Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File:                     4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier:          MLrr17HekNFS+cw7w/f8CmcM7Qwvasute3Ywx8labYU=
Subject key identifier:   B7:67:70:AA:BF:FA:F3:80:67:39:C6:8D:7E:21:C2:33:FA:45:6A:68
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer:       /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial:       01962F3DBB545A36CDF402B2B36A40169D08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number:          0B02
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: wWS5NdihPgkYrz+0uuoSaIEpOeF+VAlC7bWR+mnjTgs=)
                          2: qADZbjUspL_WRqhq7wvNpX-fT-E.roa (hash: 8V+RbGGUYULjGMvZVkBND643qQkjbKJgabtjnmu0hrU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bb:54:5a:36:cd:f4:02:b2:b3:6a:40:16:9d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=b76770aabffaf3806739c68d7e21c233fa456a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:9d:cc:d8:80:2a:8c:7e:f1:9e:d2:da:42:
                    f7:48:18:a7:4a:a2:e4:e7:80:31:c4:01:67:16:d1:
                    f7:c3:c6:d5:09:e3:14:2f:d8:01:88:3a:7d:30:45:
                    e9:6d:cf:72:11:83:d1:10:56:46:0d:77:fc:e4:dd:
                    75:06:ff:52:1e:99:95:3c:1a:34:58:13:be:dc:4c:
                    15:61:9a:27:77:ba:40:a1:b5:4a:79:a4:23:71:62:
                    db:af:8d:21:c1:48:e7:28:1e:d0:8a:1b:8f:2a:79:
                    b7:85:4a:04:d8:3b:39:aa:bc:cd:de:8e:9d:a4:92:
                    1d:f2:80:b8:b4:3d:34:4a:74:5e:bf:8e:3a:46:92:
                    05:25:71:f3:b1:be:a4:c0:45:e4:44:b0:25:54:34:
                    f1:09:f6:8a:40:d8:0b:1a:c6:bf:2c:f1:b1:77:18:
                    c2:24:c5:7c:1f:2e:8d:92:e7:7b:3d:d3:4a:29:c9:
                    6a:1b:6a:f7:92:48:27:e1:84:d3:fc:00:c8:64:31:
                    bb:28:26:b6:53:67:bc:3c:4e:82:cc:cc:52:71:eb:
                    a2:85:14:ff:3d:a1:52:31:ef:47:a6:cc:53:01:96:
                    ad:5e:06:fd:e7:76:3a:95:57:ad:18:3b:b4:1b:3b:
                    e7:16:9b:c6:16:dc:0f:c3:ca:51:99:1b:74:52:20:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:67:70:AA:BF:FA:F3:80:67:39:C6:8D:7E:21:C2:33:FA:45:6A:68
            X509v3 Authority Key Identifier:
                keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:92:7f:b6:15:4f:8c:09:b1:05:16:99:21:8c:f4:6c:8e:1e:
         04:95:72:17:aa:0f:11:cc:55:8b:1c:63:9e:2e:a5:c9:e0:5b:
         bd:44:c3:0a:74:f8:c8:d2:42:a3:b8:36:e2:bd:96:a0:51:f6:
         07:a2:d1:fd:06:24:68:b7:4e:e0:d2:b4:a7:3c:e7:f5:04:55:
         51:61:2b:14:40:70:21:25:c2:0c:a3:8b:02:d2:a0:c6:c2:fe:
         b9:94:3d:bb:f9:6a:5b:e3:c8:ad:a2:18:a7:0f:f2:4f:e3:2d:
         77:fa:bf:12:95:56:08:96:05:93:79:c3:a4:3b:91:fd:79:7a:
         45:ea:96:62:1d:a1:23:2a:75:ee:a2:54:6d:37:e1:06:4b:a3:
         ec:66:3e:e9:66:3a:83:09:29:a0:b5:43:19:40:87:e5:6a:9c:
         a1:c1:7d:3c:37:47:6b:6b:7b:aa:02:9f:2b:20:69:ad:dc:3f:
         83:cf:eb:01:68:38:84:ae:af:dd:db:50:15:a3:14:11:55:bc:
         ab:bb:42:70:bb:14:ee:0a:34:89:66:d4:fe:3d:99:98:c5:a2:
         ab:ec:83:1b:c4:cd:97:33:a4:5d:3d:f1:27:ed:55:ca:9e:a5:
         42:8e:0a:9c:eb:ea:6f:20:74:10:d7:08:3c:f3:3a:7d:65:ea:
         80:50:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----