Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File:                     4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier:          1zWo0bPSPVQw7EpWDejbzWwoC99Js/rWp1nUwiP3p94=
Subject key identifier:   13:A6:1B:69:B4:C4:8A:A4:80:63:94:2A:19:41:56:12:16:7E:F4:2A
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer:       /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial:       01962ECFCA2C091AF61728D4C09BE3035403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: uf2lPu15nE8HE3msvV3NobqEwi02q+CabZzIbqRjVPU=)
                          2: MCauzdzhAV-eC2FQCIe1KmEfC3E.roa (hash: qyelRqdJ6kSMtNhACvHl/U5TJ8kn8s3czDwjuibAJCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ca:2c:09:1a:f6:17:28:d4:c0:9b:e3:03:54:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=13a61b69b4c48aa48063942a19415612167ef42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d9:dc:52:44:18:47:31:c9:6a:02:83:45:df:
                    5a:e8:bb:3a:55:6b:55:07:55:4c:01:c8:d8:cb:55:
                    d9:ac:26:df:1e:70:dc:62:96:c6:cc:51:66:1c:d6:
                    e6:ce:8b:10:23:45:50:84:21:67:4c:07:f3:12:a8:
                    fd:b7:e4:88:75:a9:3e:f1:20:6f:06:78:7e:88:44:
                    2c:e3:e4:43:4a:32:b5:34:90:79:05:2c:d7:7c:b5:
                    de:8e:06:50:ed:e5:1b:ba:8e:2e:18:59:b9:d7:21:
                    c1:37:9d:6e:9a:90:07:69:08:b5:3f:d3:e2:41:9b:
                    a2:4c:ea:a3:11:9a:4c:44:6d:69:7e:e0:61:c9:68:
                    d0:66:75:45:3d:14:97:9d:a9:14:68:38:7b:6f:4f:
                    b2:e6:72:0e:9e:c8:1c:13:53:fc:49:a8:0c:0d:40:
                    23:9b:59:0d:3e:15:b5:ed:a3:a1:a8:e4:bc:22:16:
                    c3:8f:3e:80:1f:fa:0f:fb:1e:5a:9a:30:85:5c:bf:
                    2a:9c:50:44:f3:7d:05:9d:e2:8c:a9:34:04:af:0f:
                    44:e8:e4:2b:08:b6:29:a9:41:6e:7a:7b:bd:73:95:
                    7e:b9:49:46:de:db:45:b0:75:54:bc:72:b4:b0:e0:
                    a7:91:1a:cd:9e:d9:cb:16:21:cf:9f:ed:18:ae:e8:
                    d1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A6:1B:69:B4:C4:8A:A4:80:63:94:2A:19:41:56:12:16:7E:F4:2A
            X509v3 Authority Key Identifier:
                keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:52:9d:9f:9e:3e:9d:e5:31:fd:ce:52:2a:77:2b:fd:ba:65:
         9c:65:f4:3d:36:17:4a:d9:9a:f8:72:a4:af:ad:b4:a8:2d:e2:
         29:c1:e0:ef:e3:b0:41:65:56:c8:77:ef:3e:08:22:3d:47:f5:
         fd:d1:50:99:0f:4f:7f:d4:be:69:68:7d:08:43:fa:e9:d5:b6:
         97:4c:5e:72:db:44:69:eb:f9:49:89:e9:24:b6:32:6d:33:14:
         db:d7:df:13:e7:83:99:ed:82:50:99:c3:14:d9:51:5a:93:71:
         2d:32:f3:7a:c7:c6:cb:98:50:8a:7e:56:fc:0e:a7:45:93:97:
         a7:5f:6c:26:c1:26:d2:62:a0:ed:a5:80:b1:dc:22:d2:83:33:
         91:ac:bb:75:de:ab:ff:be:c6:d6:21:a4:96:44:ea:41:55:cd:
         e4:5d:81:cf:61:26:71:23:31:1d:10:f5:5b:09:50:d3:82:63:
         bd:dd:9b:c0:3c:f9:2f:ae:d7:a6:60:df:5b:93:46:c6:c8:45:
         cc:0d:72:77:cb:f8:9c:ad:11:72:e4:f1:08:1b:84:a0:55:df:
         16:74:44:cd:e8:0b:41:fa:67:93:ae:f9:46:df:ea:f8:00:b5:
         b4:1a:f0:c5:7f:63:af:a1:58:86:bc:7e:fb:65:2b:1e:80:bc:
         fc:89:54:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----