Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File:                     4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier:          qBQFmIUd8X+DU67BjO3xUrFUNKv3409fFQpmLW2GqIc=
Subject key identifier:   6A:3A:68:C4:7F:E5:22:06:A6:9F:51:CE:6B:EB:F1:5B:2F:7A:D7:1E
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer:       /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial:       01962E995B69092510D2C57699D5C542162B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number:          1117
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: 1wprfNLEwdrdmy6kXhfcMgehUZQy9Nh2MO/8OQW0NOU=)
                          2: UELJaiMVSRwrvUCFtrZ9GXV7epU.roa (hash: q9QCYQSQGQmo5qqoOtk1Ibo5KX8kGvjJhcZ2aob3nKM=)
                          3: v6hueYNyF9uNlLtlUb0AzeNT4cA.roa (hash: 9y1HAaiP+48RFVQa5JDWbbUjnwyoOqmjCXAn55Eo2zI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5b:69:09:25:10:d2:c5:76:99:d5:c5:42:16:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=6a3a68c47fe52206a69f51ce6bebf15b2f7ad71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9a:a9:74:7c:b1:ad:e2:77:a3:3c:09:68:1d:
                    15:08:1b:58:e5:2c:f7:e8:5a:cc:fe:8a:da:7e:c7:
                    d3:ba:1d:89:75:92:c9:9a:fc:95:19:93:a2:db:59:
                    46:74:5a:28:79:35:6a:96:2f:81:8e:b4:92:18:4a:
                    d6:5f:4d:64:df:c3:85:39:b1:29:bb:a6:a7:42:66:
                    3e:b8:1b:84:5d:1a:09:4b:87:a6:9b:a1:b8:bf:6a:
                    d7:fe:71:7b:2c:84:b7:d6:4b:0c:84:6d:07:b6:4c:
                    42:29:bd:34:dd:c1:8f:67:d1:43:a0:2a:fe:38:62:
                    de:08:3f:a3:b7:bf:0f:06:96:e5:d5:7f:2b:da:ed:
                    c2:37:1c:10:7a:fb:b7:45:46:c9:6f:ce:80:4a:54:
                    11:82:b4:4e:c4:99:a5:01:9a:ef:02:ac:ce:ce:b7:
                    cc:b4:49:07:0c:bc:57:90:c8:f8:aa:e5:30:c5:57:
                    72:30:eb:e1:7d:92:5f:f1:66:e0:02:46:bb:71:07:
                    b4:5a:2a:80:30:c3:53:16:0f:ef:32:5f:75:4a:1e:
                    6f:a0:45:d8:3a:1b:23:27:da:ee:3a:fb:6b:fc:30:
                    77:3d:f4:c2:4b:e9:20:44:6d:0e:0b:b1:dc:73:90:
                    55:ee:aa:e0:dc:02:db:95:5c:d4:96:c3:6a:1d:0e:
                    81:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3A:68:C4:7F:E5:22:06:A6:9F:51:CE:6B:EB:F1:5B:2F:7A:D7:1E
            X509v3 Authority Key Identifier:
                keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:54:6f:99:ae:6c:47:2a:b0:3f:96:6e:a4:39:bd:a8:9f:ab:
         4e:0d:77:f9:b5:4e:c5:e0:56:69:85:15:7a:24:e8:7f:59:f7:
         d8:08:3a:70:55:d2:ac:4e:ac:6d:37:c7:39:db:d8:c4:e3:3b:
         51:39:9d:9e:f1:ba:94:fd:de:06:7d:8e:d2:5d:8f:85:a7:a9:
         84:0d:d4:c6:8f:80:bb:ac:88:9d:c4:a2:0e:65:f0:12:3b:fa:
         e8:1c:19:7e:dc:fd:bc:f7:2e:c3:ba:a2:05:f3:33:00:5c:38:
         14:8b:ee:ef:28:f5:31:98:2d:0f:31:df:b4:2a:07:5e:58:b3:
         54:4b:e7:1d:35:6d:41:e3:fa:ab:8c:07:dd:c8:12:15:3d:78:
         6b:99:08:8a:ca:a5:cf:0f:f6:e6:f5:66:3f:da:3a:14:c9:e2:
         7d:fa:cf:3b:8c:eb:1a:6b:e1:d1:91:a1:18:de:38:06:f6:fa:
         b8:1d:b2:b5:53:af:25:e1:e4:76:4b:98:63:f4:d3:ab:5b:48:
         c0:ad:cb:f6:59:e8:26:31:8e:2a:5b:62:b0:f7:95:f6:e8:8c:
         32:86:13:9b:ab:c3:be:46:3e:12:12:5b:ca:23:da:05:2f:e2:
         45:f1:de:c4:45:6e:49:0e:44:5c:55:e4:fd:ab:00:4e:ca:19:
         c7:42:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----