Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
File:                     4u1kMJX_plfeBc7spdILJlwbf1I.mft (raw, json)
Hash identifier:          wE3IJq3788MABxy5GlJchEL4RbuvOGN+dJWs8kZhtnM=
Subject key identifier:   80:2E:34:AF:F1:AB:58:AA:B4:BD:A3:09:4C:26:02:C3:10:07:E9:02
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Certificate issuer:       /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial:       01962ECF6F0FB9B8121F3962AB61477336A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
Manifest number:          0D68
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: 4u1kMJX_plfeBc7spdILJlwbf1I.crl (hash: OSJEto1+nk0cAsed8dyMcFkMxdLiFursaV8wR1/WiCo=)
                          2: m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa (hash: AiilIUPxxw08sr3kqUjUq/R6OJzvAGqmXWhwnhpEZ7A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6f:0f:b9:b8:12:1f:39:62:ab:61:47:73:36:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=802e34aff1ab58aab4bda3094c2602c31007e902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:2f:00:ad:2d:ce:fe:84:47:72:d6:57:2d:
                    96:1b:32:bc:e0:05:2f:b3:89:96:6d:28:b0:c6:29:
                    59:97:53:4f:bc:fd:9c:68:87:46:a5:d6:21:ab:3b:
                    84:f0:40:03:5a:32:b2:f9:e4:22:e0:ce:14:2e:2d:
                    cf:9a:a0:d0:61:57:e0:20:ec:48:55:8b:7f:77:62:
                    d4:d6:61:67:b5:54:c4:f8:63:9a:b7:57:96:87:3f:
                    91:70:8c:7e:cd:5f:ef:40:fd:99:39:5c:d6:21:79:
                    dd:cb:fb:1c:31:89:f0:98:b4:2f:3b:b1:05:ea:95:
                    c2:ca:5b:79:90:5d:e3:62:3d:7e:99:32:25:2b:8d:
                    52:25:cf:a3:17:39:c9:3f:be:12:2a:8c:3d:b4:49:
                    00:08:0f:12:85:63:0a:f4:1b:0c:8f:af:e0:8d:19:
                    be:cc:29:1a:66:8e:e0:31:a4:7e:1e:b4:10:13:47:
                    b4:ed:97:45:8b:b3:63:3c:ca:8d:8a:24:6a:74:16:
                    78:4e:46:41:27:86:bf:15:ea:db:fc:4d:0d:9e:62:
                    c8:e2:0c:63:9b:9a:81:d1:bf:d7:31:4b:7d:90:69:
                    5e:40:9a:aa:c5:b8:d6:21:cb:e2:cb:ac:e8:2b:d1:
                    48:c6:c1:56:12:8c:7e:30:b8:68:d5:05:a4:ad:6b:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2E:34:AF:F1:AB:58:AA:B4:BD:A3:09:4C:26:02:C3:10:07:E9:02
            X509v3 Authority Key Identifier:
                keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:e3:8a:b7:1e:b7:36:98:6f:e4:12:60:72:78:ce:a3:27:
         fe:f3:5f:dd:23:58:ad:f5:82:c5:bc:6b:59:9e:6f:80:0f:fc:
         a3:90:0a:70:b1:e2:3b:46:f1:59:e5:83:63:60:65:9c:07:38:
         68:e6:64:d7:8e:67:89:9c:5f:41:f7:59:06:26:5c:14:be:f5:
         df:7a:5f:50:c8:fa:29:76:2e:e9:49:95:f1:d8:0e:5f:7e:c6:
         ec:d2:d7:7b:17:87:3b:93:20:8b:75:d0:0e:c3:20:f9:59:13:
         3d:a0:27:9e:e1:8a:7b:df:ac:0c:3d:26:e5:4b:b0:fb:74:46:
         c2:95:76:1a:c4:fc:a2:84:9e:9c:b0:a2:9b:17:6e:7a:23:64:
         a5:3f:1c:9c:e8:f8:fd:1e:bf:74:b0:d4:1d:e4:28:e0:f0:f1:
         76:12:e4:f7:3c:d8:23:fb:03:6f:9f:b2:7f:b7:b6:c1:36:38:
         49:cf:9a:56:51:3a:80:ab:8b:84:e6:8d:3a:37:84:df:e6:f4:
         22:19:5b:9f:91:78:1c:8c:26:68:f0:3c:17:53:a5:87:47:f2:
         8b:60:64:90:0f:fb:e5:1e:b0:5a:7b:b1:ce:c5:07:13:e9:bd:
         9a:0a:fb:a4:09:56:aa:6f:bb:c2:79:e2:4e:ea:59:d1:a2:3d:
         9a:4c:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----