Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File:                     4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier:          1W9IAy1xQEYeSApi6PF2UzMDIjkPxNSqW/WLF1ngxOg=
Subject key identifier:   83:64:0A:97:3A:2D:ED:0C:0C:2F:FC:DD:CC:31:80:4E:E2:0C:CF:92
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer:       /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial:       01962F748AE995371979FAB4DF0CE21E01C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number:          137E
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: rQBElsmVdrUgmpLMDU57BI3cuM+3mxnFFQvLjrJu4kQ=)
                          2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8a:e9:95:37:19:79:fa:b4:df:0c:e2:1e:01:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=83640a973a2ded0c0c2ffcddcc31804ee20ccf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b5:a1:40:f2:cc:a4:7a:36:7f:ef:c5:de:60:
                    4b:7d:7c:b7:48:f9:8c:99:4c:10:a0:c6:d8:b7:d4:
                    10:fa:f1:d7:9f:6b:c8:18:84:87:c1:71:ee:83:18:
                    10:16:e6:a0:ad:54:84:e3:d0:5e:70:f8:6e:d1:cc:
                    ca:4a:6e:1d:db:e7:11:75:ed:49:2c:66:47:5a:c8:
                    a0:ae:ca:a0:0f:65:ab:45:4b:8f:89:58:f6:a6:46:
                    60:3e:39:86:7f:f2:80:57:d2:d6:0a:8d:de:c6:c8:
                    9d:85:3f:c3:e6:e5:af:63:5b:26:19:8a:aa:e6:78:
                    e6:2c:9a:57:2a:9b:d2:a8:29:a5:fd:01:7e:ee:03:
                    f7:56:73:76:7c:d9:85:cc:20:29:0a:11:b6:66:5c:
                    8e:81:59:0a:5b:c9:a4:97:ea:df:5e:6b:5a:5d:68:
                    4f:0e:77:9f:e4:1c:29:aa:c0:ac:1a:fe:ac:d2:95:
                    e6:17:df:03:f9:1c:e9:de:dd:41:ea:0c:77:d9:e4:
                    94:39:4c:6b:51:2f:92:80:b6:5c:8a:c1:48:8e:04:
                    90:89:69:36:fd:90:8d:a9:95:a7:07:68:dc:5b:64:
                    59:c9:a9:be:f8:c0:c6:4c:0b:a9:c1:e7:f2:71:e3:
                    46:87:64:b8:5c:86:41:38:81:89:7f:15:c9:c4:56:
                    89:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:64:0A:97:3A:2D:ED:0C:0C:2F:FC:DD:CC:31:80:4E:E2:0C:CF:92
            X509v3 Authority Key Identifier:
                keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ec:df:e8:34:9f:95:14:c7:b5:13:55:7e:bd:73:b6:71:2e:
         fd:41:a5:01:6b:2c:b9:2f:cc:58:33:ef:b1:f7:36:e0:b3:60:
         2b:c8:84:c7:b1:e2:4b:12:da:1a:05:5d:b1:f2:4c:78:64:d0:
         b9:35:b9:16:29:30:86:40:a1:78:29:92:ac:e7:5e:66:7b:2c:
         ea:5a:b8:45:7f:06:a8:d0:cd:8f:8c:79:fc:7d:2b:78:f5:70:
         65:1b:90:aa:5d:a4:15:3e:24:a3:7d:08:b4:43:e8:89:1c:58:
         1d:9b:4e:93:7f:9e:63:b1:77:8a:9e:77:a0:51:60:86:05:ca:
         75:d0:01:82:50:f9:bb:4f:bb:8c:a9:4e:5e:e5:07:6e:15:eb:
         c5:75:42:d1:ee:a7:d4:a8:b1:dc:5c:da:d2:a8:a6:8e:43:5b:
         6c:c7:f3:72:6b:01:a2:88:60:dc:d2:70:23:c9:b7:19:dd:9f:
         aa:0f:ee:d7:67:d2:4c:d6:a6:cd:af:74:a0:af:48:f0:0e:5c:
         53:37:95:a0:af:7e:db:ee:00:bd:0a:97:fd:a1:da:85:d1:c1:
         4e:d6:77:24:d4:19:a0:61:fb:e5:98:57:94:aa:26:d4:24:c0:
         36:af:75:a6:97:27:59:b2:67:1d:0a:84:b3:0e:c1:7e:f7:97:
         7a:87:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----