Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File:                     41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier:          VdtX8R1okmvIiIbR2ko/VyE08c3NlcDTD1KtKuK2dQI=
Subject key identifier:   91:1B:30:25:0D:57:F4:46:97:5B:EE:52:36:DF:BB:94:5F:19:EA:BF
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer:       /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial:       01962DF3F1F7CA1AAC6B646E08D6BD55CE36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (hash: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=)
                          2: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: bPe03+dI+GicVHbZXQ+/GqbA07Eci3yhOYzZv8GVEZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f1:f7:ca:1a:ac:6b:64:6e:08:d6:bd:55:ce:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=911b30250d57f446975bee5236dfbb945f19eabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:8a:68:d3:45:0d:c4:d5:a8:ad:af:22:30:
                    58:a5:10:ab:3e:73:db:ba:22:10:49:e1:3f:5f:d3:
                    b6:94:96:0b:5f:79:a0:62:ad:e4:22:77:ab:ae:d6:
                    21:ff:fb:09:e4:41:70:dd:5b:df:e1:81:e8:7f:5b:
                    99:13:32:0d:8d:6d:1d:dc:10:86:a5:a5:3c:06:e2:
                    06:51:a6:5f:9d:16:a2:2d:60:e6:a8:24:e8:1e:46:
                    67:78:09:fa:7e:d4:39:11:a5:e3:c7:27:62:ca:91:
                    0c:fc:23:44:ac:3e:f1:2c:39:6c:29:e2:92:c9:fb:
                    fe:7b:ad:92:ca:bd:8c:36:6d:3a:30:6a:b3:30:f8:
                    2a:bc:0b:ce:d5:62:4d:1e:fb:67:98:07:d9:8c:d7:
                    a7:63:85:b4:1d:5d:14:3c:1b:25:e9:95:cb:2d:f8:
                    11:62:91:67:4d:88:7f:3c:bf:10:53:0e:c4:2e:ea:
                    dc:1b:01:02:79:98:d4:f4:49:ba:c8:5d:d1:7a:f0:
                    c7:83:24:37:12:45:1e:40:67:f6:54:49:d7:e2:6d:
                    2b:21:0a:54:3a:68:02:3e:e7:d6:53:ac:73:25:79:
                    6d:36:b5:7b:01:46:f8:a4:92:fc:61:17:56:7f:e3:
                    12:e3:d5:59:f3:d3:f9:ac:6c:3e:8b:db:75:63:32:
                    26:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:30:25:0D:57:F4:46:97:5B:EE:52:36:DF:BB:94:5F:19:EA:BF
            X509v3 Authority Key Identifier:
                keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4b:d8:cb:70:ed:5b:04:e5:0e:9a:c5:1a:73:ea:4c:29:5f:
         94:dd:96:c4:b2:dd:bd:3f:fe:d0:e8:79:62:7d:99:57:2b:74:
         42:c7:1a:92:cf:fa:b4:5f:50:7d:a4:0a:80:bf:09:00:b9:ed:
         1e:16:7f:99:83:35:0d:e6:7c:27:27:0a:49:4d:69:ce:6f:05:
         9f:e8:50:d6:d5:9d:ec:99:f5:c8:06:3d:d7:01:6e:4e:e1:61:
         5a:1c:14:10:70:76:f2:20:0c:c1:b0:ee:c6:5b:6c:ce:16:88:
         d1:27:e9:ab:61:0e:b7:87:c9:c4:f5:dd:0b:5d:2d:37:f5:91:
         c1:36:ac:69:e6:96:67:64:76:35:cd:f0:78:9e:61:cf:d9:18:
         b1:b7:67:e5:75:77:7a:99:0d:4f:9c:65:f6:2d:72:1c:ba:fd:
         1b:45:ee:26:b5:3a:5b:0e:e7:b6:f3:f3:09:3a:76:2c:65:5f:
         14:62:07:d6:3b:65:6c:75:90:5a:ab:4a:e7:8d:1d:ed:d2:dc:
         d3:a4:04:be:ba:8e:e1:a8:58:6a:4f:1c:ea:72:a6:c0:60:1e:
         30:16:a3:ea:8c:17:76:fe:c8:a7:3b:bb:2e:12:7c:dc:51:95:
         38:bb:78:4a:dc:66:bb:20:f6:25:aa:97:26:8c:d7:15:41:72:
         ed:95:9f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----