Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
File:                     R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft (raw, json)
Hash identifier:          xUFlX3gtTdYu9czfas2Dcj/BM8xP2h1xiz/VDLoLlxk=
Subject key identifier:   CE:D7:3D:CD:09:15:B6:86:CA:8C:C4:88:F1:28:18:A1:E3:5B:E5:24
Authority key identifier: 47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
Certificate issuer:       /CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Certificate serial:       01962E99AEE30F1555063929185F7F572280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl (hash: VBrO7ATY3eAZIHctkRk2iDTp2NB0WNm84iTagthaaQQ=)
                          2: iNnNSc-GCpy_kfXVOvoivVeh7kk.roa (hash: RWS+M6/4Gi10W4jzmr5OrwQVniITHKJISgDut4dKF6U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ae:e3:0f:15:55:06:39:29:18:5f:7f:57:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=ced73dcd0915b686ca8cc488f12818a1e35be524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a3:11:1b:22:81:71:2a:1e:bc:27:10:b2:24:
                    b8:8b:47:2e:50:f1:fa:b2:e8:0e:27:34:cc:a5:4f:
                    0e:d4:b8:cf:bb:42:3f:72:35:b8:ed:bd:c8:7f:79:
                    38:e9:0f:b3:9a:d3:cd:dd:9f:c5:5b:cd:d1:8d:bb:
                    8c:c9:01:b2:57:24:e4:ed:2b:69:40:0c:de:68:ea:
                    06:e3:eb:5d:81:3c:fc:a0:b7:13:e6:f9:52:d8:6b:
                    d5:e3:df:1e:9a:7a:6d:fb:f3:42:44:b4:e6:d2:a5:
                    9b:9b:6a:b4:2d:88:fb:bc:fc:31:55:1d:e6:72:70:
                    4b:b2:51:1e:68:2c:ec:06:77:3a:f4:e8:72:8e:55:
                    1a:18:3e:c2:6f:f8:a7:61:68:4f:7c:ab:91:9d:9b:
                    0d:09:06:61:a0:52:a4:c4:39:ed:e7:44:7f:e9:27:
                    9d:8b:03:82:d7:18:1c:4c:4e:1d:8f:b1:86:47:96:
                    a1:97:79:a6:58:44:46:9d:2a:8f:2d:6d:1c:ce:99:
                    e3:45:cf:ad:92:a5:0d:8d:d6:2e:09:64:12:76:41:
                    9c:b9:17:6d:37:45:2f:89:91:6a:60:6c:34:df:bf:
                    3c:f2:c5:3a:9a:a4:c0:49:81:4b:bf:d5:d7:e0:5e:
                    00:a3:9e:5b:60:c9:8d:6a:ef:5e:c0:e0:d8:56:2d:
                    93:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D7:3D:CD:09:15:B6:86:CA:8C:C4:88:F1:28:18:A1:E3:5B:E5:24
            X509v3 Authority Key Identifier:
                keyid:47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d6:36:83:a9:59:77:d6:37:69:4f:75:f8:4d:30:da:5c:22:
         bc:4d:0e:5d:72:ee:df:fa:8f:a7:3d:a6:c9:21:02:d4:a3:03:
         2a:55:7b:77:10:11:eb:1a:42:02:a7:e7:e4:bc:f6:65:1e:8e:
         c7:a6:16:e2:18:21:6b:f0:9e:89:2d:45:01:70:89:ff:6c:c0:
         c5:a1:8c:56:0c:80:0c:c0:7a:3c:75:d1:ab:48:9a:be:82:4c:
         16:03:1a:0b:33:c3:0d:f7:0f:22:1f:09:d8:ae:af:d1:e9:23:
         67:54:a8:5d:fa:6c:62:3c:98:a1:9f:ad:58:84:de:9e:ac:bb:
         62:55:79:50:1a:e9:dc:6a:cd:b1:1c:0e:2d:5c:70:d8:91:89:
         e7:92:4b:e0:28:8c:27:f9:c2:31:35:30:77:d7:48:98:88:8d:
         2a:97:54:ca:4a:c8:b2:b4:ca:ba:10:4f:c0:19:98:9f:2c:33:
         74:24:aa:c8:5a:ee:72:bb:43:8a:ca:a9:32:95:4a:81:1c:09:
         17:81:42:7c:ca:bc:be:e0:e2:7f:ec:09:6c:dd:60:73:6b:7c:
         d2:44:68:83:40:a2:35:3a:fc:94:64:1f:66:b1:17:87:80:2d:
         b1:a5:42:0c:fa:db:48:14:94:b2:f4:2d:94:80:b3:33:24:75:
         58:51:95:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----