Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
File:                     Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json)
Hash identifier:          glU6GK1n6/2GElksVHUkNo4FYCVwuk3W/TUg8VktM8k=
Subject key identifier:   0B:78:36:7F:4B:C1:13:73:1D:AE:46:32:94:23:6A:AD:F7:50:C1:F1
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Certificate issuer:       /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial:       01962E61E42002CE4E943334BBDA1B0B0692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: xIca4I9df2rejg8yTdRNF0sz/GesKnFt5TWimCy17Lk=)
                          2: xAHFWshzCwZ9iWzPHD319yAWavE.roa (hash: LAjKykzMh8QraV6MgCdF6nP15mOVTD1M9V0STezqNjY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e4:20:02:ce:4e:94:33:34:bb:da:1b:0b:06:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=0b78367f4bc113731dae463294236aadf750c1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:c5:fa:0b:cf:5f:93:0d:3a:74:df:9b:9b:
                    ab:6d:ee:b7:87:75:3a:e0:bd:3c:09:34:68:02:b4:
                    dd:b7:9c:87:04:2a:0a:5e:54:54:52:cf:1a:b4:ca:
                    b9:cd:49:ff:e1:97:af:bb:81:2a:58:19:fb:3f:3d:
                    0e:af:e4:de:59:3f:cf:0c:10:7a:8c:90:e7:58:26:
                    ba:63:aa:e7:69:7b:4b:f9:35:d3:d2:35:16:6a:0d:
                    1d:e2:5d:cd:bf:92:82:37:67:fc:85:c0:01:85:89:
                    4a:31:14:ca:cd:36:21:8e:24:1b:2d:b0:85:70:99:
                    0c:87:7f:03:8d:f6:99:79:b3:9e:9f:46:93:8b:19:
                    9d:a4:e0:1e:b0:a4:62:39:ca:36:de:94:77:f7:5a:
                    2d:15:a4:24:9d:8f:99:4c:04:c1:74:90:2f:98:94:
                    af:c6:bb:66:7f:1c:69:bc:56:03:51:7c:0b:14:4b:
                    1c:a7:64:17:3d:e6:65:68:9f:08:60:e6:42:f5:02:
                    ea:73:62:8c:0d:eb:6d:07:f8:9a:c0:88:3b:00:23:
                    2c:87:46:b3:6a:d7:87:24:88:a2:a4:99:b5:0a:ea:
                    9f:47:70:a0:3a:30:ad:75:8e:5b:92:49:be:e5:67:
                    52:f3:be:a7:d2:1a:55:e2:ce:da:cf:3b:60:3d:c4:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:78:36:7F:4B:C1:13:73:1D:AE:46:32:94:23:6A:AD:F7:50:C1:F1
            X509v3 Authority Key Identifier:
                keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:06:4d:81:07:25:4d:6b:1e:4c:14:39:c9:85:eb:82:6d:38:
         d9:65:24:d1:3d:96:01:10:54:f6:c6:79:af:76:ae:b8:fe:3b:
         ed:23:7c:7a:36:59:04:f3:3c:d7:ff:9a:b1:99:eb:43:2e:7c:
         d8:48:6c:30:b9:37:52:ac:d0:76:95:85:a5:36:9b:1f:be:01:
         5a:c6:67:72:5a:4e:09:6f:15:4c:92:e0:65:c3:44:91:24:f5:
         ee:52:95:50:74:a0:55:40:66:de:e7:5a:95:3e:64:65:7a:cc:
         2c:9e:66:43:35:68:26:89:b7:68:87:03:b8:df:c8:47:e8:3d:
         80:2a:5b:2c:a1:bd:4e:ef:6b:f5:7a:6a:2b:b9:cc:c6:67:ce:
         58:de:18:64:78:c9:c1:39:7f:2d:5c:15:08:9d:da:e0:bf:04:
         fb:43:88:09:5f:e0:c2:55:6b:1b:f0:f4:f6:cd:6a:d7:37:ae:
         b2:71:82:0d:1b:b6:d0:ae:09:ca:41:21:25:b2:41:be:fa:75:
         f9:3d:db:8c:41:52:75:08:bb:0c:2d:c3:a7:6d:6b:44:77:3b:
         13:ff:f8:c0:5b:5f:d7:a4:9d:45:38:64:77:ad:73:d3:fb:15:
         f3:e5:c7:43:ca:9b:ae:a6:60:c8:40:d0:3e:2f:1b:8b:e5:76:
         9d:96:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----