Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File:                     4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier:          e5Kf8q9WVY4/tf7jHxU7b7m55eiTLo52On2q/XtpHEM=
Subject key identifier:   1A:7E:AD:77:E3:50:F5:4A:53:50:2F:4B:F8:CD:54:6F:36:17:8F:1C
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer:       /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial:       01962E61D0AEA13B52CC055AB4C39E4AA03B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number:          0515
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: yDSewXw5QVPDwOnB3eYMo6SgLw+idCif8crK2e2PAis=)
                          2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d0:ae:a1:3b:52:cc:05:5a:b4:c3:9e:4a:a0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=1a7ead77e350f54a53502f4bf8cd546f36178f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:bc:7b:49:91:36:7f:d9:bf:fd:7a:ed:fa:
                    b8:55:28:90:79:a1:63:7d:8a:28:56:e2:4b:c3:36:
                    d6:87:20:3a:59:f8:20:15:8f:49:2e:b0:e4:47:61:
                    2e:a5:83:e5:b7:89:34:e2:13:5c:bb:c6:58:8b:f3:
                    8a:2a:56:94:e6:49:f4:4a:e2:a6:e0:37:f1:47:61:
                    1a:c4:78:67:4b:8f:0a:97:eb:33:8c:f5:b1:20:51:
                    7d:6d:3a:a5:80:df:cf:85:f1:a2:37:ab:12:a8:9a:
                    24:8e:97:4e:a8:92:41:66:6f:9a:39:d7:d9:e8:3b:
                    4a:7e:33:44:51:5a:c4:bc:ee:d2:8a:e6:bb:6a:20:
                    8a:83:7d:bc:aa:d4:9d:5a:e3:15:5f:43:4a:14:a2:
                    fd:49:84:ce:6f:64:40:17:46:b4:ff:4d:8b:1b:50:
                    39:85:df:1e:b2:a7:9d:03:0c:79:2d:19:2d:c0:56:
                    ad:64:78:55:14:72:df:37:6b:85:73:37:70:5c:e3:
                    51:86:8c:b2:aa:9e:dd:23:93:81:46:4c:8c:86:f0:
                    60:d7:b1:13:4d:35:11:d0:3f:9e:c3:2f:c8:6c:33:
                    1e:62:55:25:95:06:08:04:58:ad:8a:13:2f:67:80:
                    36:66:0b:72:c2:a9:fc:2a:88:01:fd:c1:eb:6a:09:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7E:AD:77:E3:50:F5:4A:53:50:2F:4B:F8:CD:54:6F:36:17:8F:1C
            X509v3 Authority Key Identifier:
                keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:69:b7:11:7e:78:59:eb:d6:52:2b:c6:e3:89:fa:aa:74:e5:
         4f:00:18:37:77:02:f3:f5:a9:c5:b3:d1:0d:6a:df:cb:41:6b:
         7c:b6:5b:54:e5:7f:88:26:f1:bd:2a:c6:c4:af:f8:47:2c:03:
         7a:03:21:81:62:a0:76:ac:4f:a8:0b:46:d5:79:a0:96:61:58:
         1b:98:d1:fe:b0:2c:6b:63:0b:93:73:55:2a:c2:50:2b:23:50:
         e7:d5:77:27:a3:4b:b0:38:84:4e:4d:d5:d3:41:78:c7:e6:88:
         c0:f5:e7:b7:e9:6f:c7:af:08:80:82:b2:02:d9:db:16:01:4e:
         4d:5e:69:57:ba:20:2d:81:29:41:e8:38:5f:27:29:27:7f:9e:
         7d:1e:34:05:b0:5e:b4:ee:90:df:f5:e0:99:84:e7:3f:92:ee:
         7a:37:08:c6:d0:74:b4:99:96:51:30:8d:77:f9:2f:d4:d5:39:
         a4:e4:62:f3:e1:40:2e:a1:ed:43:7e:c0:d7:bd:19:4f:14:b4:
         a8:01:16:d8:f3:f9:98:06:11:dd:79:ef:85:29:98:df:b6:a5:
         21:85:c9:55:97:db:64:1c:03:b7:34:b8:01:d7:4d:92:0a:12:
         5c:68:34:2c:98:9f:62:61:fb:08:89:21:a4:18:3b:7f:db:50:
         18:ae:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----