Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File:                     4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier:          MoUArsL55ycm2GKUWwxMVmI0QXqQdOQffAneqA1qIrw=
Subject key identifier:   E1:1D:F3:FF:70:9E:F5:02:EC:A4:DA:E6:29:D4:A5:1C:F9:8F:7A:2B
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       01962F744C8B038770799E0661A1987F3C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number:          14FC
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: BMb8zCpJOpXfQNTZT86S0kDjeTMHl5KJej99wvPFvoo=)
                          2: C_WwagoxlETCmC3xgCtnJTSTiFU.roa (hash: DG+d+a6FZH6p2em3ravozO37hhn38lEfqxBjBjLqEHk=)
                          3: egQwRHU5AE-klzoLV3_Sw_tkXYo.roa (hash: Nr/ciMVzEFBT/2eRIx3/XPFBkeS8bONzVMg9DvriCrs=)
                          4: p0iloktOu4HrQp8Fbazd0VMW18A.roa (hash: WuG4K1BU3enI1jODi4UBhPWn6TyCLQBuQYRFhQ0mg6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4c:8b:03:87:70:79:9e:06:61:a1:98:7f:3c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=e11df3ff709ef502eca4dae629d4a51cf98f7a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:86:0c:bb:16:29:5e:7c:59:94:96:3e:e0:
                    35:8d:7e:bf:2c:a3:b3:2b:00:fa:e8:62:16:fa:3f:
                    48:4c:81:21:18:86:9c:a2:3e:98:ab:4f:c4:46:fb:
                    a8:22:11:00:00:0d:19:3d:7b:98:3e:e9:4b:26:22:
                    67:9b:8f:fc:4a:a3:90:35:c9:65:8c:62:bd:75:fc:
                    ce:7b:a7:a0:7f:3b:02:73:08:e9:1d:b8:bc:71:54:
                    70:dd:c6:9f:98:2d:01:37:73:6e:d7:57:fb:0c:64:
                    52:82:e3:9e:aa:61:a4:8e:b4:c5:a5:e4:55:b1:ab:
                    45:dc:25:f5:b6:a6:37:a1:71:06:b5:23:d8:2e:9e:
                    3b:f9:bc:8b:96:3c:82:60:73:0f:32:ca:0e:ee:8b:
                    1a:59:4c:1a:18:76:83:96:57:bc:9c:19:df:a5:51:
                    a3:50:d0:ea:01:f6:8a:31:2e:1e:4d:84:d0:30:98:
                    8d:88:01:e8:72:38:c6:12:76:39:2e:94:18:80:b8:
                    df:5c:cd:d4:56:d8:f0:de:78:91:7a:aa:d1:d4:07:
                    87:9c:9b:9b:f5:1d:f5:83:71:b9:e4:7c:08:96:6e:
                    0e:bb:be:f1:96:95:23:21:f6:bb:44:53:8d:7e:43:
                    35:fa:60:12:b5:39:ab:bf:40:e9:d7:79:b2:55:e4:
                    9b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1D:F3:FF:70:9E:F5:02:EC:A4:DA:E6:29:D4:A5:1C:F9:8F:7A:2B
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:cc:2b:9a:a0:00:54:7c:a4:6e:44:42:ac:22:fb:d0:71:
         b2:57:51:da:dc:96:34:c9:68:e9:3a:3d:3a:59:6a:e6:51:b2:
         72:fa:bb:e3:44:12:65:fb:ea:9a:0f:bf:cb:a8:3a:42:78:eb:
         6c:ee:f3:67:c7:bb:5a:80:a3:19:f7:16:41:85:dd:ab:ab:e6:
         64:85:72:62:2d:30:55:09:97:50:2d:b7:f6:f5:60:5c:e9:e8:
         d2:7b:b9:f0:11:b0:69:2e:38:49:5b:99:5f:ac:06:c0:07:76:
         27:87:d0:56:d8:13:e9:66:a5:87:a5:5e:3e:6b:22:c8:16:dc:
         51:62:cf:26:bd:7e:91:35:42:40:c1:56:8d:15:e3:c2:c0:da:
         1e:25:ef:cf:f8:0b:9d:3f:06:a2:09:71:59:7e:9e:d8:43:c8:
         12:48:cc:58:9d:6b:10:13:a2:6a:91:42:8a:03:e0:8a:63:27:
         6d:c9:c7:35:0a:a3:be:be:2d:eb:83:52:10:1a:78:6f:5f:1d:
         40:62:1b:8e:c5:fc:95:00:9d:12:63:a0:b9:b4:9d:dc:1e:90:
         78:e4:f1:7b:87:9a:a4:f9:f4:c1:4a:b8:c4:ee:ec:4c:b1:7f:
         4b:d2:cd:4e:29:17:62:d9:53:9d:b2:55:04:7a:ca:a5:6b:53:
         d0:43:e3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----