Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File:                     4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier:          QKg43nPkRGrEPeqhId/hC2ytzhJRan4C3Iz2PvT8epA=
Subject key identifier:   56:23:8B:C6:D9:6F:49:9A:45:68:BD:59:7E:CA:83:74:68:B0:FD:81
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer:       /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial:       01962F74B07755E655C11F8E166482041295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: 3fuOAntISqnk35zDIs4rqqBJzw8jjDWWVV2LGgWIWaE=)
                          2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b0:77:55:e6:55:c1:1f:8e:16:64:82:04:12:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=56238bc6d96f499a4568bd597eca837468b0fd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:e3:ee:b4:32:d5:6f:fc:22:e5:7d:cb:62:
                    ef:c3:81:ab:2c:f9:fc:fb:8e:ba:30:81:a9:1e:10:
                    a9:5e:6a:0c:02:3e:72:32:d9:4c:0f:87:a9:b2:bd:
                    3f:10:32:a3:e4:66:f0:31:8c:85:ff:11:0a:33:43:
                    fe:a8:8f:ef:ee:fe:3f:da:54:83:c6:d7:5a:46:cb:
                    2a:25:c4:4f:14:11:ce:80:fb:66:eb:18:e9:06:55:
                    dd:71:e9:2c:cf:f7:af:cf:90:3c:5c:a2:f2:29:6c:
                    da:d2:cb:4b:fa:02:92:fe:da:a6:3c:a4:e6:80:31:
                    ce:4c:a6:df:7b:8a:07:02:4d:d2:73:8d:2a:f6:12:
                    df:e8:5d:b7:0a:99:0b:3e:ba:d4:50:93:52:06:67:
                    f8:e5:5f:fb:40:4d:e5:4e:78:33:50:8e:45:da:59:
                    6e:8b:4c:d3:7e:92:5a:bc:29:12:9c:80:9c:39:e7:
                    84:e9:a3:0e:a2:a8:0f:0b:17:b6:07:1e:6d:77:6a:
                    57:9d:5d:48:f7:69:09:17:61:23:8b:5c:71:0f:da:
                    b7:54:69:8c:60:c8:b0:1c:d5:5a:d0:3f:64:73:67:
                    60:ce:8f:47:91:66:48:ee:58:d3:f6:24:ad:af:d1:
                    e5:32:80:72:16:75:fc:50:4c:84:41:87:b8:42:c8:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:23:8B:C6:D9:6F:49:9A:45:68:BD:59:7E:CA:83:74:68:B0:FD:81
            X509v3 Authority Key Identifier:
                keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:54:ab:03:d8:2c:7a:43:ca:38:0f:44:c0:83:8a:69:7e:4e:
         fb:a4:f6:11:49:23:89:94:6b:c2:c4:54:10:2e:e3:55:2f:78:
         e1:8e:b3:15:21:47:2b:d9:f8:3c:6b:5e:5b:50:67:4c:7c:e0:
         b5:de:96:54:db:ee:d5:2e:45:b5:42:b4:ef:e0:a0:ff:73:8d:
         55:d6:fc:93:6d:a2:d7:ec:be:e8:24:f6:fe:be:ed:6f:3c:4b:
         16:b8:69:ab:fd:29:c5:2f:d2:b5:65:33:92:a2:f6:aa:34:7b:
         65:87:be:7b:a9:a3:c6:06:13:83:aa:d9:87:8c:8b:7e:bd:96:
         37:d7:51:10:15:40:0f:de:35:f3:44:2f:c3:c8:e5:e2:d0:84:
         f9:d9:c4:b0:1f:04:98:73:e2:73:57:aa:b2:74:b9:f9:37:d3:
         02:ec:bb:58:06:d1:de:63:4a:d5:cf:79:31:34:61:44:25:02:
         a3:38:88:bc:0c:76:38:5e:98:4f:74:85:60:e6:9d:03:42:78:
         6d:4b:53:97:ca:2e:fb:52:f0:fd:a5:90:87:aa:5d:54:52:f2:
         db:63:5b:64:a5:a1:71:a4:97:7b:71:d3:a2:e7:66:ae:ff:89:
         d5:04:9c:dd:4f:60:17:ba:7c:2d:1e:fa:9d:42:4e:d7:ac:00:
         07:45:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----