Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File:                     4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier:          fFcNtksPD10X0b9PNitJF72R4zRODC1GNdUZZGTShJo=
Subject key identifier:   13:F2:C5:40:7E:B5:EB:83:98:09:D3:13:E3:F4:BC:8E:2C:C8:93:D4
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer:       /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial:       01962FAB768FC84232109F28383DA702A84F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number:          10E3
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: CcPhdiCdghplMVO3JZ6pV+5MKzhjI/+cmwZSTycdxmU=)
                          2: t1ORbdksbr2p1B59lFrh9IkJsfE.roa (hash: JVz20kQAYF9u2DMBNNZhgOePGcGoxFfVOgHdTdf+BvA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:76:8f:c8:42:32:10:9f:28:38:3d:a7:02:a8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=13f2c5407eb5eb839809d313e3f4bc8e2cc893d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:54:6c:4b:24:c5:e6:81:21:ff:42:d9:ef:
                    5b:d4:97:f5:1e:3d:ae:9e:87:c2:de:86:9c:a0:5d:
                    5e:69:22:a0:03:93:2e:ed:8d:30:92:57:70:a6:4f:
                    bc:5e:b1:df:02:ce:82:61:2e:b9:6b:a1:05:d3:83:
                    45:dd:57:bd:18:59:c6:8e:8a:48:22:fa:26:f0:f6:
                    47:4a:3a:c0:87:0e:cb:dc:4c:ea:fa:4e:4a:4f:4d:
                    ed:3b:0a:cc:2a:88:26:59:9e:0d:6c:b7:f3:0d:d2:
                    ff:ac:2e:2d:71:c2:b3:6b:47:55:8c:c6:bf:8d:61:
                    19:3d:a8:9b:25:23:ba:10:71:21:78:9f:b6:2a:b4:
                    09:a6:13:d9:f5:a9:03:36:ed:31:dd:2c:7a:b3:aa:
                    c9:82:6d:3d:38:c7:c2:95:be:40:ea:8b:d3:79:b9:
                    1d:d1:84:f8:2f:77:d3:c6:e1:37:1c:3a:9e:97:04:
                    f6:c1:f7:77:94:a1:9e:06:a1:c8:7e:f3:13:82:7b:
                    9b:0f:6d:ea:42:bd:eb:7a:09:30:da:a2:47:ce:22:
                    41:f6:38:00:82:c8:a2:07:21:a2:4a:14:88:2b:bd:
                    ab:b8:2e:47:1b:f3:97:8d:76:a1:ba:c7:fe:ed:a5:
                    1a:18:ec:ce:ff:99:95:d0:d7:7f:62:b6:1f:6b:e9:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F2:C5:40:7E:B5:EB:83:98:09:D3:13:E3:F4:BC:8E:2C:C8:93:D4
            X509v3 Authority Key Identifier:
                keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6b:1a:e2:05:09:2f:58:d6:80:94:9a:e8:3a:d5:d4:f9:f9:
         6c:0f:9d:ae:ed:2e:1b:7d:bb:d0:22:b3:a6:31:14:b2:b3:25:
         72:86:b4:79:14:d9:6c:8e:e6:6d:1d:33:1c:ef:b4:6f:1d:c6:
         3f:6f:3d:12:59:ec:bd:c0:03:cf:85:97:b0:4e:45:aa:40:5d:
         c1:d6:e6:1b:98:38:0a:34:ba:6f:4c:4e:24:48:b7:8e:38:d6:
         31:2f:78:60:23:bd:a0:18:60:2d:55:bd:cf:89:ab:88:28:73:
         e2:eb:c4:24:cb:60:e9:f5:78:57:d1:b1:1c:f3:2c:8b:18:65:
         22:0f:07:49:d2:60:2e:dc:e9:c4:01:ca:c3:2c:f1:bc:07:af:
         80:f5:55:5d:05:40:a4:c1:10:82:fa:36:8f:89:1a:56:22:fa:
         f8:4d:3e:d0:cf:59:04:6a:bf:2c:42:3b:fb:95:06:fb:cb:5b:
         1e:eb:a6:3e:90:77:93:e5:02:80:ed:a6:10:7e:0e:d5:31:38:
         bc:d7:db:dc:e6:fb:69:1e:c0:7a:87:98:0e:1f:2a:ee:a8:27:
         b7:4d:b6:23:f7:47:b1:8e:d0:d5:40:d5:22:ac:19:61:1b:0c:
         36:b6:50:0b:71:32:7e:f4:98:f6:eb:8f:59:ae:e6:47:77:52:
         97:66:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----