Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File:                     4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier:          3wdBJYUUV0OoqwqeiDwq3iZaTQUHozKFs4ko2fjRNu0=
Subject key identifier:   37:0A:D6:50:8E:96:41:FC:E1:63:E4:52:50:E9:95:12:EE:6B:74:32
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer:       /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial:       01962F3DB382993F1D43002A5F2F1EAE7DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number:          0860
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=)
                          2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: /CrMa+z7Puv1Sk/gHQIqhcR+JGlouTczZOoUS7KAJzQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b3:82:99:3f:1d:43:00:2a:5f:2f:1e:ae:7d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=370ad6508e9641fce163e45250e99512ee6b7432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:8a:37:a9:94:5f:a0:de:37:fb:99:7a:f2:
                    5c:8c:98:b4:04:9f:e7:04:23:a1:99:33:d0:18:a6:
                    43:3d:07:a8:9e:a8:17:29:2b:ce:81:06:2e:fb:c2:
                    75:c4:45:da:e2:6d:fa:e3:78:cd:bf:7e:53:0c:2d:
                    d2:10:dc:89:63:dc:38:5d:5d:42:73:b0:a4:2c:e5:
                    ad:d3:bd:dc:10:fa:bf:74:15:8d:c5:1f:ec:ec:d4:
                    b6:c1:50:e6:3d:8a:be:ea:d1:7a:ba:38:95:0f:db:
                    10:ed:a0:81:a1:fa:34:44:5c:52:82:40:39:d2:41:
                    81:50:f9:db:f5:db:d5:8f:b3:96:76:3d:6b:59:1d:
                    31:2d:5b:74:7b:52:3d:81:54:c9:fb:c5:12:12:05:
                    6e:3b:ad:c9:98:9b:b3:c6:61:8f:cc:2f:f7:ae:a2:
                    6a:1d:18:92:9d:d0:98:c1:65:1b:c5:a3:bf:30:08:
                    d8:69:c3:19:75:37:08:36:27:e6:75:92:00:f0:ab:
                    81:10:2c:0e:1f:63:03:dc:c9:3a:29:aa:3f:a1:56:
                    f3:5f:46:2e:bf:2f:fa:32:63:ac:42:e2:de:4f:9b:
                    ff:15:a0:bc:ba:bb:e8:93:b6:1f:48:83:b0:65:f4:
                    84:49:b2:90:a0:cd:b6:f6:82:2f:83:61:36:70:5e:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0A:D6:50:8E:96:41:FC:E1:63:E4:52:50:E9:95:12:EE:6B:74:32
            X509v3 Authority Key Identifier:
                keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:64:15:1c:2a:e7:3e:07:94:16:8a:ea:6f:05:38:97:c7:17:
         b8:10:cb:02:7a:61:69:a0:e4:91:0b:77:55:d2:8f:98:38:34:
         0c:41:cf:25:c3:50:82:93:fa:50:6c:ab:3d:64:e2:0a:22:e6:
         ae:53:cc:3c:f9:68:39:04:fc:56:ae:e3:d5:ba:21:84:f7:a9:
         dd:53:2d:95:40:eb:c9:be:89:0d:b5:15:9f:18:18:b3:f8:60:
         a6:5c:11:58:a2:4c:58:c7:1e:96:c3:f8:53:7b:d2:b5:ad:33:
         85:8c:2c:68:7a:d0:d4:4f:53:34:e1:d8:5c:9c:24:cd:aa:31:
         82:7d:1f:5b:b9:56:12:d0:47:08:be:89:48:84:b5:92:75:10:
         d3:99:38:70:7a:f9:0d:8c:92:ee:69:ba:f2:aa:95:ed:dc:21:
         49:1b:5e:5f:b0:bb:9c:50:6e:32:a7:87:c4:23:18:56:78:2a:
         02:0a:9c:79:f6:05:0c:84:0d:42:71:dc:c5:57:b1:d4:1d:c9:
         b3:ec:2f:75:c6:46:0b:0f:a9:5a:2d:f0:03:c7:ef:01:dc:8c:
         17:a3:44:2f:5d:96:7a:93:ed:ae:87:75:40:bc:d8:93:98:67:
         47:2a:83:ce:35:94:00:f4:0d:34:27:33:0e:03:f6:e7:77:e6:
         73:10:01:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----