Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File:                     4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier:          ALG4pYDnY3G7h0VqCvXwc4XktRBufew0RLdbvau39a8=
Subject key identifier:   3C:74:50:2F:1C:DB:16:AA:1A:FA:72:38:88:CB:82:53:A4:2D:57:F9
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer:       /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial:       01962F3D5D41C4CA85EB189D9CDD9953BF9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number:          03B6
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: wqqxqNGg55HLX5gJRGIl8wvDduFINab665xtk1FHLqs=)
                          2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5d:41:c4:ca:85:eb:18:9d:9c:dd:99:53:bf:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=3c74502f1cdb16aa1afa723888cb8253a42d57f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:16:d2:26:41:73:8b:86:d0:5b:85:3e:e6:
                    96:b3:aa:ae:2e:9e:1b:f7:19:88:48:3a:8b:22:36:
                    fa:01:ae:bc:b5:8c:15:50:38:52:05:9a:75:5a:a9:
                    95:fb:6b:48:89:c8:66:3c:50:d5:69:7f:ae:f9:bb:
                    28:be:ea:51:65:69:25:4e:e9:8c:bb:1e:51:b2:7c:
                    bb:26:b0:3f:3e:b5:67:f2:bc:a4:08:a6:08:a9:b2:
                    87:04:57:3a:a3:94:44:fd:d0:5d:15:b1:9d:fd:10:
                    b3:aa:f0:de:82:24:68:22:d4:c7:f9:70:24:68:f8:
                    b6:e3:23:6e:62:df:96:f3:8b:3e:91:c7:1d:56:d4:
                    81:86:c7:02:f6:d8:05:5e:9e:dd:d6:e9:76:e2:81:
                    92:12:a7:6b:e7:66:ab:49:b0:8e:7e:d7:b2:fa:79:
                    84:d4:3a:6e:b4:66:0d:ec:4c:4c:7e:9e:c6:41:84:
                    2e:94:43:41:84:3c:56:fe:6f:a2:00:60:92:fa:0b:
                    06:79:73:5a:df:15:ea:e0:cc:ca:a6:85:0c:1b:e0:
                    5a:91:bc:86:cb:d8:84:c1:26:aa:95:04:2a:72:5b:
                    93:85:24:47:48:50:57:f4:5d:7a:2c:50:33:f3:a6:
                    08:c8:e7:3f:f7:fc:b5:7d:bc:78:0a:5e:6d:61:11:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:74:50:2F:1C:DB:16:AA:1A:FA:72:38:88:CB:82:53:A4:2D:57:F9
            X509v3 Authority Key Identifier:
                keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:28:d3:82:31:c2:73:27:39:0a:80:e4:60:88:a2:53:58:ed:
         e2:79:d3:cb:90:77:cc:5b:46:1b:58:58:7e:3c:66:cf:93:02:
         87:67:dc:a7:08:e5:0f:da:83:11:b2:1b:69:4d:b1:3b:00:c3:
         76:19:d1:8d:11:b5:e0:af:85:f7:0a:be:88:08:78:16:03:c8:
         74:7e:6d:d0:71:53:15:da:ce:95:a7:1b:69:98:fc:37:7c:31:
         f2:19:ca:b8:64:a1:b7:b0:9b:72:40:88:e4:11:1e:2c:64:7b:
         98:78:1e:4a:dd:c0:9c:96:5c:ed:88:a0:7a:59:ae:23:06:5d:
         0e:1c:23:f4:f4:43:92:d4:81:33:6d:af:77:f3:33:a1:c9:ac:
         40:71:58:42:78:05:e4:7c:dc:49:61:74:f3:7e:7b:6e:7c:48:
         b1:d2:58:6b:b9:d9:42:4e:df:e9:9c:f7:d9:16:23:38:d2:eb:
         13:7b:c9:3a:6e:77:bf:e4:34:d7:dd:35:09:77:e1:a5:a4:49:
         ab:3c:5c:51:03:e5:8a:85:26:fb:bb:f5:06:a0:2d:51:9c:da:
         4f:ce:4c:51:12:2f:b7:88:da:fd:47:1c:67:2b:5a:5d:47:77:
         02:a6:e1:a4:14:36:f5:48:87:dd:ac:bb:85:4a:e7:1b:69:4f:
         da:67:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----