Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File:                     4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier:          O1dTi93rZ7E9lAYkJgEebjC+pozqmBJbw9wOpZFYbTM=
Subject key identifier:   C6:0A:52:53:7F:23:5C:D8:E1:DE:AB:12:14:6F:EE:39:EA:B0:97:7D
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer:       /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial:       01962F06B343974CD4B39B761E6CC4565954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number:          1122
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: yRwsig2pBLR3jYzS/NWp0Ts+RN48vqEy3lC+ZHyHGNk=)
                          2: mOT0OYFh_GTToGk2uZIA05IaKkw.roa (hash: GG4lCtM4E3X4xtxRGjZF0g1O2sssvUKDA/6mYRaIOI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b3:43:97:4c:d4:b3:9b:76:1e:6c:c4:56:59:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=c60a52537f235cd8e1deab12146fee39eab0977d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:89:26:db:6d:56:3d:52:1a:9c:7d:77:86:
                    94:62:b4:f0:44:8a:64:6a:fc:1f:3b:c3:f4:e8:be:
                    31:f3:ea:ca:88:96:69:42:b7:e9:ed:97:92:ad:c3:
                    d7:7c:7a:10:7b:f9:ae:67:c1:e6:0d:e1:cd:b7:f3:
                    2d:31:ea:14:59:2d:42:c9:40:3d:7f:ce:9c:6b:68:
                    4f:0d:5f:87:62:7f:2b:71:fd:8e:02:6e:5b:f2:3b:
                    80:d9:99:86:7a:d8:b9:ed:63:7e:a0:ec:4d:4a:9e:
                    91:4e:b9:ce:ee:8d:e7:70:a4:5f:b4:81:bb:07:ad:
                    fe:9b:d1:e3:f3:6e:8b:7b:ed:04:9d:f6:3c:0c:43:
                    3b:15:f0:20:2c:0f:66:af:66:3c:1e:e4:b0:58:94:
                    28:9e:71:06:86:11:a0:0f:74:52:ff:7d:11:de:db:
                    c9:4a:b2:58:2c:4a:9b:46:96:3c:8d:cb:c4:20:6a:
                    6e:9d:0a:74:db:27:f7:65:0a:17:93:60:5c:2a:49:
                    2c:cb:d7:b9:7d:ff:e1:22:5d:63:86:4f:03:76:e7:
                    bd:00:8b:2f:0b:4e:a3:9d:f0:f0:7c:2f:5a:e7:4b:
                    d7:8e:a8:b5:bf:7a:15:a9:dd:52:03:ae:86:77:c7:
                    56:f8:89:e7:2e:51:f8:99:ef:05:e5:f9:5e:f5:36:
                    d9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0A:52:53:7F:23:5C:D8:E1:DE:AB:12:14:6F:EE:39:EA:B0:97:7D
            X509v3 Authority Key Identifier:
                keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d0:e3:4b:47:a0:05:6b:51:f1:c3:b8:98:af:33:a4:5d:ee:
         5f:0f:ff:14:c5:1c:d2:5d:f0:45:95:18:ef:ae:f9:e0:38:99:
         2f:e6:e9:16:28:b4:af:71:e8:ed:a7:42:d3:92:f0:03:90:06:
         13:72:3e:86:4a:e9:e2:ab:bc:f1:b2:51:28:06:ab:69:c1:92:
         ad:21:55:d3:23:e7:f1:16:ac:9f:4f:6d:12:7a:c6:d2:97:c4:
         ac:18:50:1d:f7:37:11:6c:e3:8f:fb:3f:56:f1:0e:3b:4a:23:
         16:df:f8:f3:b2:e8:d6:d7:c2:d4:11:46:12:f9:a8:e7:f4:b7:
         2a:52:b8:2a:44:7f:e4:5f:82:d3:dd:7e:fb:a6:89:03:6a:89:
         34:4b:33:71:3b:a4:56:8d:9b:10:03:38:7c:5c:e2:e6:2f:db:
         0c:3a:b6:ff:a1:b4:23:4d:a9:23:d8:77:eb:49:61:5d:f4:99:
         c1:f9:98:18:6c:6f:14:dc:d4:71:fa:c0:d3:cc:8a:95:47:d8:
         ce:3f:68:7c:58:e8:29:66:23:1c:b3:a9:53:b8:61:72:3f:34:
         68:11:ac:3a:1e:f2:01:66:6c:04:47:96:51:57:eb:df:b0:dc:
         d4:1e:67:d1:be:7d:be:01:0e:4d:cb:4a:31:3b:50:60:61:e6:
         62:49:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----