Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
File:                     4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json)
Hash identifier:          Ru9Nj49657/wD6yjMyVQL/zbMVg9IGWw/bnRVztBqmI=
Subject key identifier:   C0:BA:00:25:DF:0C:5E:71:7C:03:19:F9:6C:13:3A:21:C6:65:28:3D
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Certificate issuer:       /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial:       01962F064DBEC6FDB33D4B1CECB0B666BCF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: X04MvTLXVWvkDvPEd5m374OkCiEkWig+GnFTs3yqo8w=)
                          2: 8eT8mItdm-eFNRvcC95AKoGdkEY.roa (hash: V3x7HEHI2C6TpwyRaJQsDy3CR99xipPFrG4gu0IK5ZM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4d:be:c6:fd:b3:3d:4b:1c:ec:b0:b6:66:bc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=c0ba0025df0c5e717c0319f96c133a21c665283d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:ea:01:44:b3:d4:c5:01:33:8b:3b:e3:38:
                    c9:97:7a:12:3b:ce:5c:2f:98:6c:46:2f:0e:5d:b3:
                    a2:00:8d:60:d7:ea:cd:d4:8c:86:e3:d1:37:6f:d1:
                    6b:78:0a:50:e2:42:de:80:2f:71:d8:73:f4:70:17:
                    c5:d7:cc:23:40:76:a1:71:c0:4d:dc:db:97:35:45:
                    d7:6b:95:ff:ac:15:5c:ed:ee:fc:cd:6a:a8:38:4e:
                    92:30:db:03:b6:41:d1:4b:09:37:43:85:43:38:aa:
                    95:2c:21:39:db:c8:9b:45:6c:0a:fd:9c:a9:a3:60:
                    c1:7c:7f:20:2a:66:fa:4f:2e:09:0b:5d:bd:62:45:
                    43:02:a5:48:e0:fa:3a:e8:ed:f8:17:e5:a8:42:4a:
                    65:f3:62:e0:a7:ca:32:71:5e:d8:3b:ec:0f:83:fd:
                    7a:1f:a0:11:58:2f:ca:89:d2:77:03:68:80:3f:6d:
                    ae:88:6d:e1:74:0e:98:09:35:32:17:b2:8e:62:f7:
                    93:1b:dd:06:45:16:e3:ca:c5:7e:97:95:34:b1:f7:
                    8f:e9:e1:a1:17:12:70:a8:d3:83:b4:14:3c:37:23:
                    6e:a0:d5:26:80:5e:e2:77:61:07:c6:47:69:f3:86:
                    f2:92:5b:9a:d9:55:74:3a:18:fd:58:d3:81:c1:9b:
                    d2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BA:00:25:DF:0C:5E:71:7C:03:19:F9:6C:13:3A:21:C6:65:28:3D
            X509v3 Authority Key Identifier:
                keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:51:eb:47:36:9a:64:8f:71:33:31:b3:0c:bf:93:b0:b8:d9:
         6d:f4:56:9a:99:01:62:15:7e:85:81:78:b2:34:dd:0f:ae:86:
         31:db:b7:aa:ae:7b:34:38:33:9a:bb:ec:06:6d:4a:d2:3c:ae:
         a8:2d:e9:df:45:74:5e:5a:01:79:4d:06:37:a2:0c:4a:14:b5:
         66:3c:41:e6:23:a1:a7:1b:6f:74:0f:64:b2:2a:17:61:eb:7f:
         68:e3:9a:61:e3:04:ce:42:be:47:80:f5:f9:5b:ab:6b:d8:69:
         cd:39:b3:07:79:ee:fb:a1:c1:11:ee:f1:80:41:0b:50:56:a1:
         7a:ee:2d:12:38:3d:39:05:1b:19:38:4c:00:97:c2:84:71:d2:
         9b:2a:9a:06:61:5f:69:a0:6e:2b:d8:d9:ba:f8:38:a0:54:8a:
         2e:ae:99:58:20:db:88:37:ca:f7:c7:cf:04:07:e9:e0:24:2b:
         64:33:7e:f5:3c:f9:1f:31:4e:15:9c:f5:c9:64:3c:59:7e:78:
         ff:1f:26:65:4a:cb:f0:a8:06:a4:e8:31:03:3b:37:e9:99:b1:
         ba:f6:7c:cf:fb:19:bb:17:b5:50:01:4c:0c:75:e1:32:b9:26:
         3a:e9:c8:3a:05:68:d7:6d:87:60:e0:6a:79:9e:ee:47:b1:0e:
         0c:b6:b3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----