Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File:                     4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier:          ge0JtHXke7OlB3EhjO3YQs9P7QUgP3JFgZViV1ZGvlg=
Subject key identifier:   67:A8:D9:CC:9A:9F:A2:79:5C:C0:C4:54:5D:41:10:D9:FE:77:46:A8
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer:       /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial:       01962F0711CDE62EEF215EBF9A2EC9FF6D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number:          0EA8
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: vTqgju25c2Oc+/LVeqQ2wJqVjehEqG4BwVtLtruC+Xs=)
                          2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:11:cd:e6:2e:ef:21:5e:bf:9a:2e:c9:ff:6d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=67a8d9cc9a9fa2795cc0c4545d4110d9fe7746a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:61:d4:cb:c6:00:1b:52:88:1b:9d:ae:f2:
                    21:16:42:17:15:64:36:84:33:1c:0e:5e:ed:73:c4:
                    35:92:1d:2a:03:30:aa:db:37:f6:a4:60:90:33:4b:
                    2a:40:17:04:c1:26:a4:ed:50:df:d7:e5:92:bf:d1:
                    1c:9c:7a:10:57:7f:3b:d1:f8:a6:d5:e4:7b:6d:9e:
                    5c:ec:3a:9b:6c:0b:95:7f:5d:50:b0:27:94:d6:5b:
                    57:cf:02:8b:cb:ce:f0:e9:b8:c8:cb:73:46:80:d0:
                    85:a2:f5:ff:0b:b9:43:9c:14:f7:a2:d4:c8:3e:f5:
                    43:fc:45:e2:22:d1:8e:02:c1:80:99:5d:9c:c3:23:
                    d7:88:b7:2b:ab:9b:1d:d8:f6:37:40:7e:38:fa:42:
                    5f:f0:e2:ba:48:51:77:82:65:b7:55:ae:7e:b2:7b:
                    77:65:3d:7e:fa:b3:b8:0d:bf:4f:89:70:c1:b6:2f:
                    34:c6:bb:2c:f3:ce:3a:8b:84:f5:4a:78:4e:1c:0f:
                    97:74:f2:52:2d:d5:27:37:af:13:49:fd:ce:af:c5:
                    61:f7:8f:40:d8:02:41:d2:7d:29:79:f7:ea:56:4f:
                    cf:dd:8b:08:2f:ef:91:4d:8d:5c:fe:79:2c:ae:4b:
                    06:ba:03:64:d5:58:1f:5e:cb:15:1a:5c:d0:5f:f4:
                    8d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A8:D9:CC:9A:9F:A2:79:5C:C0:C4:54:5D:41:10:D9:FE:77:46:A8
            X509v3 Authority Key Identifier:
                keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:80:9c:bd:d7:24:98:03:1a:bb:a8:16:db:cd:2c:d2:38:da:
         2f:c0:6a:ec:05:f7:9b:5b:9b:3b:f3:f0:02:36:55:08:f3:6f:
         5e:72:35:70:92:d3:b4:80:de:9a:e5:97:4f:1f:98:78:9d:17:
         fc:8f:03:5c:b8:04:a1:58:54:91:d0:91:f9:76:b6:09:f5:9d:
         20:68:90:f3:db:70:07:25:b3:45:56:31:ad:14:6c:70:07:97:
         a1:c5:c4:bb:d9:86:88:1c:7a:82:f4:d5:88:2a:85:de:10:63:
         89:b9:45:8b:5e:9a:cb:dc:e7:b2:cd:f7:ae:af:5c:6b:2b:60:
         c0:cc:57:33:d3:0d:d4:9a:9a:fa:41:70:2b:a3:65:18:36:fe:
         51:5d:0f:c3:6a:95:8f:c4:a7:19:f9:77:c4:ac:ca:02:0c:4b:
         72:d9:3d:ff:9d:be:0c:ee:fe:61:5d:e4:72:9e:38:0a:72:24:
         9b:99:b1:2a:c1:4f:17:f8:1b:63:fb:27:56:b1:9b:3b:2c:25:
         58:4e:39:4b:05:f3:71:25:c9:47:da:7b:3b:9d:d3:63:17:e1:
         de:fa:1d:12:8a:90:59:b8:b7:cb:3f:50:1a:a8:a4:26:3e:5b:
         3b:30:6f:67:92:ef:56:7d:55:df:45:58:2c:40:46:72:7e:3b:
         06:92:44:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----