Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File:                     rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier:          uEQg4BXLR5qWz8olHUKxNlxdb8uvqYNLXSPqijKg6qU=
Subject key identifier:   46:6B:1B:E3:A5:3E:CF:E5:48:53:15:57:04:24:89:D7:35:C5:A2:92
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer:       /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial:       01962F74B0FB9183CFF71BAA3F1BB99E5E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number:          13A0
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=)
                          2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: FqZcscCU75SOsd6h2PwXXF9FMdpFBXkAVcBSkg9YwOI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b0:fb:91:83:cf:f7:1b:aa:3f:1b:b9:9e:5e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=466b1be3a53ecfe548531557042489d735c5a292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:2f:d2:ee:21:97:e3:a7:db:7b:28:72:43:
                    5f:ca:bb:6f:5a:b7:5e:16:a6:5c:bf:16:c5:67:fb:
                    3f:ec:c4:48:51:e1:ca:e0:86:fc:6d:0a:46:b2:76:
                    b8:73:c9:97:dc:42:3b:6f:82:43:10:fb:35:cd:e5:
                    9b:5c:65:11:40:da:a1:f9:59:46:3b:de:d4:3e:24:
                    ff:0f:22:72:45:a5:54:c0:83:c2:26:9f:66:d3:ec:
                    bc:f2:b3:15:ba:30:81:87:3c:13:6c:73:a4:ab:d5:
                    0d:3d:f8:23:0a:63:24:e2:c5:65:66:fa:60:b6:41:
                    b6:70:20:59:f9:7a:27:b7:45:10:d6:15:8e:b6:7f:
                    2f:ec:73:4b:87:37:1a:a4:c1:04:82:b0:de:50:bb:
                    08:76:05:a3:e3:42:2a:93:a5:d6:cb:64:e2:87:4c:
                    bc:fd:6c:9e:23:c9:27:c7:ee:0f:40:d8:1d:af:f8:
                    6c:6c:be:da:4c:6f:d0:6d:0b:4e:9d:0d:2a:a3:dc:
                    48:95:c0:e2:f6:54:91:d2:a1:00:7a:8e:f5:39:3e:
                    14:5e:ce:76:bd:c4:3c:8f:06:52:09:9e:46:8c:08:
                    a4:95:9f:a7:5d:f3:62:93:60:6b:68:9e:f9:f9:b7:
                    37:cd:d3:92:b8:27:d4:a7:bc:de:b2:fc:69:4d:5d:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6B:1B:E3:A5:3E:CF:E5:48:53:15:57:04:24:89:D7:35:C5:A2:92
            X509v3 Authority Key Identifier:
                keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1b:78:ce:e7:39:32:3e:3b:1c:40:e8:07:88:c3:3b:ee:b7:
         8d:37:0c:93:80:87:fd:74:44:62:f9:ba:73:34:a1:a9:bb:c4:
         da:7c:ea:c3:4a:02:5e:0f:2d:f1:2c:ee:61:a8:37:81:33:47:
         35:fa:1c:08:d8:5f:35:e6:20:1b:d4:db:1a:6c:f6:15:1a:39:
         bc:f8:9f:22:5d:0c:93:8e:d3:dc:57:c7:08:de:29:29:e1:e9:
         46:3d:8b:f1:9a:9a:a7:d7:a9:02:10:e6:87:07:c4:a2:51:0d:
         73:31:4b:28:3c:4e:a1:12:25:f4:2d:5a:b8:6d:7d:20:0f:35:
         99:5a:a1:c9:0d:32:19:7c:6f:cf:de:44:3b:3e:f9:3a:cf:96:
         2b:66:40:7d:d4:57:cd:0a:d0:5c:b5:60:42:e3:f2:3d:b1:4f:
         eb:13:dd:34:60:08:10:7f:e9:40:9c:69:0b:63:ee:0b:28:e1:
         51:11:81:29:4b:fe:a2:29:44:c2:5f:7a:22:89:32:9c:87:a8:
         fa:8f:17:d4:83:e2:65:c1:e6:aa:3b:2e:75:a6:e0:30:ee:8b:
         30:18:39:de:e5:22:36:3e:e0:87:aa:5d:1a:3d:5b:8a:13:21:
         8a:0d:12:73:86:41:19:e8:22:03:e0:2a:d4:8f:80:9d:44:cb:
         92:f3:4d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----