Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File:                     4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier:          xoxW+pFn8WgvGxLp+4PjbKUf903uQE3MoKCX5n6AfEU=
Subject key identifier:   22:D9:79:47:1B:17:AD:D4:59:5A:6C:E2:84:AD:4B:26:1F:0D:08:62
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer:       /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial:       01962F3D61CE0906DD84C49559BCCB5B8E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number:          0BBA
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: 4HYpLpJdcx8foEBLfxuwm4FAOV5sxVXxw8efd+03nxA=)
                          2: CzgWRo2OrtBEMKgJ83rtq5Y3g98.roa (hash: 2xTrIXSTjNXzltKj7q0eYjRCvrpmaN3vPbRoQNYjpK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:61:ce:09:06:dd:84:c4:95:59:bc:cb:5b:8e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=22d979471b17add4595a6ce284ad4b261f0d0862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:bd:3b:20:40:63:a3:7d:eb:4b:84:44:c4:
                    cb:74:1b:e6:c9:a5:bd:3f:8d:b8:4b:53:21:ff:ac:
                    1d:47:3e:42:41:0d:ee:41:2e:79:96:a9:a7:be:c4:
                    14:a8:07:e1:f9:cc:4f:ef:f0:97:1b:28:e9:77:fb:
                    3f:94:8c:d3:c2:e5:d6:42:7a:e9:c9:2c:fa:12:52:
                    e6:5c:bb:1a:7d:00:41:07:ca:e1:54:ec:41:c2:ec:
                    01:7a:1f:95:2f:a0:a9:71:f8:e1:f3:21:cf:6a:86:
                    0a:1f:8f:46:be:32:93:20:4b:86:df:68:3f:16:4a:
                    3b:da:08:68:e7:1c:0d:92:af:31:2a:95:ce:c4:db:
                    0a:30:02:d3:82:68:a1:02:d6:ca:2c:c8:67:df:b2:
                    f9:e8:59:0a:79:f8:12:a6:8d:8b:d5:b2:04:d7:b0:
                    39:8c:8e:ed:12:6c:f1:11:63:76:59:a3:a9:4a:72:
                    a3:69:f9:d6:51:64:f9:9d:24:5d:77:db:0b:9b:92:
                    0c:29:b3:8f:7d:dc:3b:13:52:07:f3:fe:a3:fa:e1:
                    74:da:cf:e0:f1:a2:8a:4d:d8:04:12:f5:fd:2e:32:
                    1c:c1:da:35:70:38:d9:b6:dd:09:09:dd:59:fe:95:
                    b9:81:c1:ff:e3:6b:2d:54:26:d6:e3:6f:cb:44:e5:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D9:79:47:1B:17:AD:D4:59:5A:6C:E2:84:AD:4B:26:1F:0D:08:62
            X509v3 Authority Key Identifier:
                keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:55:7b:0a:05:e5:fd:de:7d:31:89:f5:fe:48:1d:c4:65:03:
         09:75:17:f3:7f:74:9c:1b:40:a9:ba:b7:7d:42:ce:37:26:ba:
         fd:d0:c6:c2:96:8a:b7:0d:f2:5a:42:56:58:64:bc:98:1c:2b:
         40:e4:d9:67:c0:e0:cf:01:b9:48:f1:1f:2a:11:cd:19:49:5c:
         7e:3e:33:2c:50:ab:bc:f3:f2:d8:9f:59:8a:82:57:e3:3d:32:
         f1:32:3f:9f:28:7c:1a:5d:f0:f7:07:b9:b2:87:aa:da:30:04:
         9f:bd:d3:64:b5:c3:be:e1:a2:43:6c:c4:67:99:3c:e5:16:c9:
         2a:22:a1:d0:e7:05:31:b7:07:fb:a3:7d:dc:73:90:64:34:93:
         11:b7:b6:0f:71:e4:11:be:58:c5:7b:d0:4a:27:2c:d7:a9:ab:
         22:05:dd:87:a2:29:4d:26:9d:cf:5d:f3:d5:ec:0f:38:e8:13:
         f8:37:b4:80:cf:57:1e:99:f1:e9:57:ca:7f:7c:7f:24:fc:43:
         8a:11:36:0a:1a:9f:d7:90:cc:d2:f7:e5:63:8e:24:58:b5:4e:
         11:d3:b6:f5:65:06:6f:52:4b:d0:a2:ed:18:5a:1c:89:37:af:
         4d:30:fb:a9:91:03:ff:f3:07:16:73:57:f1:80:db:a3:08:ca:
         85:e2:27:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----