Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File:                     4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier:          e1Ou/ie4QbhDFNAyANfuxPXtl+Q7DCLckhitVb9st2c=
Subject key identifier:   C8:92:E9:7A:A8:84:D7:B3:0D:DD:98:2D:1B:6D:5C:71:29:31:0F:96
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer:       /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial:       01962F3D2D6DDB6BA110AA0E403B3069F0D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number:          0BA2
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: qm03pld8FdhwnIFem/BriACqIbIvc1JGgCgjB/8vpX8=)
                          2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2d:6d:db:6b:a1:10:aa:0e:40:3b:30:69:f0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=c892e97aa884d7b30ddd982d1b6d5c7129310f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:c4:a2:36:1e:d3:a2:63:c3:aa:35:9d:f6:
                    43:a3:4b:b3:1b:7d:d3:23:ce:4b:02:6f:fb:e8:cf:
                    fb:e2:51:0a:e0:24:37:ce:e6:57:5b:8c:3a:a6:1f:
                    be:32:07:40:fe:74:f5:7c:17:5b:a2:11:32:84:0f:
                    67:72:59:15:d2:40:60:5e:19:f4:ab:b7:86:31:0b:
                    06:8d:cc:66:a7:5e:c7:92:28:13:4b:33:f1:3e:de:
                    04:d5:8f:90:37:8b:62:43:16:97:b7:5a:bc:41:fe:
                    c0:d5:42:2a:6a:32:33:b1:af:bb:9e:d1:02:fd:22:
                    77:74:49:2b:c0:82:00:58:9f:92:a5:98:de:96:33:
                    6e:36:1c:f6:31:0a:e4:0c:94:fe:1d:f9:89:19:65:
                    33:2b:90:4a:c3:5f:f2:fa:25:a3:35:94:d3:1a:c2:
                    99:00:16:ea:a2:99:2e:20:f8:d0:01:7e:d4:6c:d5:
                    62:e3:56:46:df:0a:d4:f4:6a:5a:4b:1c:31:f1:61:
                    81:6a:99:fd:1a:30:9b:80:e3:9d:21:79:b1:7f:f0:
                    d7:2a:42:88:53:46:97:38:31:1c:0b:e4:db:80:8f:
                    4c:91:05:2e:be:d8:02:5f:0a:7b:ec:d0:80:0c:89:
                    81:67:ee:88:0e:d7:b0:54:8e:85:4c:e0:38:96:66:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:92:E9:7A:A8:84:D7:B3:0D:DD:98:2D:1B:6D:5C:71:29:31:0F:96
            X509v3 Authority Key Identifier:
                keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f6:c4:45:28:a7:5e:c3:1e:81:fa:c4:c7:54:27:f4:dd:fa:
         7e:af:98:4f:46:6d:88:3a:8d:5f:69:64:46:85:af:21:e0:78:
         ec:f2:56:ea:a5:53:37:a3:80:b7:dd:b5:ed:ea:19:9e:f3:92:
         86:1e:69:1c:03:16:e6:85:1c:ed:6a:d4:32:fa:5b:d0:a3:8a:
         dc:ef:b0:21:91:a4:c5:e3:39:e4:e1:69:80:f2:2b:83:6a:9a:
         91:17:fb:c5:a6:78:ac:8e:58:94:b1:b5:b7:ab:9c:67:4d:48:
         3e:1b:3f:19:f7:1b:d6:42:36:06:f5:64:bc:0c:07:4c:b3:8d:
         cf:e9:5c:6c:37:3b:41:94:39:83:90:97:b3:ba:6c:47:f4:15:
         de:61:d4:de:f6:91:66:74:d9:ba:21:16:1f:46:e2:44:51:46:
         5d:19:12:62:f3:ae:7e:a9:6a:bc:53:14:b6:ba:2e:53:9a:f7:
         fa:f8:28:9d:70:19:5c:e5:75:be:db:d9:e9:91:fa:08:af:77:
         7c:19:5c:89:5c:e1:6c:76:78:d3:ad:33:03:c3:d4:9d:6b:72:
         3d:12:d7:d8:09:09:a8:23:0b:ea:cb:15:23:b8:47:14:ea:74:
         37:19:3e:22:ec:84:91:0a:a5:e4:b9:e6:79:05:1f:8e:82:23:
         07:7a:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----