Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
File:                     4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json)
Hash identifier:          piGKP1ofdJmONS6P5Ewx2QR7v8ndmDOdSIC4vwwknt4=
Subject key identifier:   C5:B4:3D:51:77:5E:81:B2:04:1D:02:7B:4B:B2:69:F2:0F:9D:7F:71
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Certificate issuer:       /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial:       01962E617EFE11024083DD36112F46EC4AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
Manifest number:          08B2
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: Ghnw9DDn4yXWseP48sy3Ml54Cmm9s0ofyxJ4NBt5DDs=)
                          2: 5DnR59g0uDhlCeBnwu0_1-KUFeg.roa (hash: jAnqTMpaItG0GhBN/hjRVmkf1KAEsae1ohPc+vQL06Q=)
                          3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=)
                          4: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=)
                          5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=)
                          6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=)
                          7: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=)
                          8: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=)
                          9: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=)
                          10: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=)
                          11: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=)
                          12: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=)
                          13: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=)
                          14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=)
                          15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=)
                          16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=)
                          17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=)
                          18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=)
                          19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=)
                          20: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=)
                          21: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=)
                          22: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7e:fe:11:02:40:83:dd:36:11:2f:46:ec:4a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=c5b43d51775e81b2041d027b4bb269f20f9d7f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:0e:62:06:3e:98:95:fc:f1:e1:03:58:13:
                    b8:61:d4:48:93:1b:e4:81:6e:42:43:c7:17:ee:12:
                    54:16:72:f2:73:72:d3:cc:8b:3c:41:58:0a:a1:0d:
                    4b:bc:39:b3:91:c7:87:85:b0:e3:b7:40:af:d9:41:
                    db:98:7c:3d:5b:2c:93:87:6a:c3:57:ac:45:62:3e:
                    03:7f:3f:70:9e:46:00:50:c6:51:e2:6f:02:b9:8d:
                    d4:a3:fd:e3:3a:a2:e0:9c:24:c9:27:8d:1c:11:f6:
                    c8:0e:d4:16:d0:99:3c:d8:52:3a:e1:7d:09:68:51:
                    5b:1e:eb:c7:8e:1a:80:b9:79:78:83:5f:ff:43:e6:
                    2e:06:67:b1:89:5f:4e:16:16:4a:3a:c8:27:b1:43:
                    3c:96:8b:b6:88:0e:0d:4d:11:2b:16:d1:85:21:79:
                    0c:47:6f:3d:db:f6:65:d6:6b:d6:1a:12:77:e1:7f:
                    57:3b:da:1b:ee:57:2b:1c:0d:a3:70:4a:b1:8a:18:
                    b5:30:32:a9:0b:be:42:e5:7d:4b:c2:d4:f9:b6:59:
                    6f:4c:2e:ba:ad:6d:f7:c0:e8:ad:58:36:9a:7d:be:
                    1a:c9:8b:b3:31:75:0a:36:fd:64:41:f5:a3:f2:7f:
                    47:7b:e3:dd:94:c0:38:a4:97:dc:bd:a7:47:33:ff:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B4:3D:51:77:5E:81:B2:04:1D:02:7B:4B:B2:69:F2:0F:9D:7F:71
            X509v3 Authority Key Identifier:
                keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6b:b7:1f:b2:f6:f1:03:08:17:6b:bb:70:85:57:70:bb:93:
         dc:22:1f:ba:ca:7d:35:ea:33:df:d1:ff:0c:6c:8a:87:d8:93:
         f0:75:9a:ab:3b:03:3d:0e:aa:97:18:54:16:75:a4:e2:22:93:
         7c:d5:bc:74:dd:3b:79:e8:9b:8b:0f:fd:0f:c4:04:81:29:3e:
         76:ae:8a:ee:51:5a:31:f4:89:0a:bb:df:b9:45:4b:7f:bb:0b:
         1a:93:1d:57:5a:56:1e:5d:0c:41:d8:0a:43:64:49:74:9f:19:
         95:e8:3e:e8:59:48:3f:af:1f:52:86:5f:c9:75:45:92:42:f6:
         cf:6f:67:e9:65:a4:f9:67:90:e7:7a:92:9d:d1:01:a4:75:a3:
         10:26:96:9d:c5:4e:5a:5f:c7:8a:bd:39:67:bb:0d:7a:64:f0:
         c0:05:08:88:aa:cb:76:9b:6c:74:61:6e:83:6e:7f:67:02:2b:
         c4:af:b3:a2:9e:40:74:2a:5e:4b:20:1d:eb:6b:ce:78:9c:1b:
         25:8a:76:7d:58:2a:ce:be:29:9c:b7:04:ca:be:39:71:85:d4:
         61:bb:08:54:1d:4f:1a:9e:c9:f0:ce:e9:4c:b8:74:24:8e:46:
         c2:ac:60:f1:79:25:02:8b:e5:73:51:fc:8f:ed:d8:b2:de:70:
         b0:fb:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----