Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
File:                     4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft (raw, json)
Hash identifier:          HanioxpZ7wnUmQrQtk7CJLqoOQlS3q27u+THvpJ6dSE=
Subject key identifier:   39:9C:F6:D3:AF:89:85:46:D9:23:03:5F:01:5E:4D:09:4E:EC:1E:46
Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
Certificate issuer:       /CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Certificate serial:       01962DF44686AC0D8EA171E2A3E45D716717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
Manifest number:          86
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl (hash: 6BYeY4eMpVAQwigRpRVPNEGVD5msLegJZNdCv2hoT4U=)
                          2: V9qSkag-yPFb6kdg7t_bXdafQY8.roa (hash: /gE5NbLPMb6fQQc04np3UK1UkGHwo2L/kFXUOBu9e5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:46:86:ac:0d:8e:a1:71:e2:a3:e4:5d:71:67:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=399cf6d3af898546d923035f015e4d094eec1e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:5b:fa:0b:66:14:f4:aa:d7:4f:7b:b1:4a:
                    0f:c5:95:62:7e:29:e4:e2:19:2d:35:d2:48:31:9f:
                    ef:c6:bf:14:4c:f5:b0:13:c6:3a:a4:38:2f:ad:fc:
                    33:72:01:60:6f:ad:bb:c1:82:0d:29:85:be:cf:f1:
                    aa:ad:d7:74:27:87:d5:25:da:13:05:71:76:e1:ce:
                    a1:13:c4:ac:4f:17:a0:7f:20:0f:42:56:f2:33:f9:
                    89:fd:72:de:29:5d:04:f7:66:13:3b:d3:90:f2:4c:
                    b8:e4:57:55:9c:c0:12:34:0e:56:6d:9a:66:b4:1a:
                    01:1d:4d:5a:dd:73:2f:04:1f:40:25:d5:56:08:3c:
                    1b:43:d0:1b:e6:fe:39:a1:ec:5f:40:71:cf:cf:bb:
                    ed:67:cd:ff:a8:62:90:8a:dc:88:81:00:13:98:f9:
                    17:f3:3c:16:5c:71:2c:f9:19:fb:f8:dc:99:62:cb:
                    d1:f6:ef:bc:3b:4d:f2:e4:93:c8:d9:89:06:30:ee:
                    16:8f:1b:26:48:dd:5f:7f:56:be:a9:ad:6b:05:c8:
                    2b:48:ee:4e:64:4d:af:c4:98:1c:04:08:e7:48:75:
                    f8:38:fc:5c:24:11:77:3a:98:c3:89:91:2c:33:27:
                    0e:83:e1:7b:94:b2:11:6f:09:1f:6e:7d:4e:f6:35:
                    c0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9C:F6:D3:AF:89:85:46:D9:23:03:5F:01:5E:4D:09:4E:EC:1E:46
            X509v3 Authority Key Identifier:
                keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:94:95:66:6b:6e:79:b8:17:01:9e:4b:27:7f:f8:20:44:56:
         e9:68:9c:0a:e1:3b:99:84:8f:94:73:74:48:56:5f:a0:10:ab:
         ee:df:86:49:ae:8b:31:d5:2a:e7:92:12:1f:0c:59:2c:bf:62:
         78:22:7d:0c:9a:0e:2d:71:67:43:28:c8:9b:67:8a:ab:cf:15:
         46:ca:6d:f6:8c:5b:07:d9:3f:4f:97:44:5a:58:35:6a:b5:ab:
         a3:ab:20:cc:09:c8:87:3d:a9:39:ee:43:77:bd:02:72:9c:83:
         87:19:08:c9:61:4f:a3:f9:c7:49:31:61:9c:4d:f4:27:80:b3:
         e9:02:93:03:7f:b1:33:ee:21:8d:b9:d3:77:92:c7:03:c5:5c:
         92:ae:31:ac:58:77:ef:6f:b8:1d:93:b4:7e:01:0a:52:9e:f4:
         37:6a:90:47:5d:61:b0:1c:da:14:a0:45:83:ef:36:9e:8a:fd:
         8e:1e:b0:f7:0d:99:37:13:3f:c0:5a:8e:dc:c6:41:bb:25:89:
         21:01:84:cb:16:17:55:9f:a5:54:80:34:7d:df:8d:28:d6:b0:
         3a:76:10:67:48:17:6b:e8:c8:18:43:75:ff:20:cf:21:39:e9:
         56:9e:3f:1d:f8:85:1c:15:de:4e:db:2d:fc:55:e6:a8:51:2b:
         38:89:39:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----