Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File:                     4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier:          nhEFe8obeEK3wy1LGlB6x+FcxLQXq12+iF8guQxDHMs=
Subject key identifier:   3A:BE:B3:3B:6C:F5:97:65:DA:12:C4:F1:C8:26:1E:1C:21:78:48:DC
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer:       /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial:       01962F3D8C884FAA07D9F33C14C5EE5BE440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number:          028A
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: KawdJTTI6sGJup/2C51XftX8WIX8fQe+QbiJJf7G7GQ=)
                          2: 8a9J3an90z8mWS8TkwqA1Af6V60.roa (hash: Sfg4OixpuznuGw9qd09AY2Lx61QBeTwn9kYrisQDEss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8c:88:4f:aa:07:d9:f3:3c:14:c5:ee:5b:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e109e278c7862254c88755e4717398a552a49040
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=3abeb33b6cf59765da12c4f1c8261e1c217848dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:9b:a6:84:10:82:9f:8a:b2:b8:a0:7a:22:
                    1a:c4:39:7e:f4:3c:43:10:9e:4e:f8:6e:cc:f0:84:
                    b2:ed:8e:c6:dc:d9:fb:00:21:61:b7:73:8e:15:cc:
                    2f:c1:c3:ca:1a:11:9d:d5:d3:06:d6:c7:f0:0a:75:
                    34:fa:10:aa:a1:1a:24:43:a2:b4:56:84:f2:75:49:
                    d0:d1:6a:c9:61:d3:1b:18:e1:6a:af:a5:32:0f:ad:
                    73:71:97:ed:82:48:ba:b3:57:c5:fb:25:c7:07:e0:
                    28:5f:7a:15:26:6a:f4:2e:72:f5:a1:8b:b1:ea:ef:
                    b5:48:6d:90:b1:cc:34:69:ab:10:ba:ac:d9:c6:31:
                    12:82:c4:de:16:5d:b3:c0:45:60:80:57:83:c1:ed:
                    ba:67:f7:8d:a0:1e:c2:64:2c:02:3a:ac:7f:9d:42:
                    10:97:7b:ea:f0:d2:03:6a:1e:de:eb:d9:df:a8:87:
                    14:76:fc:25:70:5c:08:23:f8:f7:c0:3c:b3:7c:b6:
                    b3:aa:77:79:ba:3d:47:90:4b:52:bb:15:2e:bb:ec:
                    74:29:17:81:d7:20:c9:78:f0:97:7c:4f:18:33:af:
                    5f:cc:ca:28:bf:5c:77:1b:64:67:c4:3f:09:4c:5c:
                    a8:1c:e4:b1:9d:05:43:8a:b8:2d:4e:78:fc:fb:f0:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BE:B3:3B:6C:F5:97:65:DA:12:C4:F1:C8:26:1E:1C:21:78:48:DC
            X509v3 Authority Key Identifier:
                keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:da:c3:06:68:79:f6:fc:81:69:38:5e:5c:a5:5c:1c:e1:
         81:7b:4e:5a:c6:91:af:3f:5c:6e:3f:8a:cc:9c:0b:dd:a9:f1:
         69:90:f0:78:9d:04:b7:a4:1a:1c:6b:bf:4c:48:30:7b:c3:27:
         89:fc:9d:1f:f1:c5:d9:d2:56:e8:0c:60:c7:5c:8a:ae:2a:d3:
         9e:f5:76:a6:75:45:ae:39:de:7a:bb:23:42:c3:85:d3:88:5a:
         ab:16:86:47:7a:63:95:f7:b3:c6:4d:6d:5b:36:50:71:1a:01:
         25:eb:ec:1d:b2:d4:4b:35:08:4a:b6:72:2f:a6:ad:63:b2:b5:
         df:7a:f0:74:5b:bf:33:a2:37:b3:0c:1e:1e:85:bb:1e:5f:00:
         53:b7:0a:a2:f8:bf:53:3f:48:53:d9:a3:af:5a:07:7f:b8:d1:
         2a:59:c3:b0:0b:a2:56:07:99:e0:02:07:5c:95:44:ee:99:a2:
         a5:ea:31:1e:f0:8f:c4:e6:5b:ae:a3:82:e4:3b:2d:9c:d1:33:
         8f:c1:dc:0e:06:04:1c:40:d9:ce:ab:99:bd:f3:d9:0f:9f:11:
         9d:83:90:bd:07:1d:86:47:8f:57:ec:99:73:e1:e5:63:9c:9d:
         e0:d0:30:b8:38:62:7f:be:d3:e0:e3:69:36:ab:bc:3e:e0:b3:
         bf:f7:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----