Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File:                     SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier:          c+iSnbf7ZMm6ScDldrZBpElsIV8RGHwkYpgNvPx7u+U=
Subject key identifier:   E0:D6:C1:BC:AA:6C:8E:27:B0:3A:F1:F8:B8:86:66:A6:8B:EF:1C:35
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer:       /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial:       01962DF4034818242989C0E22D69A4C4E81D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=)
                          2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: cqsFjObV6KmHicFsl1YHm8olWfBp54rllZ4fEVv6Nu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:03:48:18:24:29:89:c0:e2:2d:69:a4:c4:e8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=e0d6c1bcaa6c8e27b03af1f8b88666a68bef1c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:90:c5:e3:94:05:f3:72:24:72:72:3f:6d:95:
                    8b:72:78:ed:e1:af:fc:c4:46:ba:5c:12:22:d6:65:
                    cf:64:8a:ba:9d:f4:f9:a6:84:1b:c1:2e:1c:29:a2:
                    d7:ff:2e:82:0d:ec:2e:dd:48:e0:7f:0a:71:96:b4:
                    51:e8:c6:7d:05:0f:01:f4:95:ff:15:ce:b3:2a:4d:
                    e5:3f:83:b6:cb:10:26:e0:01:44:8a:fa:0a:1d:29:
                    f8:4f:f4:8e:4c:3b:4f:bd:f3:8a:21:b0:85:83:ff:
                    85:04:53:8f:af:eb:66:c3:43:44:ea:c0:33:5e:fd:
                    d7:61:f4:77:9c:90:4b:54:7a:f2:0c:7c:e6:28:df:
                    c8:8e:cf:8b:1b:34:40:48:43:04:8f:c4:55:ac:9c:
                    1c:84:dc:46:f5:92:e7:84:05:33:ad:fa:a3:e0:bf:
                    fc:67:35:89:05:13:22:86:91:31:8b:c3:3b:80:11:
                    f3:a0:08:af:49:7d:3e:b2:33:40:a4:8a:95:a8:fd:
                    66:35:13:b9:54:b1:3c:8c:f6:d8:e5:2e:92:e3:9c:
                    3d:79:6f:e0:5f:5c:2e:3d:35:6c:e5:93:7f:95:ae:
                    c5:b4:98:c5:2b:b5:c9:92:1d:cf:2f:e9:73:d1:03:
                    fb:4a:a2:6d:43:55:10:80:05:12:73:30:58:86:1c:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D6:C1:BC:AA:6C:8E:27:B0:3A:F1:F8:B8:86:66:A6:8B:EF:1C:35
            X509v3 Authority Key Identifier:
                keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ef:76:3b:e3:49:b4:7e:c3:a5:35:0e:82:f9:a2:b5:b0:45:
         63:fa:5d:95:a4:c7:e5:62:69:17:94:d3:20:e5:1f:c1:86:15:
         c9:4b:d5:06:54:55:ad:44:c0:58:8c:0d:26:08:06:fd:7f:7e:
         93:14:fb:53:0a:51:45:b8:15:b9:a5:3c:b3:1d:83:74:e3:ab:
         1c:65:b0:93:99:7d:a3:ef:38:db:ad:be:f8:5a:2a:04:8a:f0:
         54:fc:9f:d2:5d:43:1e:4e:f4:6c:91:09:6e:69:c2:d2:e5:8a:
         9d:f7:bf:99:e7:06:f4:ef:04:16:ca:da:23:a5:0f:e8:57:38:
         a6:a0:45:a7:e1:a1:3f:b7:95:6d:1b:02:3c:47:ca:c9:b2:be:
         04:af:b8:49:7b:83:51:d8:1b:98:a2:77:6c:be:fb:e5:18:08:
         d8:0a:1f:7c:ef:3d:96:57:cc:a5:0f:cf:91:cf:96:7b:49:dd:
         9e:a2:ae:32:ad:e1:d8:8d:95:8f:e7:2c:1f:35:bc:86:0f:81:
         b4:1b:c0:cf:15:7c:c4:07:1e:f7:b8:8e:3c:7e:4e:86:ee:53:
         69:d2:ab:c6:ca:eb:9e:65:72:44:08:66:cd:4a:28:6e:e3:75:
         28:e1:0d:d7:c2:ac:28:12:e0:75:b8:be:3b:cc:86:5b:d4:a2:
         62:71:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----