Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File:                     4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier:          Gmw9AzhUDz0xejAG+KZfLO2CrMwD1/daEWVBOCPAoEw=
Subject key identifier:   91:51:7C:3D:A8:79:F7:8D:D9:19:D9:AF:BD:12:C3:9E:F7:2F:64:D9
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer:       /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial:       01962F06DC9906BE35CBF4E005548AFE80BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: 5gREGh5e46zP1LZLOjxFb0Mtn54ttIfVuVYlFUKPIOQ=)
                          2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
                          3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dc:99:06:be:35:cb:f4:e0:05:54:8a:fe:80:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=91517c3da879f78dd919d9afbd12c39ef72f64d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:63:56:96:97:dd:3d:23:f6:67:d6:54:42:8b:
                    fd:80:09:21:64:44:d4:2f:0f:d8:ec:3e:8a:5e:5e:
                    0d:46:0a:84:e1:40:67:ff:82:b9:da:92:e7:b1:39:
                    4f:96:27:13:77:af:f9:81:43:25:08:a2:b7:89:1e:
                    6c:77:52:e4:ba:46:af:fd:b9:e8:7f:97:f0:74:6a:
                    78:a5:2a:3f:80:22:7f:6f:a7:1f:25:b4:92:a8:7d:
                    89:02:aa:a9:4f:5b:93:41:31:0e:d1:8c:f3:b8:1a:
                    27:5e:1f:d4:af:56:b2:a6:79:2b:3c:19:70:85:1c:
                    f2:92:e4:e1:ae:b3:48:b3:5d:50:c4:91:df:7c:62:
                    97:c5:71:3f:d3:d6:cf:58:62:76:86:cf:d6:25:e1:
                    d7:43:ea:8e:a9:57:34:8f:fe:52:a6:ec:df:84:dc:
                    8a:81:7c:25:31:72:cd:f0:cc:3b:1e:00:7a:5f:87:
                    31:b1:3e:92:99:80:e9:5d:17:63:30:ad:93:b6:6b:
                    7f:51:46:b9:13:1b:29:b4:45:2c:29:d9:4b:55:69:
                    b5:5f:e7:5b:f8:43:2a:4c:38:6c:d1:30:2b:fc:92:
                    7c:dd:e1:5e:0d:cf:1f:0f:1a:93:64:71:9d:fe:08:
                    68:5b:e3:fd:95:1e:45:c0:94:d9:d9:7b:81:e8:88:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:51:7C:3D:A8:79:F7:8D:D9:19:D9:AF:BD:12:C3:9E:F7:2F:64:D9
            X509v3 Authority Key Identifier:
                keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:9e:94:ba:39:69:7f:0e:31:24:23:b3:6d:67:45:c7:a2:f2:
         90:c6:a1:74:67:ae:a4:76:fa:a4:93:3b:3b:c2:3d:02:44:21:
         3c:02:da:80:8d:8e:a2:3c:cc:81:af:75:4e:93:7a:b6:76:a8:
         06:70:6f:64:59:85:0c:79:76:11:b0:07:e3:80:43:98:87:77:
         7a:00:92:a5:08:9d:05:05:91:17:d1:eb:c2:e5:75:68:fa:f2:
         46:c6:ee:f2:fd:46:1e:f4:62:4c:01:58:aa:02:e2:55:14:3d:
         ee:1d:38:a0:9a:dd:1e:8c:d1:69:cc:34:be:11:e3:16:f6:90:
         3c:5d:8d:f4:4b:ca:98:a1:9a:71:d5:33:6d:cc:16:31:13:3d:
         df:23:b9:c2:5e:3f:06:43:69:70:01:30:2e:72:75:f6:4d:e2:
         10:3a:5f:bd:9c:99:f2:25:fd:fc:1a:c1:b1:44:95:da:e1:87:
         50:21:e4:46:b9:65:c0:d4:e6:9b:3d:a1:91:08:cf:62:28:7c:
         65:23:e3:47:df:8c:14:1f:ab:11:7c:ea:74:ee:a9:56:51:d1:
         48:a1:9d:fb:62:88:78:39:e3:33:76:20:b0:96:09:9c:df:41:
         bf:fb:2d:da:6c:94:63:82:13:ee:3a:5a:4f:8a:dc:7c:48:a5:
         26:57:95:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----