Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File:                     4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier:          dH0B9XYztpCXi9WBN7vQ2/fXut2D+ar2tICDmNJ/+Mk=
Subject key identifier:   10:C6:16:4A:3F:55:7A:3D:CA:71:1A:6F:6E:86:A8:26:29:0E:C0:39
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer:       /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial:       01962E2AB9BE3DD764094A41FB4C535A7ACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number:          11FA
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
                          2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: RiZjiPqxIaG4tup0O4Hs6Ns++prIrYpIum3figgKYS4=)
                          3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:b9:be:3d:d7:64:09:4a:41:fb:4c:53:5a:7a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=10c6164a3f557a3dca711a6f6e86a826290ec039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:0f:78:22:2a:39:0a:88:b8:b7:e2:d3:fc:
                    97:ae:6e:4c:52:5e:1b:27:93:a7:00:6c:fa:0e:a2:
                    e4:50:0a:46:7f:b9:3a:1c:4f:1c:81:e3:ef:60:2f:
                    78:89:be:71:b1:1e:88:8f:71:f7:4a:79:a5:83:f1:
                    a0:9b:0d:80:f1:88:ae:cc:80:b7:8a:8d:57:63:b3:
                    4f:04:f8:b8:f4:9f:e7:f0:eb:02:0b:cd:0f:a4:15:
                    db:f4:22:74:dc:6e:48:9b:7c:ea:03:53:0a:f7:b1:
                    4f:e2:d9:13:2e:d0:0a:04:86:be:21:de:7b:98:09:
                    d1:ad:3a:33:52:cb:02:57:08:0a:4b:ad:51:f5:fd:
                    1c:aa:68:60:4a:5d:4c:3d:bc:80:a1:f7:24:34:d5:
                    77:a7:17:69:88:fe:1f:51:be:0a:14:65:6e:96:14:
                    8d:3d:0a:ad:39:42:88:92:8f:ac:7e:7e:0e:b1:59:
                    3b:83:6e:18:16:b7:20:4b:a8:12:db:86:16:8d:a3:
                    cc:9a:49:d7:16:2b:2b:a8:31:8c:26:dd:19:f1:59:
                    25:4d:2a:71:7c:17:cf:af:12:24:53:19:84:a0:29:
                    ea:95:68:18:a7:d4:71:81:1e:69:87:c6:f4:ef:44:
                    c8:61:e3:c6:da:9c:b9:27:9b:da:97:92:4c:79:e8:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C6:16:4A:3F:55:7A:3D:CA:71:1A:6F:6E:86:A8:26:29:0E:C0:39
            X509v3 Authority Key Identifier:
                keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e2:e0:91:1f:8d:71:24:da:05:e0:51:3f:3b:ca:85:2c:0b:
         21:48:bf:f1:18:0b:30:e9:8b:80:1a:aa:df:19:e6:4c:27:d9:
         4c:db:2f:b0:03:15:f2:98:ed:fa:41:27:59:e6:c7:a9:a9:ca:
         7b:1e:a8:d6:e8:9f:7e:b1:47:92:3b:20:0f:ba:5a:85:99:ec:
         ff:cc:8a:55:f9:44:54:65:d7:ea:8b:cf:2f:f7:bf:96:b8:0d:
         35:b7:d5:da:c9:6c:49:63:c1:f1:c1:c1:98:2b:84:65:30:00:
         dc:29:37:e7:97:e1:b5:c8:7a:ee:52:bf:24:55:4e:ae:20:b7:
         5d:eb:42:e9:75:6d:c4:1a:8e:3e:31:19:5e:46:a1:03:6c:b5:
         4b:02:fc:d4:fd:59:35:e0:32:2c:4a:7c:40:a4:c3:95:8b:9e:
         10:ae:b9:df:66:bf:99:42:f6:68:1c:e8:0f:56:24:33:0e:0c:
         e5:5e:32:3f:df:64:54:18:f4:42:1e:08:f6:c4:36:0a:2c:c9:
         3a:9f:e3:de:4b:fc:fb:ac:1b:9d:0b:2a:f0:0f:e2:88:85:35:
         72:31:52:99:1e:25:08:27:f1:6d:49:9c:33:ed:79:09:6d:c5:
         f6:0d:e0:b4:44:ae:9a:35:be:5c:c3:43:0a:c5:f4:c9:e0:2b:
         49:08:1a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----