Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File:                     4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier:          9IeVXTq3+x9CCk+FalvOiXwHoFPRcTXMx1YBNXCIrH4=
Subject key identifier:   D0:B1:21:69:08:52:C0:79:79:56:D6:CF:CE:FA:68:9A:DD:6B:C7:73
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer:       /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial:       01962F06BA89767282DFF5A23918716C8DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number:          082D
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: o34pGyRdPgdkNHSkfeBHe6NXa5WaOE2CWK5o56agN0M=)
                          2: r-_fYxsQeAAnWT8K8BN3aabue4c.roa (hash: vX8iAlHxAeCaWnzF37mIFqPFZYMuvvYEyZXEicfJpc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ba:89:76:72:82:df:f5:a2:39:18:71:6c:8d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=d0b121690852c0797956d6cfcefa689add6bc773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:de:04:8e:ee:fc:95:27:3f:0a:64:ee:c5:
                    ee:51:9f:da:e3:52:c7:cb:2f:f6:ae:6b:4f:fa:d4:
                    e2:13:7e:7d:62:49:df:bd:7c:b3:5a:ed:e3:e0:68:
                    7d:96:d0:f5:4a:60:65:70:69:ec:e6:df:08:b0:cf:
                    12:a7:fd:6c:c9:bc:54:62:17:7f:f5:75:c6:ec:47:
                    7b:fb:87:41:f2:31:51:d4:f9:a0:33:15:20:8d:84:
                    cd:9a:59:69:62:5f:b0:fc:ad:0b:00:e3:09:2c:eb:
                    13:b9:63:93:a5:8b:25:37:03:ca:cf:4c:b3:e7:77:
                    72:2f:7c:60:a3:75:76:72:8a:e3:cd:78:8c:5f:cc:
                    89:40:f8:60:62:da:44:c8:ea:0b:a8:ce:03:0d:b5:
                    47:2d:d4:0e:75:08:b8:bd:1b:3a:cc:96:5e:11:4a:
                    d7:2a:34:56:c2:8f:0b:5f:05:f8:3a:a0:bf:e0:c6:
                    60:84:94:9a:8f:c9:a7:b1:89:7e:cd:68:fd:74:91:
                    89:ea:54:80:06:74:1a:86:fa:48:f7:d6:fc:b9:85:
                    24:61:d1:15:80:fb:8f:96:4d:53:33:dd:5a:72:b6:
                    33:b9:ab:5e:d8:14:f4:c3:49:b9:a0:3d:b4:34:dd:
                    75:73:8a:a2:34:2a:9c:96:86:41:ab:7c:44:7a:2c:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B1:21:69:08:52:C0:79:79:56:D6:CF:CE:FA:68:9A:DD:6B:C7:73
            X509v3 Authority Key Identifier:
                keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:85:ca:20:50:a3:70:a0:62:34:e7:65:28:94:df:1b:08:53:
         53:e7:57:4f:eb:c9:3f:1f:c0:b2:59:96:57:cc:be:6f:43:4e:
         f3:d3:18:68:9b:e8:e4:9d:e5:b4:b3:8c:a7:5f:77:29:56:e8:
         6b:39:48:15:2b:d4:db:34:fd:6a:95:eb:29:f0:ce:27:70:cf:
         31:d6:1b:17:65:df:d1:d9:89:0c:ef:6c:6b:8e:f2:7e:3b:81:
         52:b6:97:c3:69:a4:8a:4a:c9:1e:17:1f:45:87:7e:79:2b:f3:
         d2:96:56:26:c7:02:65:7a:ab:80:16:8b:cb:2b:f3:f1:09:59:
         57:7d:cd:6b:82:d6:d9:34:83:62:3b:00:d0:60:e7:7f:c4:a1:
         e7:d0:63:a8:1e:1e:d9:73:dd:20:d6:d6:ec:be:72:03:94:1b:
         34:84:2f:3e:36:77:d3:f1:b1:5d:00:bc:2e:16:8f:f7:b6:2d:
         da:65:de:9d:dd:91:ce:3b:4b:d1:b9:30:29:69:91:5e:46:54:
         e2:e0:4d:f3:7f:de:59:21:6d:d8:38:59:a1:6f:b8:90:e6:76:
         c6:55:fe:2c:61:57:e5:fd:4e:fc:04:a4:cb:c5:9d:04:21:b1:
         e8:e3:de:72:58:13:19:71:b3:30:12:5e:ae:12:60:11:53:38:
         15:c3:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----