Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File:                     4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier:          jzrDyEU9kq/+alLnAMXGPWdl4xRuKTqsx0ju7wOxi6Q=
Subject key identifier:   F3:B3:E8:C1:84:38:03:23:60:94:58:75:1E:53:9D:73:54:27:6E:3F
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer:       /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial:       01962E9928992B3334B5B488AE295C8DC970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number:          01ED
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: RQCd/tpRIER4D/2Shv6iAvaPDhtTek1qRsB38p3kyZY=)
                          2: H7jD667ua1MTRSgNeUALgotBmYc.roa (hash: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=)
                          3: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (hash: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=)
                          4: lchTEZvN-6afhfJLiZL0vloeA9I.roa (hash: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:28:99:2b:33:34:b5:b4:88:ae:29:5c:8d:c9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=f3b3e8c184380323609458751e539d7354276e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:c3:a1:b2:e4:07:b4:fb:36:ea:aa:0c:73:
                    2f:f7:ac:3c:26:c6:f5:c3:00:7c:8e:93:20:20:8a:
                    f6:d7:e2:c4:cc:be:d2:ec:e6:25:83:f9:d0:27:17:
                    d9:85:1a:e1:59:60:e7:29:80:1c:2e:30:e9:6d:10:
                    97:c2:57:8b:d3:33:60:18:46:22:ba:b2:e5:d7:54:
                    b5:c4:e6:eb:64:c1:b3:ee:3f:b2:56:40:0c:91:36:
                    74:1b:4a:b2:4b:6a:88:20:28:5d:ae:5b:61:57:a8:
                    ed:4b:3e:bb:e3:69:f3:54:66:f8:0b:64:83:6f:9d:
                    99:8a:be:2f:30:f9:c6:56:49:65:a5:de:9e:36:26:
                    90:85:af:57:e4:b8:d3:43:28:d8:c7:23:00:01:4d:
                    57:e2:83:20:a7:7b:fc:d3:d3:e1:42:e3:1a:1a:7c:
                    8b:8e:04:69:d7:9f:c8:0c:fd:ca:ee:1f:e1:5d:3a:
                    9b:66:7a:2a:ce:11:3e:a7:9d:f9:19:db:32:28:1b:
                    46:e9:d9:47:15:4b:e3:66:90:63:0f:22:48:a2:3d:
                    99:19:60:4f:98:e3:54:20:7b:53:22:7f:f1:9d:bf:
                    81:ce:46:93:55:29:9e:a0:d6:39:64:2b:b7:55:06:
                    4a:fe:6d:6a:2f:39:4b:c6:13:54:c4:75:fe:31:a2:
                    e1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B3:E8:C1:84:38:03:23:60:94:58:75:1E:53:9D:73:54:27:6E:3F
            X509v3 Authority Key Identifier:
                keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:b2:6c:ae:8c:61:bb:e5:53:22:b3:ad:1b:d7:49:e4:36:
         89:ab:58:9a:92:0f:b3:d2:5d:5a:b0:2b:30:c6:30:5b:3c:09:
         49:35:72:48:06:3c:3a:f4:6b:8c:80:50:50:ee:14:e3:63:cc:
         8b:3f:b2:28:31:17:07:8f:f6:43:86:72:f4:7e:0d:6f:73:6e:
         67:9e:45:72:ec:0e:88:6c:d2:dc:39:5f:ed:b2:45:e8:48:6c:
         2c:59:91:9f:bf:ef:d9:a3:44:da:66:45:82:86:f6:9a:ea:05:
         fa:fe:31:0b:6b:82:d2:12:ae:37:7c:58:2f:b7:0c:0f:2a:64:
         2f:3f:a2:6a:6b:5e:98:5a:40:ec:d0:e9:fa:14:b0:48:da:0e:
         34:3a:bc:27:7b:0c:f3:29:5d:c0:73:0d:cc:17:ca:3c:59:13:
         3d:4a:2d:a5:25:b5:c7:93:d4:a4:f7:47:9a:aa:ce:ff:ee:3e:
         78:fd:51:8a:b1:dc:e1:69:b6:e0:40:12:a8:f0:7c:fa:48:ce:
         1d:c3:8d:1d:c1:ae:a5:45:ce:37:64:f6:e1:75:28:d2:eb:e0:
         42:24:ea:88:f3:9f:27:91:4b:41:5d:8c:17:a7:fd:14:56:3f:
         01:67:e4:bc:6b:82:53:52:0a:97:07:0e:8e:f1:1a:d5:f8:6b:
         a8:a4:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----