Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File:                     4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier:          XbEr8+fdf7SngkAVQiWaK7FOQ0RxqZ8SneWdIJBCO38=
Subject key identifier:   FE:54:F7:FD:88:E9:5D:F2:8A:88:4C:84:CE:C0:C3:E5:B3:7D:92:04
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer:       /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial:       01962FAB3F7EA06BDABEC26B2B3E43B92EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number:          0A42
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: gYykwuGW7u4ZFrYpfPg1nu2rmJdm0QTdh7qVfq6JWVk=)
                          2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3f:7e:a0:6b:da:be:c2:6b:2b:3e:43:b9:2e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=fe54f7fd88e95df28a884c84cec0c3e5b37d9204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:22:98:d2:d0:f4:69:23:bd:f2:23:13:83:
                    60:d5:bf:ed:90:e0:34:55:b0:8f:a4:b1:d6:17:9d:
                    ed:a5:7c:d1:07:fb:8a:3f:90:1b:42:03:7e:2c:63:
                    93:77:b1:7b:21:37:5d:d6:ed:a1:e4:53:17:48:e0:
                    0a:c4:18:67:55:15:bd:19:75:37:9e:4e:41:27:24:
                    c5:09:e3:f3:0f:fc:82:75:1b:9a:65:e4:75:f6:34:
                    0d:a7:9f:64:93:4d:8d:20:b7:22:6d:c7:0f:90:8e:
                    aa:bf:fa:8b:6f:12:35:7f:d0:5c:1b:0f:c3:ba:95:
                    f5:db:a2:dd:4b:3e:07:80:af:19:39:f8:da:ff:4b:
                    b4:51:c3:4d:8f:dd:a1:ce:ac:31:3b:f1:a4:46:16:
                    0c:67:46:0f:bb:ee:2a:1c:83:38:ed:bb:41:bd:31:
                    21:5d:08:64:6d:71:34:ee:1e:7a:47:4a:fa:2a:f5:
                    14:36:f6:bb:88:1d:d5:1a:31:af:d1:bd:b9:3b:9e:
                    1f:bf:50:cc:43:18:2b:15:90:44:e7:7e:b9:82:05:
                    77:a9:0b:2a:a3:9d:0d:0c:bd:ed:2b:f1:0d:bd:e0:
                    97:26:35:d3:b1:c5:a7:ab:85:e0:c3:29:80:25:9c:
                    7c:7d:ad:39:98:f2:02:d6:b2:7d:cc:a9:ee:09:a7:
                    23:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:54:F7:FD:88:E9:5D:F2:8A:88:4C:84:CE:C0:C3:E5:B3:7D:92:04
            X509v3 Authority Key Identifier:
                keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:36:1e:3e:bc:68:5a:81:5c:3e:99:5f:f7:2e:84:b9:ee:71:
         75:a4:4c:04:2c:1d:ef:c3:7c:63:1b:8e:3e:4f:fc:7f:1b:66:
         f0:5a:42:94:ef:5e:56:e0:c4:a6:2a:13:9c:26:eb:f9:33:8e:
         8a:fd:ec:a8:20:ff:2a:92:32:d2:2c:33:4f:5a:18:85:ae:75:
         a2:66:43:a3:b9:b6:77:a9:28:35:05:de:c5:59:33:0e:0f:0e:
         7f:6a:4e:4a:e6:90:96:72:20:81:46:d0:31:83:88:94:f8:b1:
         16:25:eb:c4:a1:a0:3f:c4:05:0f:e5:e1:b3:93:f8:75:b0:72:
         b5:15:dc:e3:c4:22:f7:8e:3a:d0:0b:33:81:5a:51:84:12:42:
         d3:f5:6d:df:40:28:36:d8:0c:ee:8e:33:aa:6a:63:65:67:cd:
         02:43:c4:e7:c1:c9:69:12:f5:15:73:a4:4b:77:f9:b2:e5:01:
         b4:b0:a5:3a:73:7b:98:99:ff:61:b0:4d:91:68:3a:80:8b:85:
         e0:2f:69:75:ab:01:3f:32:6f:b3:f8:c4:29:56:24:2f:a8:23:
         be:ad:70:00:ec:3e:a2:f0:18:45:1e:cb:8f:e3:91:ab:30:0c:
         35:5a:d2:ae:fd:c4:dc:78:f6:ac:f4:ee:46:ec:b0:1c:fe:7c:
         bd:7a:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----