Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File:                     4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier:          6mGgumTWtKXWzTR9i+OasIPOCRFdu4svefmmrh5pGaI=
Subject key identifier:   C0:52:BE:A3:0A:70:30:6E:89:52:97:56:31:E8:F7:30:43:D9:FE:25
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer:       /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial:       01962F74411D971B6C74D7FA3C01A0A1B025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number:          143E
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: bNsgFjVvv126U1HveiN444d29plgReLryqeVQbonfXA=)
                          2: C_W5uFOffH81U1XB_VG_eFr8n_A.roa (hash: kM5BT5a8AHJ+VqwyNcuISudnKqdFzEc+qETwFrySAkU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:41:1d:97:1b:6c:74:d7:fa:3c:01:a0:a1:b0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=c052bea30a70306e8952975631e8f73043d9fe25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3c:74:14:f6:87:c4:7d:79:f8:be:b5:ef:7d:
                    dc:37:e9:43:0f:7d:c3:2c:cf:51:67:91:49:73:f6:
                    bd:04:5d:e6:03:0c:95:8f:58:f2:b8:09:3b:1d:3b:
                    83:57:76:15:0e:25:61:24:3a:e1:23:f7:3f:ed:08:
                    e3:38:38:03:2d:e9:0d:98:4f:a7:30:25:86:a7:1d:
                    70:54:25:12:ad:6a:43:20:f8:ea:7a:20:e2:5f:ea:
                    2b:6b:f3:2f:97:29:07:10:8b:bd:13:dd:cd:ea:75:
                    2e:70:15:58:71:ab:ac:0c:72:09:a3:bd:33:62:ca:
                    15:2f:b5:80:3a:39:db:06:47:42:2c:27:f3:16:9a:
                    4b:0f:28:70:94:71:53:8c:d3:64:ef:e9:6e:c6:be:
                    60:51:50:59:88:8d:dd:34:ad:ca:0f:d4:a4:f9:b1:
                    6c:ae:c9:ed:eb:bf:51:ee:8f:e5:cc:f0:eb:98:9a:
                    f6:06:d0:d1:d2:de:f3:2a:6c:cd:6c:61:84:98:57:
                    a1:16:4c:a6:a6:b1:0b:d0:66:7a:31:87:da:fb:cb:
                    d0:d7:d5:ce:bb:5f:f8:45:5a:34:dc:4e:2c:0f:fa:
                    df:32:2e:be:94:b7:f4:61:25:68:0e:d9:3c:a7:f9:
                    3b:5a:47:a4:d2:55:f0:0a:49:03:c1:63:97:be:e8:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:52:BE:A3:0A:70:30:6E:89:52:97:56:31:E8:F7:30:43:D9:FE:25
            X509v3 Authority Key Identifier:
                keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e2:42:07:96:ff:70:85:da:09:08:f8:11:d8:47:b3:0f:03:
         1e:01:96:6b:38:52:33:2a:2f:38:ca:55:d7:c5:5e:77:5b:54:
         2e:2d:46:3f:5c:c4:72:79:41:4a:87:92:74:59:f5:b6:97:9d:
         ef:46:42:db:fd:89:56:62:50:a2:44:5b:c2:28:c4:2e:dd:37:
         23:c2:f3:98:58:a7:d3:66:5a:6b:1e:cc:62:25:12:55:d8:bf:
         b9:91:4b:f4:3a:02:f1:dc:64:22:fe:0d:77:27:cf:3a:ce:ac:
         b2:33:97:77:c4:c7:25:67:45:82:f0:c0:1f:47:a3:86:db:79:
         e2:2e:c8:b4:02:1d:ea:6f:8c:1b:da:c5:bc:85:b5:06:6b:f7:
         f5:b6:a3:a3:37:c1:00:10:0e:45:df:9b:d7:13:19:da:72:63:
         3d:c3:22:c5:3a:fa:0c:b6:ac:be:0f:06:ae:62:c6:90:ab:73:
         2e:0d:a6:e2:81:ad:de:a2:92:a6:76:b7:52:d5:f8:47:cd:ab:
         7f:56:fc:f8:8b:f2:6c:d2:18:11:8d:ad:39:4a:b8:2d:22:95:
         4a:36:df:1a:10:39:ec:b8:2e:e0:fa:69:35:d5:94:ca:63:da:
         ca:15:0d:8f:73:61:d7:c2:8b:a7:6a:20:b4:53:1a:ec:ad:c9:
         cf:eb:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----