Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File:                     4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier:          nG2W7XVq11SK+eJEqBq0awCcCbdKca5Zx8yzSMpFv9w=
Subject key identifier:   27:FF:A7:C7:21:92:8A:5E:B3:8E:25:32:7A:8C:92:9B:4C:BA:39:8F
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer:       /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial:       01962E61EC9861F860F9517999D8C13A8D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: ZYdvCM960CJJedtVWaHm5NjYL419/KcDxB9k4LSS/14=)
                          2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
                          3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
                          4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
                          5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
                          6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
                          7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
                          8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
                          9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ec:98:61:f8:60:f9:51:79:99:d8:c1:3a:8d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=27ffa7c721928a5eb38e25327a8c929b4cba398f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:b6:e3:12:df:9f:b3:73:fd:85:d6:ff:c6:
                    b8:84:69:d9:57:c8:24:ce:36:38:05:1a:57:e5:09:
                    3c:f0:cd:35:26:2a:e0:8d:5a:f1:5a:7c:c7:85:13:
                    46:5a:db:8c:40:f7:37:5f:a0:4a:85:10:a7:be:6c:
                    35:6c:39:dc:d4:8f:d0:24:aa:b5:24:18:85:48:b7:
                    7e:c7:10:ff:17:31:16:c5:ff:2c:bd:86:2e:ff:b5:
                    82:9d:32:d7:a9:51:a9:e3:0e:c1:76:39:1d:a7:de:
                    99:d7:40:e5:17:ee:a2:fc:30:46:03:9f:db:07:a4:
                    db:05:ae:99:da:d8:2a:6b:4f:18:33:07:0f:5e:b7:
                    fc:e4:d4:a5:f9:25:bc:19:cc:b6:94:7d:2a:b0:5d:
                    f8:6f:eb:6c:b1:40:01:bd:df:62:89:9b:46:93:09:
                    60:e7:a1:5c:41:d5:ed:48:0a:44:be:dd:80:80:bc:
                    2a:52:2b:e8:f6:46:37:27:e7:67:f6:fe:4a:36:c4:
                    94:d7:b0:ce:ef:1e:08:26:6d:b2:a5:59:eb:2c:5f:
                    7e:21:1d:5e:7e:f6:46:db:df:11:ff:f7:a2:b9:74:
                    4e:a2:f3:1f:35:d7:31:07:8b:20:8b:5d:69:a7:f7:
                    05:05:94:e2:19:44:9b:7c:47:7f:fd:7c:19:38:be:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FF:A7:C7:21:92:8A:5E:B3:8E:25:32:7A:8C:92:9B:4C:BA:39:8F
            X509v3 Authority Key Identifier:
                keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:15:4b:27:33:3a:b4:f0:c9:c1:1a:26:f6:7b:4f:6a:46:56:
         4a:28:80:47:5d:ea:22:7b:39:67:8f:93:3b:f1:4d:09:59:9e:
         5b:d6:96:2e:bb:33:e8:a4:0c:1c:6f:d8:8f:88:83:a0:32:39:
         b9:58:2e:65:ac:49:f3:27:92:56:2c:a4:aa:b8:5c:27:f9:75:
         26:01:be:56:6d:16:3f:d0:e2:bd:d0:39:62:b7:75:5e:81:5a:
         c9:12:94:f1:fe:94:66:03:99:29:54:90:fa:57:96:eb:aa:83:
         2d:a5:ee:aa:77:e8:0b:77:69:17:79:55:eb:47:4d:42:bb:aa:
         d8:ce:1d:58:20:e7:d1:66:a8:1a:47:80:e7:0c:63:ae:ef:18:
         a4:d7:5b:99:07:1b:1d:d6:81:a2:e1:91:79:42:bf:c7:56:42:
         9e:ff:8a:69:20:0b:aa:d1:0b:05:0d:b8:d8:e3:d8:c6:e7:72:
         e0:c8:5b:5a:ad:56:0c:cb:38:60:f9:00:b8:60:31:4d:a2:d7:
         4b:f6:ac:f9:a2:ba:d4:b7:cd:a1:2c:a5:c1:f7:57:09:26:2e:
         0e:ca:02:2a:63:08:65:4b:48:c2:8b:73:20:78:a3:f2:ee:ba:
         85:74:be:69:aa:6f:ae:d4:9f:35:df:a5:31:84:d0:1d:49:86:
         61:82:c6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----