Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File:                     pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier:          vGUdLO+5/V4cl3dX5ZGR5Hm0tsZ2/Cph3/GWDyM6uD0=
Subject key identifier:   D5:28:07:F2:28:46:E0:C6:9F:D5:50:FF:CC:EE:8A:66:E7:7B:1F:C8
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer:       /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial:       01962E2AD9A888F450FEFDD479F6AC416B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number:          D4
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: cbfaYBjluJFGRHIZotfNKfL5QOM.roa (hash: hnnwP5hTMZNnGccOJwmbq229la5aF88t7OiSZXiU/mU=)
                          2: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: HJ+ffB/9DEjyoeyh6j0QD7xMh1FwXmkiLesVw3F9rwY=)
                          3: zwNxRZCXOiLKuZa_7Wmh9NcuOqQ.roa (hash: 6xxBkLaHc1up/veCbZl0eXM5uTf3B1SDA3dM0Oft33U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d9:a8:88:f4:50:fe:fd:d4:79:f6:ac:41:6b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=d52807f22846e0c69fd550ffccee8a66e77b1fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:6c:79:52:96:a6:43:ee:fe:a3:62:ae:83:
                    cf:3a:c4:7a:5c:53:40:a5:9b:59:8b:2a:70:f3:4f:
                    a8:02:a6:2c:bf:b3:53:87:e2:02:4f:11:5b:a5:4c:
                    f5:3e:d3:41:88:69:b7:21:ee:16:5b:52:7f:42:ff:
                    8b:14:48:3b:e2:41:3a:24:4b:cd:1d:bd:c9:4f:c1:
                    e4:d8:53:07:25:e7:6f:7f:be:48:bb:d8:4f:b8:24:
                    e5:c1:45:ef:90:29:db:a2:b2:a3:da:3e:fb:df:66:
                    54:0b:24:3b:63:b6:4e:d0:c8:9f:1b:76:bf:02:75:
                    43:91:07:79:f1:0b:35:15:77:83:5c:7d:d2:3d:95:
                    9b:88:fe:30:1a:73:76:66:e1:4a:ae:7b:7c:1f:b9:
                    8e:44:88:98:0a:ab:58:37:d5:8a:af:69:c2:1d:a6:
                    f9:42:4f:6f:69:68:d3:58:5a:4a:5d:bd:46:bf:eb:
                    69:e2:d4:55:29:8a:df:8d:a9:14:6e:e2:04:b7:97:
                    67:cf:01:ab:57:ef:4e:8a:b8:bb:9f:6e:02:e2:ab:
                    20:10:33:1d:9f:be:07:06:e6:83:0f:45:f1:20:d0:
                    bf:2f:91:0d:79:33:a9:96:28:f4:33:f7:d5:80:7d:
                    85:83:3e:ac:e2:b3:d6:b7:3f:ba:a4:84:f9:25:2d:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:28:07:F2:28:46:E0:C6:9F:D5:50:FF:CC:EE:8A:66:E7:7B:1F:C8
            X509v3 Authority Key Identifier:
                keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:df:35:9b:f7:05:1b:96:1f:bf:2f:1d:b7:19:5e:85:cb:
         da:b2:28:9f:31:d5:e7:f1:20:cd:10:83:50:ac:2d:1a:3a:6c:
         c0:f7:5b:66:68:d4:02:60:c7:b3:a8:57:db:aa:b0:6c:99:9a:
         e8:da:71:57:ee:34:e1:78:e2:3c:0a:7a:3d:c3:54:8a:02:cf:
         87:1c:ad:fd:25:d4:c0:34:a5:3d:fc:89:48:3e:bd:de:8b:c9:
         74:be:95:7d:62:29:cd:e9:eb:ed:35:c9:c6:42:57:90:cc:d0:
         fc:b9:ba:33:bb:1b:5e:75:15:6e:fc:01:d7:03:55:10:55:91:
         98:80:45:55:72:51:51:33:f4:02:25:fe:cf:ef:53:54:a5:18:
         96:24:dc:60:5e:aa:09:bc:d9:99:26:5b:f4:8d:8f:bb:18:5a:
         18:1b:0c:48:26:88:6b:52:45:92:90:84:00:44:1c:b7:99:6d:
         12:d4:fd:63:c2:77:f0:9b:cc:4b:68:13:f9:1f:f6:11:ac:92:
         3f:30:d8:82:a6:ad:b6:3e:88:6e:60:86:81:04:74:71:46:c9:
         35:e1:08:a7:d2:9b:02:36:30:1d:1e:30:87:4f:c3:70:94:33:
         92:68:55:bc:15:68:bc:d7:c3:6a:ee:62:4c:f4:a2:6e:37:f8:
         85:8d:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----