Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File:                     pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier:          peLpP83ECDSkha4GWE77aA1B1JyCar5GDLi3q/Br94U=
Subject key identifier:   20:DB:37:B0:84:45:51:10:40:7C:98:EA:1A:11:0A:7B:6B:BF:BE:62
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer:       /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial:       01962E9995A69600C6F00267DD37822240EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number:          0770
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: 2JNRo-dtGNGJcp7kMDpk5VpUcF4.roa (hash: sJo6COvD7U5zSVoX5aZ2ujJN+R6hvJF0qpAtUrijnZ0=)
                          2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: tCO6orM8iSZWa7DKO2bci15sNS9Kcl6m0HniNCajKG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:95:a6:96:00:c6:f0:02:67:dd:37:82:22:40:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=20db37b084455110407c98ea1a110a7b6bbfbe62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:c2:c7:1e:68:31:a2:28:08:d7:13:8c:d8:
                    89:91:85:a2:17:02:0a:ea:2e:ad:ee:35:d6:a6:ea:
                    b2:f6:72:86:d2:da:50:0a:4e:6e:65:91:15:74:2f:
                    00:26:f9:e3:a4:43:a0:07:1b:4b:e4:35:9b:a8:d8:
                    8c:fe:ef:8e:77:50:51:9d:c6:c7:a2:49:1d:e9:ed:
                    d3:83:d1:d9:7d:95:87:da:c6:33:cd:5b:55:78:ef:
                    97:a3:7a:27:8d:b6:b7:cc:96:66:01:99:af:6d:0f:
                    be:f8:db:7a:30:3a:6f:1d:ad:58:b1:1f:8b:e2:01:
                    5b:ca:c3:bf:ab:cb:dc:da:9c:1e:1d:94:5c:e5:31:
                    64:15:00:ed:cc:18:48:f9:b4:8d:cf:25:e9:4f:1f:
                    be:76:3d:3f:13:ea:b7:6e:46:7d:44:7d:db:44:28:
                    40:54:df:f4:56:b2:b3:a1:ab:cc:46:96:23:e7:a2:
                    c7:87:bc:7b:06:88:af:93:02:33:b6:11:78:82:1c:
                    65:60:be:15:4b:eb:5e:b7:62:1d:6a:b2:42:73:d7:
                    f2:d3:79:ce:5a:b9:67:ec:4e:2a:ab:35:7f:5e:05:
                    9f:fe:30:b0:2b:5c:20:03:51:b2:dd:84:ac:fd:bb:
                    bb:2f:a7:9c:62:be:d7:97:d4:b4:79:5e:70:26:0b:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DB:37:B0:84:45:51:10:40:7C:98:EA:1A:11:0A:7B:6B:BF:BE:62
            X509v3 Authority Key Identifier:
                keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ca:1b:26:6d:fc:2a:5e:7f:63:fe:51:a8:7a:e8:7e:9a:ef:
         49:88:8f:75:22:ce:f9:ce:55:95:72:ee:ce:c0:30:51:bb:97:
         1d:6d:d8:59:52:66:d4:92:7a:e9:31:62:6d:c9:a0:6a:9c:a6:
         1f:c1:82:49:1b:00:6b:e5:e0:cd:81:5b:1c:72:91:03:fc:a1:
         80:5e:70:65:f4:ae:1a:b3:38:4e:38:a4:33:9f:2d:4a:8f:14:
         0f:13:fb:f5:e3:37:74:1a:47:9a:3a:cd:e0:22:8d:2e:6a:86:
         24:49:97:99:a7:3c:24:df:09:d2:0c:b5:fa:d4:b3:20:6c:18:
         40:ca:4d:4d:16:54:3c:ec:33:07:b6:00:23:fc:9f:b5:c4:93:
         6d:75:cf:c8:2a:d9:70:2a:12:55:f8:d2:ae:42:59:c4:95:84:
         d4:f8:be:1b:08:62:62:f0:77:db:d7:99:cf:03:a2:a3:07:bb:
         25:33:d7:66:00:f2:d1:a8:64:bb:21:cb:fb:b2:b5:20:43:fa:
         c6:15:53:3f:eb:f8:fb:14:94:88:14:35:50:16:59:0d:11:e7:
         c7:af:92:52:09:83:7e:c4:d2:7c:7f:c1:53:54:c5:34:d3:5e:
         4d:e7:0a:49:69:d1:02:74:8d:c9:e1:e3:95:c0:b6:5d:3f:6e:
         b3:8d:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----