Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File:                     4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier:          MeX3yBlFBmr3tHwy3QrWwrL+F9MkczD0Yz2Wz3M6YK0=
Subject key identifier:   05:3D:46:D5:CD:71:D0:DF:54:46:4F:A3:2E:F8:2E:A3:43:72:45:71
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer:       /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial:       01962ECFA28589FC3DE5B49F63F44145362E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: 3i7bDwmXfkGeboYerA9gz4okFig.roa (hash: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=)
                          2: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: t+/DOdAM2PjGrrMzFMM2G0gGq+txfpVtUeBaGXFQW9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a2:85:89:fc:3d:e5:b4:9f:63:f4:41:45:36:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=053d46d5cd71d0df54464fa32ef82ea343724571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:15:c1:e3:56:7e:81:7b:21:02:48:92:74:
                    11:92:08:48:ac:c9:80:ab:a4:c7:49:19:98:a7:d6:
                    d3:00:e6:ee:c0:ad:14:29:5d:a3:5c:cc:d8:64:de:
                    45:39:99:c3:3c:e8:4e:c0:0a:83:58:9f:e7:07:ad:
                    c7:77:f6:16:fb:00:ff:a4:47:02:b4:81:0b:eb:f9:
                    88:dc:c7:16:b7:d7:2f:5f:47:a6:79:9b:84:c5:3b:
                    39:ff:04:cd:ac:f6:9b:5f:f4:ea:8f:f2:b9:e4:1d:
                    87:32:05:a2:a0:ea:11:df:20:f2:0a:9d:17:8b:59:
                    f6:da:2d:65:40:31:0d:2a:ce:79:93:07:1b:32:1f:
                    7a:a2:b7:ca:a6:0f:82:ca:87:4d:19:9c:92:00:96:
                    65:36:3c:33:2d:5f:e6:4a:e2:0b:ac:52:cf:73:d3:
                    6a:cb:ee:25:08:b5:4e:66:fb:41:6e:fd:8a:bb:40:
                    b4:e4:a7:c4:ec:b1:34:f6:48:66:8c:06:4a:2c:a8:
                    cc:bd:7e:1f:94:3e:49:f5:24:38:8d:45:e4:93:eb:
                    f0:23:46:5f:40:da:c6:4c:8d:d3:7d:7b:f6:4c:51:
                    a0:6b:71:14:6c:29:e4:09:a4:c8:4a:69:35:7b:59:
                    82:62:0a:39:a1:b5:b3:3b:b6:a9:92:a8:1b:11:92:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3D:46:D5:CD:71:D0:DF:54:46:4F:A3:2E:F8:2E:A3:43:72:45:71
            X509v3 Authority Key Identifier:
                keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a6:74:c3:9d:2d:7c:93:84:77:e3:5c:e1:90:dc:fc:30:51:
         6e:99:87:e7:77:a0:5e:33:a0:c7:e3:43:fb:91:04:a5:f9:aa:
         e7:ff:a5:32:ce:ce:41:03:3d:8e:93:6b:4b:b3:92:51:6e:8f:
         7c:01:2d:1e:4a:2a:eb:69:26:1d:53:db:85:a6:21:db:d4:bd:
         5f:64:c6:07:9a:29:f3:2b:7b:b8:34:18:2e:9a:10:59:2b:af:
         6f:fd:e8:56:aa:5c:b9:6d:3f:99:47:b1:ce:d1:8c:27:20:f5:
         c2:08:95:6d:3b:a1:f9:d7:2e:b8:40:53:b9:16:fd:fe:e9:b6:
         30:e1:58:62:c4:58:8a:97:ee:21:6b:62:2a:91:e6:97:de:1f:
         7a:a4:c2:87:7e:10:4b:d7:1e:53:fa:bf:f5:bc:da:7a:e9:0e:
         31:17:f4:c2:c7:3f:04:55:76:0e:ee:88:4d:e4:c0:89:d4:72:
         18:07:67:15:91:33:5f:64:05:0a:64:29:65:d4:ae:a6:df:cc:
         31:67:6b:99:c4:dd:0c:fd:f1:6e:a2:15:86:56:d0:4f:6d:2c:
         ce:8b:17:77:3e:41:e1:67:33:f8:c8:64:5e:99:c8:0b:92:13:
         6c:66:f3:b6:74:f0:da:fe:c2:38:be:64:d2:85:e4:a7:be:89:
         52:ae:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----