Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File:                     4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier:          HL6Qlph04Dp86X3ptKMP4BYRraU9VtHkmcO8Ej6CcaQ=
Subject key identifier:   D6:D6:52:B0:2D:B6:AD:E6:CD:26:82:D6:CC:11:9E:1A:82:94:66:43
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer:       /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial:       01962E61F8D11DB7D713DD433E1BAC7FC2C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: 6m/yFPwP3A9jsPAtL7yFRGKlQ1CwTFSRNQJSUdRqfRI=)
                          2: X6zK_zIJEJ4ZvUFy-bZ0YYb3PXk.roa (hash: 73bfs58Aeh5k14l65MP0sPTsNd9XJmQVqU0en4/SkEQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f8:d1:1d:b7:d7:13:dd:43:3e:1b:ac:7f:c2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=d6d652b02db6ade6cd2682d6cc119e1a82946643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ac:b1:88:28:39:bf:fa:9f:9c:24:a6:06:54:
                    b7:46:9d:ff:81:0d:d6:ec:a1:d9:05:c6:96:ec:a0:
                    2d:70:82:66:d7:e4:f7:c8:c0:94:c8:f0:03:bd:34:
                    c1:c7:0c:48:ef:66:e7:1d:f6:46:8c:e0:7b:f2:2b:
                    3e:a7:66:90:65:c8:09:70:b3:32:39:9e:72:79:11:
                    c2:55:98:b5:d6:db:48:56:08:8d:c7:42:bf:78:3b:
                    04:02:9e:80:b1:7f:d1:0a:3e:4f:ba:9a:2e:6b:1e:
                    e8:b0:fc:03:a4:ec:25:20:75:58:01:ee:d7:91:e2:
                    74:9a:e2:af:05:9f:98:3c:8d:06:17:6e:a2:99:3d:
                    37:27:57:62:19:09:54:5e:df:13:1a:44:0d:4d:9a:
                    fe:81:b3:69:fd:47:92:c4:cb:91:1c:7e:fa:fe:11:
                    bd:27:1f:5e:26:2a:78:ba:be:c9:71:3d:90:92:95:
                    45:29:a8:15:96:68:78:a2:ef:fb:4c:e2:fe:e2:e4:
                    02:35:6a:4e:e5:c9:96:f5:33:dc:b4:95:38:6d:54:
                    ec:8d:b9:fb:69:3a:0e:46:a6:50:00:02:dd:9b:b2:
                    d2:3d:38:af:74:b0:98:44:9b:d8:a7:64:41:21:66:
                    69:36:ea:1b:0e:d7:a4:c9:20:64:be:06:67:fc:08:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D6:52:B0:2D:B6:AD:E6:CD:26:82:D6:CC:11:9E:1A:82:94:66:43
            X509v3 Authority Key Identifier:
                keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:d7:25:89:64:c6:0b:0c:9d:28:c5:29:25:a5:c8:a7:87:
         67:3d:21:de:84:c7:82:61:d2:95:53:93:74:17:82:3b:57:cb:
         22:5f:2f:74:eb:be:72:1d:ef:01:ba:82:84:0f:0e:40:30:e6:
         15:b5:2c:39:53:61:82:75:e3:49:44:66:ec:0e:f4:56:3e:a9:
         6a:e2:19:ee:cf:27:9d:27:68:8f:f5:1c:5e:bf:9f:d4:5c:95:
         af:26:04:7e:bc:68:61:73:ed:b8:5c:49:5b:5e:b0:0d:b8:89:
         6f:4b:09:ca:67:69:a4:1e:92:99:42:a1:4e:66:4c:df:54:41:
         81:f7:5b:36:da:16:a5:6c:66:c1:48:cd:00:57:3e:86:09:97:
         be:14:67:d2:19:2e:20:76:cb:58:2c:a1:89:1b:14:8c:1c:e9:
         f7:1f:71:79:1f:34:b0:38:40:a2:92:26:cb:35:d8:00:e8:4e:
         1b:90:61:91:cb:9f:b3:0d:fe:70:af:bd:7d:f7:bc:7e:d7:3a:
         7e:f4:bf:20:31:90:7c:cd:97:9b:95:38:6b:88:e1:03:41:e1:
         91:0b:0d:96:90:99:88:26:23:de:e0:f4:07:8e:2b:21:6d:63:
         b2:10:3a:68:61:c4:e3:dd:75:53:60:61:6c:8b:ff:c4:17:1b:
         ed:34:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----