Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
File:                     4b3MskUKGgU8icwhPkrpuGR4LeM.mft (raw, json)
Hash identifier:          Kp7qY9fCQzs6SaHIFbREkSHyPQ3U0t/7YP6K8OQyLN4=
Subject key identifier:   6C:B3:BD:10:67:44:A0:26:E6:5D:E5:4F:5D:CB:A5:60:97:FC:AF:90
Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
Certificate issuer:       /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Certificate serial:       01962ECF822BC8F29EE46EE52376ED2F257A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
Manifest number:          0DD2
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: 4b3MskUKGgU8icwhPkrpuGR4LeM.crl (hash: +JuMlSht6Huu/eLbA600BDWaQpD7gbgbruNd4+HTDZM=)
                          2: 7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa (hash: OVRCNzp/6ULY8TXLR8C+JnnDlpd68DlkSuJjHaG4io0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:82:2b:c8:f2:9e:e4:6e:e5:23:76:ed:2f:25:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=6cb3bd106744a026e65de54f5dcba56097fcaf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:97:45:fe:45:97:bd:78:dc:c7:18:b0:6b:
                    70:4f:02:db:12:30:3f:bc:cc:7e:23:ac:f1:a7:b6:
                    0a:b7:99:84:6c:c9:ad:2f:5b:16:81:47:e1:33:b0:
                    41:28:88:7b:f4:77:d5:82:30:c5:83:37:cd:5e:29:
                    a6:00:74:6e:9f:68:50:5e:eb:ba:f9:32:67:80:b1:
                    da:25:a8:64:bb:7c:4a:1f:02:c2:82:0f:d5:46:63:
                    3c:f3:da:04:a5:a4:d8:a8:92:7b:a3:3a:d2:ec:cc:
                    60:ef:5d:86:2e:64:a6:53:f5:a1:ac:86:9c:14:6f:
                    3a:13:5f:7e:61:b3:d0:4f:fa:76:ce:b4:11:98:8f:
                    bf:c0:46:b3:7f:8e:24:71:64:7f:73:27:e5:4e:59:
                    0d:20:72:b8:d5:e1:4b:63:61:76:69:5e:3f:9b:3c:
                    97:f0:cf:3c:b7:37:c6:9b:c9:73:5a:5d:3f:3a:9a:
                    1c:38:b7:7c:3a:22:17:94:24:25:6c:72:e0:8e:8a:
                    06:0c:13:28:13:d1:6d:ce:5a:7f:84:65:ce:74:83:
                    7f:af:70:dd:d6:39:2f:51:42:4c:dd:d1:b4:3f:2c:
                    15:26:8a:10:a9:8f:c0:3e:35:af:45:c8:a2:0d:85:
                    f1:7a:d9:03:c2:fb:75:70:44:65:0c:c7:d4:d0:cf:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B3:BD:10:67:44:A0:26:E6:5D:E5:4F:5D:CB:A5:60:97:FC:AF:90
            X509v3 Authority Key Identifier:
                keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:40:2a:4f:0f:62:a7:46:af:94:08:71:16:a6:55:22:7c:09:
         84:12:7d:aa:d0:0d:16:b2:75:b5:3b:d0:10:15:63:0a:42:61:
         8a:23:dc:c2:8d:d1:4a:a2:f3:30:3b:b0:4c:2e:ce:2b:9a:5f:
         8c:93:ed:c0:29:8b:dd:67:15:bf:c1:ee:11:de:dc:1d:e7:eb:
         7c:ef:59:b4:a0:19:4f:1c:0a:c2:2b:43:15:ac:22:51:cd:04:
         65:37:a4:c7:a7:52:b3:8e:a4:4a:63:67:64:ef:e7:b9:57:f7:
         01:25:6c:96:49:33:16:dc:39:ea:88:76:a0:c0:1e:2a:3b:02:
         6f:5b:1d:2e:b4:ca:d3:4f:3f:5f:6b:7e:8e:15:1c:d1:a6:f3:
         02:e3:aa:90:64:1c:c3:dc:fd:6a:88:b3:a4:2b:3c:4e:0b:c1:
         42:e9:cd:29:9e:c7:ed:9f:f7:3e:58:39:41:53:df:65:03:da:
         2d:ee:6b:e0:5b:e0:f4:ab:07:56:8c:55:75:c1:c9:ac:dc:6f:
         0e:65:ea:d6:7b:1a:71:ff:b4:0e:eb:70:bb:2b:4d:89:bf:a3:
         4f:6c:ed:be:8f:89:ba:89:51:06:5a:6b:76:69:46:b2:31:8a:
         de:f6:9b:e9:cb:5d:da:fe:a8:7b:c9:e5:1a:62:8d:83:71:a6:
         ad:09:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----