Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File:                     RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier:          kV4P36LjEVeiNwJThjV1grJL+MLMJLNYpdyWDKm32BA=
Subject key identifier:   C4:E1:78:66:88:6D:9E:AA:00:B1:06:6C:F6:84:C3:E9:F2:BE:C3:83
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer:       /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial:       01962E998102FF6ADF3ACBA7FE95465DDC9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: uyshaewemw3Fx7NFoxMSD/VHnDxpmmL+AFDqnQ09RYo=)
                          2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:81:02:ff:6a:df:3a:cb:a7:fe:95:46:5d:dc:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=c4e17866886d9eaa00b1066cf684c3e9f2bec383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:cb:d6:d3:c0:9f:9e:08:49:14:0f:f5:a2:
                    8a:64:28:db:80:44:08:36:4e:92:85:ed:52:2b:82:
                    be:33:a0:ae:93:91:a6:cf:d0:62:f3:5e:99:19:c2:
                    0a:7c:6f:29:56:28:eb:04:d9:96:73:e4:d4:ec:8a:
                    32:c9:e9:05:72:ae:7e:2b:67:51:76:8a:0e:da:13:
                    dd:91:79:0a:bf:39:68:76:25:ea:03:c2:b7:cc:fc:
                    96:4d:11:e9:89:71:65:a2:92:14:9a:91:a1:c1:76:
                    62:6d:c9:82:7d:24:cd:72:bb:a2:0e:04:cf:e5:1f:
                    e8:32:f2:8a:43:f5:57:e7:09:ff:a0:06:77:29:79:
                    73:f7:e3:f1:bc:8e:32:c9:37:a4:9b:ef:02:81:0a:
                    99:8a:02:72:ef:41:4f:23:e7:cf:ba:4f:c1:db:67:
                    6b:01:8d:67:32:27:f8:d7:aa:a2:e3:c5:bb:9d:76:
                    ed:b5:9b:bf:a8:84:d6:41:bf:be:a3:02:dc:b5:d8:
                    42:a4:04:45:6e:c8:1b:59:7f:49:4c:b6:ba:a5:71:
                    b8:b6:5c:25:44:d9:53:c6:6a:fc:e3:92:82:de:6b:
                    70:b9:34:4d:2c:49:cf:a1:09:c4:0c:65:61:73:59:
                    c8:5a:3a:2f:f1:0b:44:aa:0e:14:96:49:39:84:88:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E1:78:66:88:6D:9E:AA:00:B1:06:6C:F6:84:C3:E9:F2:BE:C3:83
            X509v3 Authority Key Identifier:
                keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5d:68:df:60:ed:3d:16:40:d6:ba:df:55:2e:77:2c:10:85:
         4f:ae:52:83:b7:ea:4b:8f:52:56:08:a8:aa:67:0e:e6:99:52:
         98:5c:36:12:ba:b5:35:d0:4e:59:79:24:56:2f:63:39:a5:91:
         0c:ed:13:c4:d7:d1:ad:e8:f3:9d:53:c5:e6:07:fe:b1:58:89:
         1f:8f:5b:5c:69:fa:b8:6e:f2:c5:c0:85:cf:55:7c:30:ee:fa:
         1c:9d:4d:dc:32:35:2e:2e:09:0d:c1:10:3e:4c:5f:db:dc:f9:
         e6:e8:65:6c:a3:75:63:a6:a3:f9:7d:4e:9a:1e:be:6e:55:b1:
         4d:4a:f8:ec:f4:36:8d:f3:bb:f6:cb:d3:34:58:c5:73:45:af:
         e4:20:bf:3d:6a:08:ad:72:a3:ad:09:83:1e:bd:c6:1c:3f:43:
         ca:5f:cb:2d:ba:d7:74:84:53:c7:a2:d1:55:38:fe:03:61:c6:
         c7:13:4f:33:1c:75:a6:70:d5:27:f9:c3:54:6c:8e:6d:12:57:
         18:cb:a9:be:31:05:0e:fb:8a:cc:22:88:73:54:79:7d:fe:f7:
         ac:57:d1:d5:a7:b2:e4:f5:0f:0a:21:39:e8:e3:12:4c:9a:c1:
         aa:dc:ed:af:19:29:5d:4e:d9:f4:5d:a6:26:58:76:ad:69:26:
         5b:f6:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----