Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File:                     4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier:          JcHBmg5MHaQYmFeWYIn3TDhF6laSwlHIzGVF2JJ2jBc=
Subject key identifier:   1A:75:D9:77:C5:ED:8E:53:EE:0E:33:AB:86:D3:44:21:E4:98:FF:7E
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer:       /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial:       01962FAB3E31008E70F760060C00C28AC812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number:          11BF
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: 7eooQL5aE337DAauCvMYJqGSaXdDRsOe6W3UPZttsUU=)
                          2: Gwy6_uUvgZKl_FsgbK0SBR2765s.roa (hash: e+42Dv5ZMct1RmCP3DiJKtyiBUgVYfDjN9qagjZj7ck=)
                          3: RoGLSCET83zk1v-3GNDAGUmNCf4.roa (hash: TK8/4ls6e1537IxcrmPC8DEH8k32Or5yu+pxFNpz4Eo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3e:31:00:8e:70:f7:60:06:0c:00:c2:8a:c8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=1a75d977c5ed8e53ee0e33ab86d34421e498ff7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:8f:31:46:9c:fb:67:f7:1e:2a:f7:20:ae:
                    f2:2b:66:2f:ee:ff:e1:dc:d7:1e:18:23:68:ef:58:
                    34:dc:46:4a:e9:91:ac:c9:75:d7:b4:cd:37:b1:94:
                    0a:82:cc:40:6d:f2:60:4e:0a:34:a8:ef:18:e8:ef:
                    64:fa:cb:41:af:a6:c5:2b:e6:f7:0b:44:b8:c4:71:
                    56:75:4d:b5:41:53:fe:30:38:dc:06:91:b5:ec:4d:
                    53:b2:32:94:e9:76:8d:1e:bb:b1:5c:fb:e9:39:78:
                    aa:be:d3:58:bb:bf:ec:86:30:c0:85:61:bc:d4:74:
                    19:74:00:59:34:05:94:9a:00:5a:0f:97:06:3e:71:
                    1a:0f:36:8c:a7:8b:30:2d:89:52:86:b0:2e:e0:d9:
                    cf:20:3f:69:04:a3:6a:77:d2:7a:40:5e:f4:bb:5e:
                    67:41:5a:8a:7b:39:21:ed:c0:77:a3:f0:72:50:c0:
                    98:8c:ac:0a:6f:30:4a:b7:b1:bf:88:bd:00:cc:9a:
                    64:3e:5e:f3:fd:22:64:dd:34:a6:fb:1a:65:a5:cd:
                    4a:03:06:ea:60:65:42:e2:30:ef:f5:be:72:e6:20:
                    6d:65:92:48:d3:90:0f:a6:4a:03:ad:b9:92:d5:ca:
                    77:78:9c:6b:af:b2:cd:1b:d5:c3:2d:33:2c:b7:9e:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:75:D9:77:C5:ED:8E:53:EE:0E:33:AB:86:D3:44:21:E4:98:FF:7E
            X509v3 Authority Key Identifier:
                keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d9:ed:df:f6:23:9b:4a:16:80:77:b9:b4:08:e4:62:e1:94:
         3f:23:91:c8:df:b6:07:85:bf:28:e7:12:6f:9f:24:ba:b8:5f:
         8b:a9:6e:2e:52:e4:cb:1a:a3:02:f1:a7:be:96:94:c0:a3:84:
         ac:75:88:1a:ea:86:0f:47:be:d9:8b:19:51:0e:1b:56:f3:8d:
         9f:e7:8a:3d:fb:fb:1d:14:68:d5:a8:e7:ba:2d:4a:6b:81:67:
         14:b1:b7:00:22:c5:72:fe:e5:ea:5f:80:06:a4:60:b7:c0:c4:
         cf:11:13:e0:64:46:ea:03:3c:61:eb:d0:62:31:e1:95:c6:2f:
         aa:e4:79:c7:cb:41:2b:0c:57:2d:73:6c:e0:77:fe:e0:f7:c9:
         3a:e7:9a:0c:37:7a:f1:e7:94:bf:f5:9b:90:33:6e:eb:0f:9b:
         da:d5:5a:71:d9:cb:83:78:5a:49:37:20:65:8b:44:96:8a:04:
         fb:02:b7:e3:b4:6e:20:81:5a:ba:d0:1c:ec:3a:5e:56:68:32:
         66:79:85:ed:cd:b9:d5:56:34:7f:28:e0:25:a9:18:41:6e:ed:
         a4:2b:22:c2:4d:d7:80:d7:09:18:35:4a:ba:65:1c:2a:bc:3e:
         01:ef:50:8b:eb:eb:cf:e5:d5:8e:e9:ef:d8:75:a1:cc:68:12:
         56:d1:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----