Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
File:                     4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json)
Hash identifier:          iWRZJ/w/ZFwcz9yL8/UVmcVBGW6BBzHwAJTORN9A4Dg=
Subject key identifier:   65:33:71:57:82:85:96:4B:68:FE:D7:05:7A:9E:DE:EC:E9:CF:49:51
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Certificate issuer:       /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial:       01962FAB97A09500D71786B01F5B651E6823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: WscjhA7lJVuUXGowW5cQblduWkzvMSjoME8NTtoKmys=)
                          2: ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa (hash: 5aktyEB76Rn5TuWGXiVEAOmlZjNF43pV1TNogR1WVfw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:97:a0:95:00:d7:17:86:b0:1f:5b:65:1e:68:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=653371578285964b68fed7057a9edeece9cf4951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:1a:36:79:e2:0f:ee:cc:c3:a7:09:29:46:
                    9d:22:36:1e:b2:13:39:8c:05:99:44:13:0c:e5:6a:
                    f2:37:de:c2:9e:e6:bd:97:91:13:b6:3b:ab:08:81:
                    fe:76:41:f3:6e:d3:a7:83:9d:64:28:1a:41:53:d0:
                    d7:46:fb:a2:d4:68:1b:f7:21:4f:e1:b1:d2:09:27:
                    26:b7:95:32:11:8b:c5:38:2f:c7:47:dd:5e:bf:ff:
                    d8:23:82:e5:ae:cc:a2:80:a4:dd:e6:56:6e:c5:45:
                    d7:f5:aa:26:97:1e:06:a4:a7:b0:67:4f:d1:e0:d1:
                    39:3f:d2:21:47:e8:e5:d5:a5:a2:05:94:5f:0a:e4:
                    d6:ed:cb:66:4c:0b:11:c1:a0:8c:04:0e:47:38:6f:
                    94:a4:84:54:b7:e6:b1:0d:2f:61:7c:76:af:f8:ed:
                    70:ba:34:22:62:38:f1:67:fb:5e:06:f7:1c:20:64:
                    d4:2d:48:8a:f4:ca:dd:f8:c8:c0:bc:9c:de:5b:ab:
                    4d:ec:55:55:30:a7:f7:54:59:99:d0:8a:f2:d8:a0:
                    98:7c:dd:2c:5c:be:74:50:39:c9:4f:34:30:50:35:
                    e6:9f:98:f3:35:fa:50:d4:d1:5a:9f:76:17:3b:f3:
                    8f:92:fc:f9:7a:0b:e0:6a:9b:6a:eb:3f:e3:2e:1d:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:33:71:57:82:85:96:4B:68:FE:D7:05:7A:9E:DE:EC:E9:CF:49:51
            X509v3 Authority Key Identifier:
                keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:23:25:9c:5f:c8:5b:06:58:f3:1b:54:cb:97:cc:ee:b8:
         94:fa:ee:c9:a3:96:14:65:91:82:43:16:14:09:34:54:76:1e:
         64:76:75:52:95:79:56:bf:cb:52:f2:2f:90:f4:26:16:06:3c:
         40:be:6e:10:29:69:fb:c8:ff:bb:18:f4:2e:be:3e:55:51:43:
         f3:b9:2a:58:97:a6:cd:6a:8f:c2:10:9a:45:3d:87:6e:42:7d:
         cc:1d:4f:59:b5:86:cd:ba:08:4d:fc:50:25:41:60:eb:b2:25:
         48:96:ac:53:bc:8a:d9:5a:fd:a5:83:ab:e1:67:51:e8:2b:ee:
         41:09:45:a3:70:0f:74:76:e7:33:3f:8a:f2:1d:5a:b9:8c:c5:
         0a:15:1e:33:7a:7d:5e:db:3e:f3:8d:2a:61:75:df:03:8b:b1:
         fe:1c:b1:8c:a5:5b:8e:65:08:19:75:db:86:5a:41:07:f8:24:
         af:83:d0:7b:3e:98:d6:4e:36:f8:50:cf:57:f7:37:c8:0c:d5:
         64:86:3d:e5:2d:ac:6e:a8:65:80:33:54:c3:ce:c9:fd:f4:6a:
         e0:85:b5:46:89:d9:4b:1e:93:89:31:9a:7f:8c:9b:f9:4c:b9:
         54:12:71:29:6c:f3:45:99:79:00:ea:e3:fd:a6:d0:6d:63:8e:
         c0:8a:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----