Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File:                     4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier:          owZcZVQGGj7tavh2+oUpPQaYorKWv7gfgrWlZgWHq/0=
Subject key identifier:   E0:48:35:00:A5:29:2B:BA:6F:A6:99:86:6A:B6:A9:2B:5E:DA:7E:B2
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer:       /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial:       01962E995D279CEB9E0CDA29AD5BCCED5B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: x3zZgVyO3mDmy910jlAFYx1e44xatu/Z3dRYGGlODUs=)
                          2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5d:27:9c:eb:9e:0c:da:29:ad:5b:cc:ed:5b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=e0483500a5292bba6fa699866ab6a92b5eda7eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:92:7e:31:d4:20:5e:5c:2a:2e:62:91:6a:
                    29:72:b6:77:11:6c:3d:10:ec:fb:e8:59:81:d6:cc:
                    69:ea:16:41:08:af:40:00:fe:f3:06:d6:05:0c:ae:
                    1b:e7:cc:de:49:46:d1:22:78:d4:4c:7d:1f:af:58:
                    5c:ab:74:74:8c:dd:0d:35:95:c5:4f:73:56:77:25:
                    f8:69:1a:ff:2a:fe:6a:4c:c2:ac:fb:04:79:69:45:
                    c4:79:fd:42:09:dd:be:bc:03:cd:e0:57:bf:78:31:
                    1a:52:20:95:83:9f:eb:2a:0a:32:96:ae:64:c0:2e:
                    d5:70:63:e6:ee:e9:0b:b0:16:9c:3f:5b:f9:69:48:
                    7c:8c:a3:08:5d:80:62:85:01:f5:cd:89:cc:eb:b5:
                    1b:d3:27:ea:40:74:52:af:68:2a:27:36:9a:15:df:
                    2d:f5:d8:3b:f7:02:94:31:74:db:0c:a3:ec:5c:74:
                    29:f7:ed:70:5a:43:79:98:b7:54:01:53:b4:c3:6b:
                    f6:ba:0c:7b:9f:69:33:31:52:80:a6:3c:93:30:19:
                    00:81:f0:a0:bd:c1:ac:34:bd:95:79:fa:d5:85:01:
                    69:b2:41:70:16:4c:b8:1c:b8:ab:a4:39:5f:39:3c:
                    cb:01:66:50:c6:5f:d8:cd:d8:0a:6e:3e:e2:f2:9d:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:48:35:00:A5:29:2B:BA:6F:A6:99:86:6A:B6:A9:2B:5E:DA:7E:B2
            X509v3 Authority Key Identifier:
                keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:8a:46:4c:ea:47:44:64:92:67:9a:1d:e2:46:db:4b:12:38:
         29:5f:ab:8b:ab:70:a3:ea:17:d8:fa:24:8d:af:98:1b:d5:b2:
         1f:7e:9a:1d:0c:fa:1e:aa:a0:88:25:6a:ea:cd:05:91:8e:d5:
         63:8d:de:e7:66:15:f7:cd:e3:c7:73:c5:b9:3d:df:31:c8:fb:
         d3:e7:a5:c5:67:c8:29:98:34:fe:86:7c:fa:b2:b2:76:e3:84:
         c2:37:8a:8e:58:69:9d:9b:9a:e6:fe:e0:b8:4f:23:af:5a:a7:
         34:79:31:32:20:0d:5d:52:38:05:36:70:b7:f5:50:09:48:66:
         87:f5:b9:f2:e6:0a:da:09:f8:b1:80:b3:4b:7b:8a:d3:0e:0e:
         45:fb:1c:9a:21:6e:87:91:cc:ec:dd:e2:9e:81:0e:00:36:86:
         b7:be:ff:35:e4:60:3f:da:1f:35:43:73:24:29:54:21:45:6d:
         ed:8b:d8:20:f5:cc:21:57:8f:12:07:36:91:4e:b8:42:1a:79:
         24:44:a3:10:08:f9:73:9b:26:b9:fa:0d:a1:a8:be:ec:6a:8a:
         69:23:e0:c0:6f:e0:a0:dc:2f:fa:25:19:14:77:88:cd:af:e9:
         a0:10:38:7e:33:29:d8:0e:a8:ea:0a:eb:2a:d7:cf:67:62:7b:
         47:b2:eb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----