33:3d:ba:57:bf:86:3d:3e:8f:54:3e:
         f2:95:fe:d5:22:86:52:37:ee:c9:48:52:f5:7c:57:c4:5c:0d:
         3d:b1:68:7b:10:ed:02:a4:86:78:32:38:2c:a0:d0:98:d0:91:
         93:08:ed:ae:2a:95:7d:79:c4:ad:3f:d0:9a:40:e9:2b:28:12:
         b4:63:dc:fb:26:3c:14:c6:d3:e1:ec:29:17:05:92:50:47:69:
         cb:14:3c:ad:6f:84:d4:da:67:75:8c:52:e1:36:ad:06:3b:bf:
         e0:14:27:38:ca:41:20:08:6e:81:fb:03:14:e5:a4:85:3b:e1:
         fb:cb:99:84:9e:9c:c6:6c:c4:a5:af:18:9b:ee:0b:7e:28:e1:
         af:ea:0d:84:89:b7:61:f1:6f:d9:d2:7e:da:42:97:c2:ec:01:
         2a:a4:6b:3c:de:0a:7d:73:58:b7:62:88:e7:d6:73:5c:8f:60:
         e0:c1:2d:16:04:a2:f5:eb:91:12:a5:8f:e6:e4:82:4a:be:db:
         9f:07:27:5d:7c:ef:e4:29:ac:a5:e7:ce:be:06:e2:aa:8f:b2:
         dc:67:d4:27:cc:25:1e:ed:ca:50:49:8a:7b:35:9c:6f:de:55:
         0f:56:9f:a5:02:7e:ff:5a:ce:8d:41:98:6d:1f:b6:d1:76:af:
         b7:7b:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----