Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File:                     4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier:          Q2d8lx3mK+uEXpQQoe/ml0cn5f43cPNU/RKddt8yLu4=
Subject key identifier:   2B:6E:57:7D:48:0E:DA:CD:41:A7:82:14:91:2A:11:53:70:6A:8A:DB
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer:       /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial:       01962F3D6C9A9C9352BB51BEA00CF42BBD27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number:          0845
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: X3eAU6n6fIJJ46iJc42pPf0rfn/bC7UdmbjFFpta7nU=)
                          2: mhXII1TmoI3urvchZmrd238HnqI.roa (hash: ymkQlbzHXOVaEGzGKdRpU2whYkKkdIgkhGPuabVJPyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6c:9a:9c:93:52:bb:51:be:a0:0c:f4:2b:bd:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=2b6e577d480edacd41a78214912a1153706a8adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:65:0a:3c:89:ed:d2:21:da:78:1c:8c:30:
                    48:06:0b:96:b4:88:8f:48:6c:a4:1d:f4:6c:7c:03:
                    43:bd:31:16:f8:99:4d:e1:3b:f2:37:32:36:ac:54:
                    08:59:e3:9f:62:2d:6f:e8:c9:4e:39:f4:92:78:5b:
                    5f:70:d3:55:4b:8f:2b:7a:b3:1d:3a:b1:e0:3d:1b:
                    40:3e:f3:26:5e:9a:25:3f:c6:fe:4d:ce:e3:e6:12:
                    58:e2:f2:ab:62:74:d8:98:70:96:c7:f4:f9:e1:55:
                    cd:af:63:0f:9e:ed:3f:ac:08:02:aa:98:68:f2:ad:
                    d8:6d:ab:bf:dd:9d:fa:9b:c9:c8:c5:35:e6:cb:38:
                    7c:f2:f6:ad:f3:73:35:b0:10:a6:35:e7:26:bc:ca:
                    13:64:33:e5:4d:e4:9e:86:f6:2c:dd:f9:c6:cf:61:
                    88:29:27:29:87:3c:ae:2a:28:4c:58:18:d5:8c:42:
                    bf:fc:ee:8f:e8:db:e0:01:8e:91:7e:75:87:41:1a:
                    24:73:1b:21:e0:6a:48:9c:51:29:90:0a:2f:56:a5:
                    8f:42:31:0f:37:ac:83:27:e1:5e:0f:f4:c9:14:ec:
                    88:b6:7a:bd:ed:cf:1c:f5:e1:2b:ba:bb:01:83:cc:
                    3f:f7:f2:1a:23:65:0f:b4:a2:99:ca:e3:4f:41:2c:
                    e2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6E:57:7D:48:0E:DA:CD:41:A7:82:14:91:2A:11:53:70:6A:8A:DB
            X509v3 Authority Key Identifier:
                keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a7:3a:2c:b6:d2:88:bd:20:ee:21:f7:8a:91:d7:b6:9d:56:
         89:cc:81:a3:69:7d:04:32:0c:a8:c5:41:60:7a:88:cc:30:6a:
         43:c5:92:01:88:e1:04:42:e6:3e:19:c9:d5:b0:20:be:ed:cd:
         a0:d2:d0:fc:94:7e:dc:51:98:f6:7a:7b:0a:88:3f:55:05:8f:
         46:b5:c1:a9:13:a0:10:5d:2e:6c:01:ba:de:fb:40:08:c9:4d:
         fc:2e:d7:25:15:c3:58:5c:03:f5:f1:ae:cb:d1:91:ed:d6:b3:
         cc:f7:13:a4:37:0b:7d:e1:34:d4:f4:69:a2:81:f5:e2:4b:7c:
         34:33:ed:b5:4c:8a:29:85:96:9a:6d:51:fa:d0:5d:c9:07:40:
         a2:50:0a:b8:eb:e5:1a:94:31:51:88:65:5f:1f:8b:9d:7f:95:
         c6:54:82:19:1d:12:f4:2d:3a:fd:97:de:61:29:92:3d:40:2f:
         ad:27:7e:2f:a9:66:e4:bf:29:59:61:67:78:28:35:50:64:76:
         5c:ec:40:df:0f:c4:98:a5:17:5b:50:fd:2e:79:19:82:6e:8a:
         94:98:c1:07:09:27:e1:0e:9e:45:1c:e5:ec:6e:c2:b1:1d:6f:
         d4:4d:f2:e4:e1:c2:09:09:c2:05:c1:50:b8:7e:af:3a:b0:d5:
         c3:99:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----