Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File:                     1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier:          hM7yA6rAB4m0Am19wFeVr2jeimCjFuQY1N9hqIjWE9c=
Subject key identifier:   3A:0B:D7:EE:D0:FD:1A:BB:A4:9A:56:3E:C4:46:5F:BA:41:D5:C0:EA
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer:       /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial:       01962E99255F96A0B5B532BD8D1622E890AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number:          0894
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: ufFYU2GP/+5PQZRARSXDXc7xfaiOtDuzjwCMz9s3Sbc=)
                          2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:25:5f:96:a0:b5:b5:32:bd:8d:16:22:e8:90:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=3a0bd7eed0fd1abba49a563ec4465fba41d5c0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:3d:b3:77:ed:d0:b1:06:03:d6:5e:8e:f5:5c:
                    5a:a8:36:8d:d8:18:c5:69:58:06:e7:fa:d3:9f:da:
                    09:1b:08:ae:4b:ea:3c:69:3b:19:e5:62:b9:c4:0a:
                    0e:f3:cd:8d:27:67:48:01:0e:e2:32:fd:4c:94:68:
                    d1:d1:37:6c:6f:d8:1e:4a:e0:79:53:12:9f:b9:51:
                    87:9b:e8:c5:64:04:62:02:a8:93:d3:0b:2e:c2:b0:
                    ef:1c:cd:4c:18:15:02:11:4e:bd:f6:f4:8f:de:2a:
                    d9:27:e5:c8:2e:14:cc:76:52:ca:e9:f2:8f:a9:4f:
                    10:33:88:71:ab:f0:fe:8a:67:01:c0:2e:1c:d2:ba:
                    54:45:94:79:37:bf:94:0a:20:78:15:64:4b:22:ca:
                    ba:61:2e:f3:fc:b6:61:70:88:6b:ae:f7:9c:98:f7:
                    66:58:a7:e2:c5:83:ec:4f:48:8c:01:1e:b9:2b:8d:
                    66:d6:58:cd:83:38:fc:21:97:60:36:e0:4f:f1:9e:
                    f9:5c:c3:ee:5c:b8:2b:38:77:a5:30:14:a0:18:00:
                    7b:eb:96:5c:72:2b:ef:46:5d:b7:0a:ea:13:30:1d:
                    ea:44:74:99:a8:a1:e9:ab:03:77:47:f9:25:a9:ec:
                    f6:b2:3b:69:5b:15:2a:30:64:9a:92:74:2c:a5:a6:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0B:D7:EE:D0:FD:1A:BB:A4:9A:56:3E:C4:46:5F:BA:41:D5:C0:EA
            X509v3 Authority Key Identifier:
                keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:45:2e:1f:dd:dd:eb:f4:51:a5:c4:b7:0a:2d:20:4a:c6:4f:
         07:6b:c8:2b:5e:bf:da:c6:84:43:ab:7a:1a:35:91:30:09:4f:
         07:78:87:16:bb:c6:49:8c:fc:01:23:1f:ab:e3:36:a7:56:00:
         d4:5f:48:24:98:16:25:15:ba:42:a8:ee:3a:f5:9e:68:7f:bd:
         47:14:6e:f9:97:e5:ad:90:04:75:5a:db:28:4f:71:0d:9f:be:
         aa:ff:8c:16:40:91:f9:ac:a9:26:ed:f1:0b:2c:29:22:b9:df:
         1c:ce:27:ab:c3:6e:ea:8e:8f:68:94:6f:02:36:d9:91:57:0a:
         be:af:2d:e0:36:e8:30:9e:d2:75:3c:c6:f8:ca:39:33:35:4a:
         15:6a:af:3c:77:3f:0c:f1:16:9b:ee:8d:fe:c6:c7:c6:7d:b1:
         90:79:ae:e7:c6:ae:2f:10:15:32:1b:20:ee:b0:09:4d:38:a1:
         b3:cd:b2:08:7d:a8:59:a0:b9:90:00:13:a1:57:69:e6:98:1b:
         c5:d9:ae:5e:68:96:3f:51:1f:f3:31:0e:75:90:07:c9:bf:72:
         e9:fd:e2:f5:14:b6:49:c0:cf:24:e2:e3:52:39:cb:ca:60:70:
         8e:1b:83:25:0b:2f:37:e7:cd:2b:34:b5:37:f6:10:1d:4d:f7:
         8f:fc:ed:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----