Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File:                     4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier:          7toq8TfhlV+N1gC1/Z5+MsRp8t1/Niu+zseKdsbjPq4=
Subject key identifier:   5E:C3:A1:F3:57:A3:10:B9:73:FC:80:3B:81:24:66:DE:03:02:F4:A9
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer:       /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial:       01962FAB697394F550A8DE5FDF4CB95B932F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number:          0D9C
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: odgdzVE06b7okbwzAqpinXsMSecPApdhVouqLZ1XKMQ=)
                          2: Mz3zdOLpdrQGVZtJncItYpvPliE.roa (hash: 6F2PNmZ9ECufEFXZhtjXXLlbHL0vIzCdtjQEK5a/NJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:69:73:94:f5:50:a8:de:5f:df:4c:b9:5b:93:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=5ec3a1f357a310b973fc803b812466de0302f4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:aa:e7:bf:ab:ee:be:d4:3d:03:1c:be:f7:
                    cf:49:0e:17:cd:7a:b6:56:5f:cc:04:5c:25:d1:26:
                    0a:38:80:c2:79:f0:a4:58:fd:b1:3f:13:d9:7e:49:
                    f8:85:9b:ff:eb:d2:b1:81:96:6a:ab:fb:52:cb:70:
                    f3:e8:35:57:b1:b3:0d:c8:a1:55:2f:4b:ae:3a:e3:
                    fd:7a:43:17:90:92:63:e2:30:8f:63:4b:65:f8:2c:
                    d3:be:01:93:4c:d0:d6:12:8c:a6:0d:d6:94:c0:82:
                    96:f9:02:fc:3f:d8:ad:b3:af:03:e3:4f:e4:fc:57:
                    16:34:8c:a0:87:48:4b:75:80:83:fc:ae:8d:a5:e5:
                    e5:83:5f:22:93:63:6d:4c:b2:f9:c9:3a:5c:50:f0:
                    10:df:a5:d9:2f:0e:17:f2:4a:b7:5f:e8:5a:e6:34:
                    9a:96:fb:25:a5:bf:7c:b7:b8:92:be:75:cc:60:5e:
                    e3:8f:92:48:f3:f3:f9:41:10:0e:f0:86:d1:e7:3b:
                    39:14:a3:ed:8d:a0:9b:f1:c3:ae:c8:9b:84:d5:67:
                    59:5b:33:2e:f7:de:b7:97:f9:5c:d3:ce:ed:d4:03:
                    8c:3c:8c:59:7b:db:be:8b:ca:4f:1f:d3:8e:d6:44:
                    ff:c9:41:7f:55:d7:94:39:13:d4:91:c2:76:7c:87:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C3:A1:F3:57:A3:10:B9:73:FC:80:3B:81:24:66:DE:03:02:F4:A9
            X509v3 Authority Key Identifier:
                keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:8d:a8:45:97:2e:fc:7f:b7:90:05:b1:4f:f5:34:75:21:4d:
         4a:34:7c:da:42:00:a3:df:ca:4b:6b:96:26:29:e2:a2:68:c2:
         e9:0e:7f:6d:f1:7d:8d:21:38:1f:d8:f1:ac:70:66:37:34:d4:
         88:00:65:fd:cd:66:19:0b:b1:ce:9a:16:d4:dc:01:bd:3e:3a:
         3f:77:f5:91:5b:47:50:3a:ea:d6:15:ad:75:aa:44:dc:1a:6b:
         5a:e5:d0:be:45:46:85:26:88:f1:06:d6:47:95:ad:24:17:dd:
         77:c2:0b:03:98:3a:19:d9:b3:53:dd:56:df:e6:50:45:9e:23:
         ec:e9:56:0e:e0:f6:9c:55:ed:00:95:f7:ca:8a:b9:f6:a0:a1:
         49:4c:d3:aa:12:92:a2:60:70:60:2a:80:47:be:99:27:16:80:
         b6:ee:c0:0c:23:c0:d9:07:99:f6:ba:86:e3:70:39:15:f7:21:
         d2:2e:60:36:a5:6f:6b:b4:99:6b:45:6e:f1:f7:9e:16:3c:b3:
         66:92:44:d8:c8:dd:6e:3b:10:82:b6:0a:d7:22:7c:4c:58:96:
         f4:28:e3:ac:46:5b:d2:21:61:b3:c5:ae:1d:5e:2b:18:34:83:
         bb:c3:de:ce:d4:fc:b7:91:9a:08:1d:bf:5f:a3:bc:36:83:aa:
         33:94:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----