Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
File:                     RgeLLcCGzllV5i25IvNUuC0TzVs.mft (raw, json)
Hash identifier:          EwAAjKYoRd4wZZQhCkzghYG7QfAuJ3ImsNVJQZjgiWs=
Subject key identifier:   7C:E2:7B:82:23:0D:C8:5A:2B:05:7F:0D:84:B3:70:6E:EB:36:44:70
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Certificate issuer:       /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial:       01962F065D912C0267276272827F7ED6E05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: RgeLLcCGzllV5i25IvNUuC0TzVs.crl (hash: k++gW30EBkADLZQw/fQtFS1S1I7EOTI1aI+I6uM4jrg=)
                          2: tev87foGLf9TpZQHMwDHXLYnBL4.roa (hash: jHI7Ehm4mIeH8EgzDR4OOBosKPRgVoLZvuWOXFcKqHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5d:91:2c:02:67:27:62:72:82:7f:7e:d6:e0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=7ce27b82230dc85a2b057f0d84b3706eeb364470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:1e:7a:e6:43:b3:e1:d6:f8:e2:04:ef:b3:
                    ae:25:26:e6:3e:de:52:57:a5:2f:1a:c8:05:9d:dc:
                    92:8b:03:fc:ab:83:76:0c:a7:aa:ff:a7:75:df:39:
                    a4:a8:ac:c3:99:f9:14:bb:12:f5:56:a0:5a:36:c3:
                    a4:5e:85:de:00:6a:d0:ee:b8:0a:d5:68:f0:22:fc:
                    af:c0:8e:eb:7d:97:e2:f4:4f:b9:b1:9c:39:1b:95:
                    9e:22:a2:6d:f2:8a:c1:eb:86:b1:10:1f:55:d0:d7:
                    9a:d2:91:a2:10:cc:46:3c:f8:f5:97:00:e3:b1:3a:
                    11:e6:19:c9:e9:dd:07:2a:b1:fe:34:5f:62:12:5a:
                    8f:7e:98:7c:6c:35:9c:ef:ba:30:78:de:ac:2f:53:
                    37:d5:1c:7a:65:44:c3:20:ad:22:a7:f1:cd:ad:d2:
                    64:68:e0:93:0b:e5:19:00:16:da:f7:8a:24:e0:42:
                    a9:7a:55:1c:00:4f:11:ee:aa:77:6e:39:54:65:e3:
                    50:5f:29:15:a1:18:2c:50:7a:f5:80:d2:c0:74:75:
                    12:93:0a:39:e8:6d:6a:80:f2:53:22:0e:6f:ed:86:
                    21:76:f1:5a:52:44:ae:82:85:3d:2e:4a:fa:0d:4d:
                    75:d1:ac:a8:f5:69:11:91:75:54:50:a2:e3:72:7a:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E2:7B:82:23:0D:C8:5A:2B:05:7F:0D:84:B3:70:6E:EB:36:44:70
            X509v3 Authority Key Identifier:
                keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:b6:b3:2e:84:dd:8b:07:70:92:4e:34:33:10:d1:93:c1:7c:
         db:06:40:dd:d0:e0:46:6a:e3:5c:d1:0c:5e:ce:cb:c7:fe:91:
         e1:45:82:87:6e:7c:b7:a9:76:fa:f5:85:d3:c6:09:e2:8a:49:
         62:fe:d5:59:14:40:f8:c2:b4:cf:75:e5:46:b5:53:c0:07:55:
         b3:7c:b4:54:bb:43:9e:f0:2e:60:c4:f5:60:36:46:b3:0b:c4:
         94:9d:ad:66:0f:cc:77:c8:4b:5a:fa:21:e4:a9:1f:ba:c2:d4:
         2a:f2:d1:57:51:61:0c:18:46:40:91:ee:98:76:c7:3c:14:d8:
         0c:f6:ce:29:1e:0a:be:38:e2:ba:d3:4c:ba:d7:b7:c8:86:81:
         a3:d9:98:d8:bd:c5:a4:63:37:c5:5d:54:11:d7:e3:16:26:12:
         63:e5:ff:7a:02:b6:a6:c2:56:9e:af:19:22:88:88:a3:75:81:
         4b:e9:08:e2:fa:f8:2a:0b:ba:af:76:43:bd:c6:e6:5f:64:1f:
         57:b6:04:f0:74:92:ad:57:7f:2b:77:0a:c5:3e:bc:51:a5:b8:
         b0:8c:e5:c2:99:ef:f3:af:1f:15:8e:69:0b:d7:ad:43:8b:6a:
         b8:f1:b1:56:24:1b:04:60:2a:42:67:e4:b7:d5:29:b1:c6:ec:
         83:2c:e5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----