Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
File:                     4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json)
Hash identifier:          TE3hKuMK32NWi1xkGzSrMjG2cSKUV253GTGEYsWdzhA=
Subject key identifier:   87:57:A5:6C:1B:21:40:76:3C:82:3D:47:25:FA:58:D7:81:AD:F7:CF
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Certificate issuer:       /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial:       01962E9936065C6D3B343FD04B6019CA28EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
Manifest number:          20
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: e+zG9Gfu/AqlaqWLQ/qRhvb/151tKJBPMu/oY46IcsA=)
                          2: C-s3qmcWvVMYI1a9KzViDKmJV5c.roa (hash: /bw45CjGjbfD9z7uFQfaYryXfUKu5UGOeYHJY32SaeY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:36:06:5c:6d:3b:34:3f:d0:4b:60:19:ca:28:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=8757a56c1b2140763c823d4725fa58d781adf7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:c9:ba:61:86:f4:fc:f8:f4:98:7a:36:3e:
                    b7:1f:9f:15:cc:7d:82:0c:40:77:1d:f1:31:9d:8c:
                    d9:6a:4e:09:ee:31:cc:8f:45:52:06:c9:74:f3:03:
                    d0:63:d2:a4:29:ea:62:bf:cb:e5:38:0b:b7:7b:33:
                    ac:84:1d:e1:af:35:b9:f5:df:46:f5:02:04:50:8c:
                    da:43:60:83:70:5d:61:8d:51:56:cc:53:cb:36:bb:
                    6a:b1:d7:3d:8d:e7:2e:0b:51:41:06:9e:a1:a8:a9:
                    14:e4:97:c0:4a:0d:d0:00:9a:bb:a6:de:04:8c:d9:
                    c0:b3:2e:72:57:1b:4b:e0:be:8e:d2:42:2a:70:fc:
                    89:18:54:e9:a1:c9:f5:c7:be:11:96:0b:f0:62:31:
                    a2:21:f5:db:e6:fb:bf:2d:a6:42:4c:3d:c7:23:df:
                    9a:2e:73:35:8d:62:74:f7:20:1f:a2:72:f9:5a:4f:
                    e7:28:ef:ab:a9:43:e7:7a:51:45:2c:04:fd:2b:50:
                    a5:ba:31:49:a4:96:2e:75:e6:5c:52:a1:fe:5a:0f:
                    55:17:35:f7:12:34:0d:b7:5d:88:8c:31:51:63:b7:
                    6a:55:cd:2d:af:2b:2d:c0:79:5f:01:c3:c4:33:80:
                    f9:69:8e:da:88:18:9e:14:2e:63:f3:5a:3f:08:2f:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:57:A5:6C:1B:21:40:76:3C:82:3D:47:25:FA:58:D7:81:AD:F7:CF
            X509v3 Authority Key Identifier:
                keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4a:48:91:83:55:53:fe:a7:52:ad:13:f3:a1:9b:0b:89:b9:
         ae:b8:3d:46:57:16:4a:2e:f8:d0:34:ca:d9:b7:1e:24:bb:47:
         0d:4f:5a:27:84:2c:ec:3a:6e:10:dd:87:60:2d:29:6d:b5:d7:
         e3:36:1c:9c:8f:38:3b:2e:c3:c7:ba:b2:bb:22:10:27:3d:e4:
         e9:79:3c:55:3d:cd:e6:10:eb:84:7a:c6:46:e1:7c:5b:76:57:
         40:e7:fc:03:17:e7:b0:3b:72:66:d5:40:33:d5:3c:31:0f:e1:
         4c:48:a9:6d:2b:73:1b:77:e8:1b:bb:79:5b:f3:93:37:7e:b3:
         5b:18:5b:c0:5d:0c:b0:b0:6e:e9:8f:a0:07:1d:93:f8:76:95:
         ef:54:08:d0:d7:9e:0b:f2:38:ad:a6:a2:69:de:57:31:8e:49:
         b2:85:12:10:ca:c2:6d:95:3f:fd:a2:4a:14:56:1a:ca:42:e4:
         08:7a:6a:18:ac:a4:b5:c3:01:c5:21:e3:87:a8:1d:80:2b:f7:
         c6:f0:0a:62:97:7e:53:a0:16:13:1e:bb:7e:75:88:41:49:c5:
         29:ea:5e:39:a4:bd:13:56:1c:f4:1d:c7:dc:20:09:24:eb:37:
         b0:b9:21:3f:43:cf:81:06:4c:b4:0b:48:c7:27:cd:d4:a8:96:
         1b:08:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----