Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
File:                     P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft (raw, json)
Hash identifier:          1ujkA3IO0alTEuDP9qRmdoBvYh2dHCQE+EnSWlr3HyI=
Subject key identifier:   10:7C:66:57:AC:84:B8:B9:E1:E9:90:46:FB:00:CF:A2:D1:51:F2:F3
Authority key identifier: 3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
Certificate issuer:       /CN=3f8138fea066d6f504436001cc9d7f339db734c8
Certificate serial:       01962E617D9E22B7664AFF1F12CAFE0D97CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
Manifest number:          016C
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl (hash: GjrHQhYpse0OVq1tsGfDDWHGhf3RuN/8eY6TlEXodZs=)
                          2: a7YNlS63NsZTTW2uGzFrnfKok9w.roa (hash: A6Vj/t1HktktvRKs1GT2mBgPnzQ8ZrkihcAERAUHOMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7d:9e:22:b7:66:4a:ff:1f:12:ca:fe:0d:97:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8138fea066d6f504436001cc9d7f339db734c8
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=107c6657ac84b8b9e1e99046fb00cfa2d151f2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:d2:f7:55:2b:af:29:b7:db:7e:29:ae:3f:
                    4f:e8:c3:f4:c0:bf:b5:30:03:7b:a8:ff:63:17:76:
                    a8:fe:90:72:86:dd:ed:58:3e:f5:bc:c2:d5:31:f9:
                    36:ee:8e:05:7c:ba:bc:6d:09:63:67:7f:08:92:dc:
                    ea:4d:8f:22:fb:b9:70:78:93:c7:b3:f1:63:7a:68:
                    f5:25:3f:2c:74:c5:de:81:cd:b5:9a:24:69:2b:08:
                    a2:bb:ed:e2:a5:cc:3b:eb:7f:86:d6:24:36:4c:11:
                    5c:b0:78:3b:25:c1:6d:a1:26:87:78:60:4b:33:90:
                    48:d3:f3:15:1e:63:3f:0a:d0:da:96:37:5c:26:fc:
                    f2:56:6a:25:13:6c:f0:8f:46:d5:48:80:a3:10:e0:
                    30:5d:79:d6:9c:26:6d:6e:a6:0c:12:55:4b:13:09:
                    0c:fb:48:b6:d4:0c:02:74:fe:52:38:a4:97:23:46:
                    07:fc:d5:ee:b8:61:83:84:20:68:5f:9c:3f:b8:f9:
                    53:f2:1f:89:1d:e9:5f:a2:32:38:3d:93:ac:9c:99:
                    8b:3e:bb:86:31:f2:97:40:7d:b6:7c:44:78:8b:e2:
                    a4:01:dc:2b:10:a8:1c:59:33:37:58:68:1d:5c:ad:
                    dc:fa:50:91:cb:94:85:fc:2a:a8:ca:59:01:71:8d:
                    d2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7C:66:57:AC:84:B8:B9:E1:E9:90:46:FB:00:CF:A2:D1:51:F2:F3
            X509v3 Authority Key Identifier:
                keyid:3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:20:16:5f:ef:71:bf:24:e7:ce:ba:c3:c5:81:0a:eb:42:
         04:83:75:72:a2:57:3b:17:e0:13:b9:f3:87:f0:53:d2:65:9f:
         7c:05:de:fb:2e:14:37:08:17:c6:7b:14:97:e7:8d:f5:40:c9:
         26:a2:88:d3:59:7b:13:bb:bf:87:e6:71:c8:bf:eb:7a:a6:5a:
         1e:35:50:2b:f7:14:a6:ca:b2:56:4b:dd:5c:ec:c5:fa:67:db:
         2c:ac:6e:ae:e1:a8:46:47:c5:88:f8:46:c2:6b:45:1e:26:c6:
         1d:e9:73:2a:cd:e5:7f:87:eb:f4:1d:3a:1c:c9:9a:18:c0:16:
         b9:af:0e:c8:e4:ad:6f:7e:7b:b0:08:ef:1d:4f:cc:f0:10:d9:
         6b:a5:22:64:82:e7:2c:0f:d6:3c:49:df:c3:5c:95:fe:4c:06:
         48:2d:a2:59:f2:ba:fa:aa:0b:ef:aa:e1:07:f2:7e:39:f5:69:
         b6:e1:4f:65:41:70:47:ce:77:9d:a6:c8:77:a8:0d:6a:10:94:
         1c:36:f8:d4:c7:0d:0d:65:68:38:a6:cf:62:36:da:72:31:d2:
         1d:bf:de:2f:26:72:fc:51:0c:8c:9d:37:d4:48:2b:18:ed:c4:
         ba:f8:c6:6f:a2:c9:e3:01:0b:bd:1d:00:44:3a:99:c7:49:58:
         55:18:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----