Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File:                     43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier:          XXTQaqcqb6VpI/8oy7MPiPzXdRa49uZFv7A71JS6WWk=
Subject key identifier:   ED:35:E0:74:8A:66:85:02:E8:59:90:7E:C3:CE:A3:F3:57:CD:B3:14
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer:       /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial:       01962FAB87FE6D1A8CE8A57587BD5B8A7DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: 4gH5K9poNkBJF7S11R4N9S7KUAJN/7DvkbT3pjftaNE=)
                          2: vvNRTPRqU8Pnch_p0B0gqgkil_Q.roa (hash: nLSnGecWyvHzo3G0jRopUHVVK/4X1Sw9XUMyVphgWSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:87:fe:6d:1a:8c:e8:a5:75:87:bd:5b:8a:7d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=ed35e0748a668502e859907ec3cea3f357cdb314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:7d:35:4b:d3:a3:45:cc:42:58:dc:68:52:
                    44:ff:63:77:63:6a:b8:2f:16:3c:1c:c6:15:39:cb:
                    a1:b0:25:aa:48:4b:bc:ac:dc:1f:b1:a7:3d:ac:82:
                    3f:55:02:38:da:ea:d5:f5:33:ae:1c:56:67:54:3b:
                    b0:c2:9b:a8:17:4d:4a:22:5c:93:28:a4:c7:ae:61:
                    bf:68:76:99:ba:d8:2b:aa:49:ed:99:f6:ff:4b:12:
                    8f:83:e6:60:58:07:1d:f3:9a:d8:c5:5b:18:10:fc:
                    da:7d:90:1c:5e:2f:39:cd:13:ed:86:a9:9b:53:ef:
                    37:cc:eb:6f:2a:a5:f5:de:be:75:68:05:7f:65:82:
                    60:79:e8:b5:78:4f:c9:11:89:27:ae:6b:52:84:ba:
                    6e:65:e0:62:09:fb:f3:35:42:a5:1d:43:24:4d:6b:
                    e1:ca:1b:dc:f9:65:fd:ff:17:20:bc:07:aa:7f:67:
                    a0:20:d4:02:a0:2c:59:69:76:4d:31:89:60:61:11:
                    e3:e5:f0:1f:8e:46:9c:ed:77:63:dd:12:ed:78:4d:
                    69:01:6d:e9:35:84:7e:21:55:77:5d:cf:4f:2f:99:
                    0b:50:92:1a:39:af:d4:72:ce:e4:bf:15:b5:b0:05:
                    94:75:9c:51:9d:f7:09:5f:56:0a:ed:74:24:19:34:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:35:E0:74:8A:66:85:02:E8:59:90:7E:C3:CE:A3:F3:57:CD:B3:14
            X509v3 Authority Key Identifier:
                keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:9a:da:96:ae:09:eb:3f:76:b8:b0:7d:9d:40:af:48:1f:
         90:9a:fc:a1:24:27:20:83:8b:e2:d9:3d:1b:89:0f:92:03:08:
         53:96:a1:43:20:93:2a:a3:3e:17:dd:f6:0f:a6:a6:87:ef:69:
         9a:a5:96:09:74:d5:4e:6b:c1:c0:81:02:f9:14:d0:d1:e8:a7:
         be:ff:a9:7f:ed:2c:b0:43:d2:40:84:37:0f:18:eb:1a:6d:f0:
         e9:02:e2:5c:0f:20:14:80:d2:6a:37:7a:28:84:7e:ed:6f:79:
         1d:d0:fd:71:a7:79:af:ff:da:35:5f:18:66:f8:df:ae:47:ce:
         8b:8d:c8:9d:e5:03:34:23:e9:a9:15:3e:9d:d7:3d:9e:cb:24:
         e4:ac:db:77:a6:02:0e:94:19:5f:13:c6:80:10:59:9f:0b:0c:
         b6:a3:10:54:be:72:ec:0e:31:63:06:2d:e4:48:4e:7d:a2:e5:
         81:3d:03:a4:5d:b4:ff:77:ad:e7:9b:c7:cf:06:f5:a2:9f:a2:
         f7:67:a8:b4:9f:ac:a0:f2:f3:81:cc:30:21:db:bb:4d:30:04:
         5e:32:df:34:e1:d2:fe:13:73:39:47:d9:6a:a7:9a:06:1a:96:
         a7:9e:15:d0:2c:56:3e:61:62:83:29:3b:d3:ea:a2:7c:c1:82:
         46:5b:33:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----