Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
File:                     4V293KWBZpetEkXADKt2ryHsLjs.mft (raw, json)
Hash identifier:          1UpwxAwEkQONWRGsHmwQv94yTqOpOa9ewz0sX0Ql1yw=
Subject key identifier:   BB:29:06:16:E5:6F:CF:19:C3:8A:52:90:ED:12:10:EF:8A:8C:35:C9
Authority key identifier: E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B
Certificate issuer:       /CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
Certificate serial:       01962F06DEAB4F8EC80252CB8093802F45C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: 4V293KWBZpetEkXADKt2ryHsLjs.crl (hash: 7S7i2i+tVhCAevLDuq/xK+F9lmwKM584J3NjPCqkkZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:de:ab:4f:8e:c8:02:52:cb:80:93:80:2f:45:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=bb290616e56fcf19c38a5290ed1210ef8a8c35c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:96:b8:8e:0b:68:8d:06:08:3e:c1:54:06:8f:
                    41:e9:0c:38:50:ec:fc:c0:ac:53:da:0a:a2:0d:a8:
                    20:82:4c:fb:a5:b8:b0:ad:dd:f2:cf:a6:de:d3:e5:
                    c6:d6:b2:19:f0:d5:fc:52:01:7d:66:ed:b0:77:4b:
                    87:8f:c9:6a:d7:4e:94:f1:f3:ff:4f:3b:1b:b9:ac:
                    26:28:b9:2a:fe:6a:de:69:41:ba:81:04:42:66:8d:
                    1d:b4:a1:49:e0:22:cd:f6:92:42:6a:b2:cd:ef:56:
                    8c:ad:91:dc:46:9e:61:f6:03:11:be:fd:fd:07:92:
                    0e:06:c6:74:ec:ce:29:07:d9:ef:21:8b:ec:34:be:
                    b3:4a:66:d0:29:39:64:f7:91:78:94:91:57:32:5f:
                    20:fb:74:bb:f4:41:d8:d5:07:50:dd:f5:c6:b9:74:
                    0e:75:2f:b0:6b:8a:de:59:53:48:84:e8:8f:f8:73:
                    00:dc:c3:34:a0:98:99:f8:cd:1f:c1:ab:de:b8:8d:
                    58:f4:57:10:57:72:18:19:a1:6d:ed:46:88:06:40:
                    79:7c:25:af:93:46:c7:e7:f5:3a:0f:15:37:d2:7b:
                    03:cc:d2:3a:9d:20:04:a0:2f:90:d2:50:80:20:49:
                    75:3e:1e:1d:fa:51:1d:e8:dd:59:15:c2:34:2e:68:
                    f2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:29:06:16:E5:6F:CF:19:C3:8A:52:90:ED:12:10:EF:8A:8C:35:C9
            X509v3 Authority Key Identifier:
                keyid:E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:4b:19:4c:85:a9:6a:f6:f7:a1:5f:c5:94:f3:62:01:02:
         e9:14:3c:88:b7:0d:6b:da:00:f8:80:46:94:5d:40:d0:cf:16:
         7f:14:8f:67:7b:3f:b4:a6:fc:e6:5b:68:5b:60:c7:db:2c:4f:
         68:f0:d9:9b:10:36:e2:0b:24:74:03:a1:dc:94:a7:6b:47:19:
         5c:71:7a:f5:27:f7:71:07:63:29:de:54:a5:18:a0:fb:30:d1:
         8f:33:60:3f:7f:8c:bd:95:41:f8:26:be:bc:5d:e1:66:8f:ff:
         f7:0a:a6:dc:11:f5:3a:1a:62:15:16:b6:56:83:a5:ac:9a:9b:
         ff:0a:ab:e2:34:16:09:26:f8:f0:e1:ca:b7:c8:73:a9:6d:d5:
         55:8d:15:62:ea:2e:a0:1a:84:ef:5a:51:84:73:e9:1d:5e:7e:
         ec:4b:a1:27:d4:e8:84:fb:b6:db:69:5b:6d:4b:59:9f:ab:99:
         d5:1a:5a:41:f8:71:77:86:d9:0b:a4:68:bd:66:0e:6a:bf:a9:
         d2:65:a4:eb:c8:bd:7b:51:e7:19:22:2c:1e:c1:4c:00:e8:8a:
         60:06:41:86:5c:a8:76:c4:6f:9d:ad:29:47:a0:35:6b:6c:d7:
         f4:cd:ca:e3:6b:48:44:e6:50:4c:7f:cd:88:16:b6:0a:79:77:
         50:28:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----