Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File:                     4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier:          /Cyd463x7DuWq8PeXKdM7KgiC3z55InHPJAD03z+6EI=
Subject key identifier:   10:07:80:1A:A1:04:29:DE:4D:9C:62:F7:AD:BC:97:B8:E7:B1:35:C0
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer:       /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial:       01962E98971BB67F096F89C27213CDDEF062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number:          1045
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: 9G09USXIcUDhGvbZkMJgbM1zfg+WTzDXm550BN8sMMM=)
                          2: jnxiRSp6LL1UuZSH55PRoBU9Uug.roa (hash: EzydjgFzmvXFQDadZtYOhUDG1+kFGRWU2sNIMDhFrQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:97:1b:b6:7f:09:6f:89:c2:72:13:cd:de:f0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=1007801aa10429de4d9c62f7adbc97b8e7b135c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:65:f5:73:41:36:92:92:70:ef:c4:88:cc:
                    9c:1a:72:af:82:07:3e:e4:e9:18:cb:dc:81:77:81:
                    6e:63:bc:2b:c5:12:35:d4:f2:37:62:29:6d:01:c3:
                    fa:96:0e:f8:f2:3d:35:38:48:d7:70:bd:6b:1e:4b:
                    6c:2e:9c:e0:42:ec:d3:a4:d3:29:ef:c6:9a:27:76:
                    72:ad:d6:c8:18:fd:be:b9:50:6b:67:83:61:f5:15:
                    71:e7:a5:3e:20:2a:1b:3c:79:a7:a0:65:d5:f9:4a:
                    8c:c2:48:81:54:db:62:97:87:76:0e:60:7f:bd:36:
                    64:62:07:dc:06:d0:ab:52:fa:ba:c7:b8:67:f0:36:
                    cb:cf:37:d8:bd:56:0c:35:67:fc:ee:7c:2d:8f:da:
                    b2:c1:cf:7a:db:8f:e6:7a:68:ac:a0:56:7f:09:c9:
                    e1:07:5e:da:6a:3e:7a:85:ec:84:b1:da:1b:07:90:
                    33:c5:bb:6f:4f:57:3a:7a:db:59:aa:c1:c3:1a:70:
                    8a:7a:e7:5b:8b:a9:b9:89:64:95:7f:14:f1:27:fd:
                    b5:61:29:eb:20:84:db:a9:10:7d:69:0c:f0:e7:2e:
                    db:c1:e1:00:52:a3:a2:38:d3:5a:8d:b7:6f:e6:f8:
                    52:38:92:8a:1f:5b:d2:82:80:cb:f4:8c:25:c6:12:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:07:80:1A:A1:04:29:DE:4D:9C:62:F7:AD:BC:97:B8:E7:B1:35:C0
            X509v3 Authority Key Identifier:
                keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:21:42:16:a8:ea:0b:dd:00:3e:6e:04:65:91:91:b8:9e:14:
         3b:1f:76:5e:40:b3:29:de:32:24:0c:d4:6a:5a:71:40:76:b8:
         83:69:d9:7b:9a:1d:d9:cd:ee:ce:51:4a:a8:af:70:ec:6a:42:
         cc:95:0c:69:0d:f4:cc:5e:ad:f0:aa:1f:90:be:8d:a4:3f:ba:
         cc:87:a4:c5:ad:3f:9e:25:8e:8b:e1:3c:e7:aa:86:a8:b3:36:
         a5:2a:db:12:ed:d7:ab:0b:22:7c:12:c0:cb:cf:7c:af:f0:bc:
         b3:90:0d:ea:f9:c9:ad:53:3b:73:ef:e3:f4:ce:87:74:66:b7:
         c3:d8:10:b1:ce:09:7e:dd:39:2f:c9:d9:fb:26:fa:0d:c3:bd:
         ea:6a:85:45:65:35:26:42:2d:83:c3:95:d4:b4:11:d3:fe:58:
         38:4b:5c:78:11:15:72:87:59:dd:3a:44:32:c8:db:12:f0:8d:
         35:f4:95:3b:96:35:5a:98:3a:70:79:98:70:87:32:36:61:84:
         b4:75:09:97:6f:6b:76:d9:6e:24:bf:79:43:28:60:e0:7d:49:
         38:c3:d7:b7:dd:cd:4d:69:d5:19:0c:03:b0:2d:20:3c:cb:1d:
         54:17:1f:a1:48:14:2d:11:eb:57:46:dd:e7:11:ca:f5:ab:fd:
         27:87:a8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----