Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File:                     4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier:          xqvwFxy/qkkBhJ2Ri+FHsGfcpb84KqOyyhaatwSQBT8=
Subject key identifier:   CB:3D:D2:95:00:AD:C3:23:23:45:D3:72:32:92:88:AB:25:15:1B:87
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer:       /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial:       01962F06ECB9590BB38264063F97BFDE65EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: L3JG5qptLWp4egP0PAn16ZT7USE2umO4WDqCOA48p6A=)
                          2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:b9:59:0b:b3:82:64:06:3f:97:bf:de:65:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=cb3dd29500adc3232345d372329288ab25151b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ac:c1:f1:33:29:f6:46:04:8f:75:77:7c:2e:
                    43:c5:f7:08:6f:07:22:a6:f0:4e:24:89:5d:c8:b6:
                    80:68:16:5f:e5:5b:fc:22:e0:15:71:87:88:12:6e:
                    cb:54:d4:dd:c6:86:1e:de:cc:95:0d:83:b6:bd:0d:
                    77:13:c1:a6:71:b6:e3:b7:83:d5:01:2a:dd:4e:dc:
                    2b:24:20:a1:d2:bd:56:e1:0b:09:8f:d3:12:d7:b4:
                    09:c1:d2:20:78:2d:de:15:a5:d5:e6:cc:b6:10:17:
                    51:48:c5:b6:0b:8f:ec:12:71:65:5b:b2:3d:6c:40:
                    ba:8d:0f:98:b7:f2:1b:2d:ad:b0:17:ec:a3:43:80:
                    3f:31:0c:b6:64:a2:ea:84:94:5f:4e:90:e3:38:fe:
                    b5:d3:61:86:bb:06:ac:95:24:59:45:81:4c:87:fa:
                    f2:bc:be:b7:50:ba:bf:ef:51:4e:62:3f:1c:86:18:
                    47:01:8c:d4:34:bb:3a:eb:f2:9f:eb:e0:ff:ff:11:
                    9f:9c:c9:bc:58:a5:1a:76:e5:34:79:76:f1:1b:b4:
                    ac:43:72:e8:31:ac:83:80:cf:eb:32:40:ea:69:cd:
                    f4:54:84:d9:a6:d6:49:91:37:4e:d8:e4:cf:be:91:
                    13:3c:44:20:e8:82:39:a9:6f:84:67:80:fb:56:52:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3D:D2:95:00:AD:C3:23:23:45:D3:72:32:92:88:AB:25:15:1B:87
            X509v3 Authority Key Identifier:
                keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:83:7a:11:09:5e:60:86:b0:3f:b4:fe:60:7a:02:6b:5f:8d:
         28:f8:29:81:82:98:04:93:a7:05:3d:0e:4f:7b:b5:9a:21:6b:
         29:70:06:61:3d:be:1a:ad:6b:d8:05:e1:fe:59:4d:bf:2a:9b:
         e0:9f:7c:35:8f:bb:cc:1c:47:09:d9:13:97:90:e4:0c:d9:26:
         f1:92:6d:d4:72:f9:17:b2:e8:46:82:45:f9:c6:f8:61:fa:31:
         ec:d2:d1:e8:c9:bd:c5:fa:77:47:4f:cf:eb:a2:db:3c:40:19:
         02:e3:76:0a:21:c5:df:a2:ce:e2:4d:cf:39:cd:92:3e:d2:07:
         b7:f0:7f:11:04:78:c1:31:bb:b8:17:1d:26:d6:37:37:49:86:
         a1:16:2b:39:0b:d0:3a:a0:71:ba:18:33:94:33:3d:a6:c0:9c:
         31:da:83:cf:02:82:2d:b0:da:36:44:48:96:65:cb:16:07:80:
         35:75:a7:5c:46:4f:8b:37:66:0a:61:0e:1c:c5:cf:e3:1c:94:
         b0:73:a9:fd:5c:0b:ec:e4:2d:8e:8f:c0:c4:c1:88:7b:69:87:
         f1:2e:c6:9e:d9:89:8d:ec:8e:00:40:3c:49:bd:d1:9e:6f:0a:
         a2:4c:87:36:de:bd:08:0f:e9:ed:b8:07:07:12:f5:4f:49:fd:
         38:aa:ac:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----