Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
File:                     4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json)
Hash identifier:          0fjSVRr+KrQ1FAONEWMV3OLP2+QI5K2uq4qOx9XDb/c=
Subject key identifier:   F4:85:BA:81:2E:D6:A5:B9:BD:C6:FE:48:65:EE:B9:B3:EC:C9:65:C4
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Certificate issuer:       /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial:       01962F063EB0C8DE6AD299CB414496EAB6DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: DUAl8+LT0P6OZjE9RIxAItYXrBu8T5QvA6woXVNUtrY=)
                          2: IcskwdSROKi9qZels4yHQYnddgE.roa (hash: vPtKorJ6NxT7CsrYyPVFrqYiL53IkN4t+VtNjaUnOjc=)
                          3: R1WYdjBFxaqOJXdmYl0VkK_31-A.roa (hash: jZxWD0uM9IaDgIRuAxwkdjeq40Xiof3RV5ZUg9OIXw4=)
                          4: UgQvx_lbsNuoPrOWEqQQU5trSo4.roa (hash: n18F2sXvjdyTqUjm8/utigztVnaPt5K+HXMDSCAPMDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3e:b0:c8:de:6a:d2:99:cb:41:44:96:ea:b6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=f485ba812ed6a5b9bdc6fe4865eeb9b3ecc965c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:69:24:60:d2:57:bb:a5:c0:a0:0c:6d:75:
                    b8:15:f7:1c:42:33:6f:43:fc:56:8e:0f:0a:0a:2a:
                    f7:e4:95:c9:af:fe:d1:09:33:ff:10:b6:46:e7:b8:
                    07:94:c8:80:3e:1e:3c:f8:14:e5:58:e1:f1:b9:2b:
                    a6:e4:c4:b4:ac:8c:f1:d4:42:e4:37:25:7a:91:62:
                    56:d6:58:5f:3e:f5:6b:00:99:01:5f:94:bd:57:38:
                    d9:4a:73:5c:d4:37:f3:dd:e1:47:61:01:71:82:45:
                    5c:f6:fb:13:57:cf:75:ac:4a:42:68:33:88:eb:81:
                    ce:ea:62:e6:e9:b1:ec:ef:46:2b:2c:4f:05:b9:83:
                    07:e2:72:dd:cd:05:d7:b8:f5:35:48:01:c4:17:29:
                    08:33:a5:d2:d5:fc:50:ee:8c:15:c7:11:42:5a:92:
                    f8:b5:d4:41:2d:42:d1:54:58:69:7f:8e:60:4b:1b:
                    02:d2:57:98:6a:ce:5f:c0:fe:ed:42:c7:2c:60:63:
                    35:8d:44:88:a4:f2:be:b0:ad:c0:7b:55:ae:1b:86:
                    ce:1c:6e:56:77:f5:99:e6:8d:0b:b3:d9:9c:2d:79:
                    91:32:c3:a4:89:e3:d8:12:4d:45:27:3d:57:05:22:
                    2c:55:f1:63:01:26:8e:f3:ee:f4:e5:09:73:61:9a:
                    30:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:85:BA:81:2E:D6:A5:B9:BD:C6:FE:48:65:EE:B9:B3:EC:C9:65:C4
            X509v3 Authority Key Identifier:
                keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:04:e9:ad:6f:bc:d5:45:6d:19:ed:52:7d:bd:53:0f:ea:32:
         bb:58:58:27:e2:90:9a:63:94:b8:bc:ed:07:5c:53:bf:3c:91:
         06:cd:fb:8f:e4:7a:37:31:90:8b:8c:07:9c:42:a2:83:2e:57:
         4f:0c:eb:16:aa:81:7a:9e:d1:cb:70:e3:98:27:b9:76:39:98:
         2e:b6:8a:54:a0:7a:f3:b0:5a:61:e5:7c:b9:3b:1c:30:4a:cc:
         23:ae:62:b7:66:6d:a4:17:8b:56:55:a1:46:ae:22:4d:00:77:
         12:8f:4c:54:76:c5:f5:00:f1:65:9e:5d:a4:90:e3:a3:e9:c9:
         df:16:f1:ce:ff:62:e3:b2:6b:1e:aa:0e:34:27:d8:2d:d3:60:
         54:71:cb:c7:e8:09:0b:cf:d3:bd:f1:82:a4:de:1a:2d:a4:93:
         98:f3:3f:81:83:2a:a3:d9:36:2a:fb:4d:3d:a7:ac:4e:e4:cd:
         f5:23:e9:aa:b3:c9:f6:6d:61:14:d3:e7:04:e0:ed:29:bb:e0:
         66:30:7a:7d:27:fb:af:f8:74:67:52:13:4b:b0:de:0d:92:d2:
         3a:2f:04:29:47:d9:0d:1f:82:5d:0d:71:0d:56:b6:4b:68:f9:
         ec:8f:99:98:d7:4f:8b:d0:e4:9f:16:3c:84:c6:03:e2:69:f0:
         e0:4c:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----