Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File:                     4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier:          YmpB3JOk7A068zIYu2dLvISXP+yUY857AWJV6zQTfNQ=
Subject key identifier:   67:41:DF:8A:1C:87:BD:9A:E0:4C:51:81:AE:AA:18:AC:85:3F:31:CF
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer:       /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial:       01962F068B5F013FD95F31D3941E94DA515A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: y8Bpo6f+9BLVflPkoFfsswnjzlHENosdheEnWW3z2wo=)
                          2: SifsSXB3IxM773oq0Xz9LePnp8I.roa (hash: zgIEbQQ5tBYSjxuoWIlb12GUFr1oCylWnPsgULnZLUs=)
                          3: pe-h0g6N0Y23HKrAKsDD9huS1mE.roa (hash: ylxKfNsAYg9jbE4bG9j7buLcVQFIUsPKCa1+TwgGN2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8b:5f:01:3f:d9:5f:31:d3:94:1e:94:da:51:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=6741df8a1c87bd9ae04c5181aeaa18ac853f31cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:a7:07:8b:4d:c0:f0:f2:5e:d0:e2:8c:47:
                    b6:f4:c2:66:e8:c5:e2:09:89:ac:51:f1:29:08:a5:
                    f7:57:49:71:10:23:d7:79:0b:af:03:84:82:04:17:
                    fc:68:98:05:dd:ea:08:9a:17:fc:bf:5f:24:38:27:
                    96:41:78:62:9f:2a:30:02:e9:18:f0:22:6e:79:ef:
                    b7:a8:61:91:36:03:43:fd:a5:f2:0f:5e:e7:4e:f1:
                    f3:d2:43:30:f2:fb:b0:fa:09:12:d6:3f:14:36:f7:
                    e2:a9:4c:43:5e:72:b0:bf:14:cd:8f:b0:22:ae:c7:
                    00:23:b9:98:f6:07:d8:82:59:32:de:50:11:46:54:
                    a0:28:1a:81:56:c5:70:92:cb:54:68:c1:bc:85:01:
                    63:1b:92:3c:26:6a:e7:14:1c:dc:91:22:dc:9f:34:
                    dd:72:5d:82:97:50:ef:30:5c:40:75:fb:03:0f:b6:
                    92:d0:f8:a7:1f:fa:98:07:85:da:8c:65:62:13:38:
                    a1:d1:22:62:53:df:7d:47:55:18:da:be:d9:4e:2d:
                    04:ae:3b:57:cc:60:9b:ae:ac:69:c5:5a:02:8b:0d:
                    ab:9d:2e:6b:d2:ed:cb:db:56:14:fd:c2:c6:20:79:
                    08:cb:a8:5b:6f:1e:83:1f:22:34:b8:de:91:c5:28:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:41:DF:8A:1C:87:BD:9A:E0:4C:51:81:AE:AA:18:AC:85:3F:31:CF
            X509v3 Authority Key Identifier:
                keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:44:a3:fe:b2:5d:49:bf:2e:d3:bf:28:f9:9c:42:7c:ef:e8:
         27:04:d2:d5:2d:20:96:6a:09:0d:9c:45:38:4d:a2:c3:b1:eb:
         4c:f1:8d:a2:52:05:7a:81:e4:b6:c9:36:71:99:7e:a7:44:e3:
         e7:94:4f:84:34:9b:fa:ea:cf:10:f5:d0:9c:02:8f:23:0a:6a:
         22:86:24:30:cd:c2:28:6c:95:b3:b5:60:a5:7f:7b:ce:e3:3c:
         c1:14:10:a1:bc:24:2c:87:c4:76:e6:ac:69:54:66:4b:54:52:
         0e:dd:67:e8:8c:c2:f4:b1:15:d9:40:38:af:a8:c3:5b:43:a9:
         80:5f:62:09:46:eb:50:dc:9e:fa:7f:ab:17:6e:19:aa:95:fc:
         06:2f:96:a1:1a:37:53:72:88:95:c2:64:6b:90:66:29:ae:e4:
         4b:c1:37:93:d8:f7:bf:6d:6b:fb:23:bc:af:18:c8:ac:61:53:
         a9:8d:08:5c:5e:b5:58:ce:c3:f6:84:f9:14:fb:b4:00:1d:9d:
         fb:62:b6:10:02:2e:3a:5d:ab:8e:3c:b6:45:1f:73:51:87:95:
         2c:ca:0b:0c:2f:79:86:af:53:88:f3:2f:59:17:21:46:85:87:
         78:c2:2e:76:7e:d9:0a:56:ed:1d:bb:ee:cd:6a:70:dc:58:ed:
         ac:a7:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----