Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File:                     4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier:          ZtNz6cgSGmNmEsnYmFSV/Yekl41LS234TbpjpXI+Dnw=
Subject key identifier:   2D:DF:70:71:27:61:9C:4D:18:B8:57:06:9D:36:12:96:DE:B6:3E:68
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer:       /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial:       01962F06474255C474614CA67E27A47976AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: 1-rU3n-MmX0x7vSSIglpKrM6p7wc.roa (hash: c73xh5XkAcPFRSo/oWqlfjE2NzFubQ+3BLO5+whFr6o=)
                          2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: EyObPZ3b1hG7pVRqrHExJuNEz+CyfspAiieEjSMMNAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:47:42:55:c4:74:61:4c:a6:7e:27:a4:79:76:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=2ddf707127619c4d18b857069d361296deb63e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:18:cd:4a:87:49:d3:4b:c8:e0:01:45:ed:
                    52:0a:79:63:47:33:21:90:c2:a4:cc:32:af:9f:a2:
                    5c:e5:8a:4a:94:9a:1f:3d:fa:d8:65:d6:bb:4c:42:
                    33:29:db:02:ee:b1:f5:85:94:0f:f0:84:e6:42:01:
                    38:6f:7c:8a:0a:6f:81:0a:ad:8a:89:cc:46:b5:c6:
                    7e:78:fc:3b:c9:48:c8:9b:8d:5f:70:1f:27:c7:10:
                    fb:c6:b5:c0:b0:c8:bb:f0:c6:ad:a9:e0:d7:3d:22:
                    73:de:e9:cd:5d:cb:f2:0b:6d:49:e1:1c:ce:8f:2f:
                    51:96:ac:ad:3e:27:41:f0:05:50:81:b1:40:41:d0:
                    72:0e:21:e4:eb:d0:51:24:cf:36:6f:86:94:82:2a:
                    50:bc:cf:7a:bd:a3:dc:e5:17:f9:f8:57:36:bb:3a:
                    91:46:76:e7:9d:7a:9d:19:91:32:68:90:ca:14:ac:
                    00:17:ff:08:07:b8:d8:fe:87:7f:63:c0:87:ad:34:
                    2b:5d:be:54:c1:b0:c1:59:b7:f4:59:97:26:5a:38:
                    11:41:fc:6c:fd:6d:72:24:5c:cc:55:72:b0:a3:5d:
                    bc:3c:48:5b:24:0c:ef:2d:21:2b:f6:bc:09:c3:79:
                    e6:a1:25:f1:d4:ff:78:e4:3c:e6:7b:48:9e:bb:fb:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DF:70:71:27:61:9C:4D:18:B8:57:06:9D:36:12:96:DE:B6:3E:68
            X509v3 Authority Key Identifier:
                keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:30:7d:0f:e0:f8:44:69:c8:53:92:c3:90:ee:59:f0:41:
         7d:8b:8e:0b:bd:ac:bb:33:79:5c:fd:58:dd:4b:c4:80:56:af:
         c2:bf:49:bf:0c:84:2d:37:e4:11:d5:c3:80:51:05:0d:12:4f:
         1c:7e:25:72:24:dd:a2:56:2c:69:8a:14:e8:32:b5:09:1b:a0:
         6f:ba:a5:f4:a1:79:3a:56:6c:95:7d:fc:87:c5:f1:04:96:de:
         65:2c:f5:bb:24:ab:91:31:ff:7e:af:72:a2:dc:ff:6a:68:09:
         48:2c:4f:22:bb:e4:07:97:60:6b:e4:24:18:6c:fb:fa:05:9e:
         bf:9f:09:35:88:ba:84:f6:96:63:46:a8:9e:8a:cd:64:dd:b4:
         45:3d:0b:bc:60:28:e9:17:56:1b:88:ef:ec:22:52:34:8e:fc:
         b1:c7:49:a6:d0:23:c4:dd:9a:ca:ca:d8:4a:18:a6:fa:db:f5:
         12:0e:07:22:8c:cd:e4:20:ae:c3:b2:ea:6c:68:bd:a9:e9:11:
         0a:23:b8:4b:2a:a8:57:87:62:9c:59:a4:09:4f:e5:15:b3:d3:
         47:55:87:ca:d4:a3:51:9b:0b:a0:c1:a7:7f:73:46:ae:65:45:
         af:8d:fd:ef:30:22:7b:78:44:2b:a3:0e:33:b3:cd:38:4d:36:
         a8:be:63:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----