Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File:                     4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier:          oeDBFA80aJn7qoVA5jaQNtBLfyNDW3Trp75vRXuwRc4=
Subject key identifier:   EA:1A:D1:B5:0C:EB:01:55:AB:9F:A1:A6:28:15:11:6C:EF:AA:BD:67
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer:       /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial:       01962E61D551F1C4C6989C19852759A86D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number:          0169
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: +tr5xu3bd2YxsY2YPb0hY1i4LtWMmIV/EjL7PbgGMbA=)
                          2: 6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa (hash: OehC5Yx+JGVn7qI8wxptwUUS4CQUtx99kzGyWmtybhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d5:51:f1:c4:c6:98:9c:19:85:27:59:a8:6d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=ea1ad1b50ceb0155ab9fa1a62815116cefaabd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:fc:87:01:5a:89:f9:36:62:b5:05:f3:fc:
                    8e:70:5f:06:6b:c3:f9:69:22:f9:99:fc:03:be:be:
                    77:8c:5d:16:4d:78:7a:3d:62:57:2b:7b:52:06:b3:
                    2c:d7:8e:96:f3:cc:cb:f9:d5:35:b2:b0:83:be:83:
                    b2:5c:6f:39:03:9d:36:96:e3:80:f3:fd:81:26:d6:
                    d0:ce:b4:a6:47:98:47:e3:15:71:5a:15:84:b4:51:
                    44:67:fa:48:97:f4:cd:92:21:4f:a3:30:0f:4d:5d:
                    cf:cf:e5:16:de:05:57:27:85:64:66:d4:3b:d8:94:
                    f9:9f:3e:ce:7a:3e:81:3c:34:a0:70:2e:62:31:6e:
                    08:d6:4f:d9:f8:ce:bc:dd:43:aa:ef:75:c9:2e:aa:
                    fb:c8:e6:40:c5:06:30:7a:d6:93:08:d1:4b:55:8d:
                    fe:ad:86:67:9d:30:f5:e5:73:ea:f4:b6:17:1f:87:
                    27:16:b8:72:e9:62:15:ad:3b:fe:30:23:4f:78:28:
                    08:d9:52:45:28:99:7c:4c:f2:6d:51:33:b6:50:0c:
                    d9:f6:3f:4f:80:a3:a2:c9:99:14:1d:66:86:62:ea:
                    9c:60:6f:5c:a7:d4:91:73:d6:29:35:72:75:41:e3:
                    f6:29:c3:a4:3a:b0:b3:c9:e7:c9:9e:86:f9:65:da:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1A:D1:B5:0C:EB:01:55:AB:9F:A1:A6:28:15:11:6C:EF:AA:BD:67
            X509v3 Authority Key Identifier:
                keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1b:5a:59:28:bf:4b:f2:72:13:03:59:e9:06:4f:78:9e:ca:
         9e:98:0e:50:a4:9c:f1:c0:50:24:27:e4:a6:4d:ad:bb:9e:01:
         70:95:e6:97:64:18:d5:0f:9c:9c:52:c3:53:8a:1d:34:8c:a8:
         bf:9e:90:be:00:b4:ca:55:90:98:e7:ef:16:4b:c3:fb:7b:57:
         db:2d:a5:a3:1d:62:d4:b0:92:02:64:55:9e:18:2a:b6:42:ba:
         53:44:2c:98:92:8f:77:09:96:92:b0:70:e3:e8:12:32:ae:6b:
         15:d6:ca:06:80:f5:bc:9e:c0:e1:8d:f1:33:31:8c:67:46:2a:
         33:79:0d:69:a6:71:0d:b0:f2:70:75:40:60:05:b0:b1:a5:99:
         1f:c2:e9:3e:8f:9b:1b:a6:0d:22:71:2f:e8:7f:24:26:f8:df:
         e3:cf:3c:8a:60:ae:99:3f:65:e6:c2:09:eb:fb:f8:d3:48:11:
         97:4c:d7:2f:9c:e6:0f:de:5e:f6:15:64:81:58:30:2d:b5:50:
         0f:2d:b2:b3:89:bb:4a:c5:0f:b8:fb:e0:2f:20:fd:9e:7d:92:
         98:41:d2:45:2b:3b:5d:e6:de:f4:fc:83:9e:8a:91:20:55:19:
         e1:e5:28:ab:07:0e:1d:51:27:57:6c:dd:e3:ae:07:b4:b1:2b:
         24:d2:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----