Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
File:                     rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json)
Hash identifier:          ffJYkL4FkhukSHpZqCLuezczg9PW2b9ytZYd/iHOGT0=
Subject key identifier:   38:44:07:EC:F2:40:02:25:27:D8:B9:1A:17:D1:02:3B:A6:8B:01:8F
Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
Certificate issuer:       /CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Certificate serial:       01962E986C1F416D200FE125BADDD20F6F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
Manifest number:          0EAF
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: ozox13LBPgFVqr6jftn6JqlRyYMmYu5zk6WHvdypYvo=)
                          2: wMviITx4-Ydrde8DagnvJudrSTQ.roa (hash: Bhx7NILq0TmOVBjEhBEQzkx4nDg+vAlvQ+Bo2NSJwBs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6c:1f:41:6d:20:0f:e1:25:ba:dd:d2:0f:6f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=384407ecf240022527d8b91a17d1023ba68b018f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:25:26:5c:d8:a6:c8:ef:12:b9:7b:7f:cb:81:
                    13:3a:b3:c9:ec:62:f8:6b:4b:c7:a0:8f:b8:8c:78:
                    14:1b:81:bb:a4:1c:43:52:6e:70:20:e4:75:a3:80:
                    ce:85:0a:78:de:27:c5:aa:85:39:ee:f2:a3:14:c8:
                    eb:85:5a:a0:bf:68:7d:a8:97:91:a0:93:12:48:02:
                    80:3d:7b:ec:ba:43:8c:a7:bc:ae:26:3a:a3:c4:e9:
                    be:bd:76:84:e8:be:52:e5:a6:6c:a1:44:33:30:97:
                    89:72:27:31:29:95:c1:96:cd:e5:84:0b:8e:25:a9:
                    b0:fa:a3:3d:ce:94:a9:39:7f:3a:a8:aa:08:25:42:
                    15:b7:fa:45:96:a3:a5:f8:6c:73:92:f4:54:f1:fc:
                    49:09:3a:22:11:1f:5f:76:50:a0:6e:f9:93:1b:6f:
                    3c:6e:c8:fc:80:8c:3a:dd:4a:fc:40:04:23:68:d2:
                    69:f9:86:72:18:38:05:fc:44:58:d5:af:46:19:32:
                    5d:19:28:17:e8:b1:0d:51:8d:42:03:28:46:86:b5:
                    cc:c3:7c:a0:0c:58:57:84:60:94:8e:56:8b:0e:3f:
                    0c:34:52:d7:f8:dc:1a:61:2c:c4:ec:a7:47:11:55:
                    49:47:19:3d:df:28:7d:54:e8:b1:35:9b:a8:41:2d:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:44:07:EC:F2:40:02:25:27:D8:B9:1A:17:D1:02:3B:A6:8B:01:8F
            X509v3 Authority Key Identifier:
                keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:bc:c7:2d:73:36:dd:b3:d0:b4:be:e5:25:61:aa:5d:01:8a:
         1a:f7:24:a0:da:ab:95:86:f4:e8:d2:ac:2b:da:1c:48:7f:b1:
         42:66:90:aa:0c:ce:2f:c9:9d:6b:95:9a:6c:1e:66:8e:5a:03:
         45:fd:c4:01:68:91:52:2c:b0:24:9b:e1:b5:6a:43:1d:df:0a:
         c4:56:1c:79:a3:cf:57:71:a6:24:cb:2b:ba:04:12:cc:1d:d9:
         96:a7:8e:06:d8:aa:ef:a2:b7:9d:56:46:6b:85:8d:3c:cb:42:
         3e:ea:2a:48:b3:00:f8:21:3a:7a:02:6f:aa:2c:39:ea:00:88:
         c7:50:7c:7f:20:cd:ea:35:2a:d9:c1:63:84:7b:49:2b:f0:d3:
         c8:0c:65:73:75:e1:f6:10:bb:1e:91:5a:df:10:e7:f4:42:c8:
         ec:7d:89:f7:ee:0b:ff:ec:3b:4a:47:7e:62:ac:db:ff:07:a9:
         c4:3d:f0:43:e2:ef:49:ee:93:08:82:6c:94:07:32:c9:0c:ff:
         ef:fb:66:13:3d:93:0e:32:ac:64:c4:e5:6b:31:d8:dc:86:5b:
         f8:78:9c:5e:76:82:71:31:9b:b0:98:58:78:be:d2:de:28:cc:
         93:8d:06:dc:9f:29:94:86:dd:33:f2:17:42:b5:db:9d:7a:1f:
         4a:70:fd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----