Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File:                     4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier:          hSpchbrjQ3JzValZRIzW7JHGm9he86fb7oTkWG4WDwc=
Subject key identifier:   72:E9:A4:2C:21:00:24:7F:2C:99:1F:6A:F8:59:05:88:00:E6:90:66
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer:       /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial:       01962E997012BA77DCAD945C428ED6D4015F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number:          0BFC
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: V/r43ReyWCnWiY7l1smUh7ntPZmcHvTrZX1y9BIASsE=)
                          2: BD04oGhJezcKgfhBVSPLxiCwx-U.roa (hash: 6BJW9GRsg9XqwBDaRIKZatrd81rOIFw+haS77P869vM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:70:12:ba:77:dc:ad:94:5c:42:8e:d6:d4:01:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=72e9a42c2100247f2c991f6af859058800e69066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:ca:e6:99:84:9d:1e:24:b2:f9:b3:98:59:
                    b5:d7:8a:86:18:b4:61:45:3b:3e:a5:bf:b7:8a:4f:
                    62:4d:df:17:ae:93:98:49:c0:af:9b:ad:3c:3d:06:
                    f6:c4:ee:c5:b2:a0:82:cd:fa:19:8c:98:a2:70:31:
                    32:27:5e:67:00:b0:c1:c7:2a:2f:52:28:34:6d:f1:
                    66:b4:d3:06:a1:be:4e:4d:76:ab:44:b6:6c:7e:83:
                    72:35:25:53:5e:07:bb:7e:33:5b:21:33:49:a8:26:
                    0e:d0:52:36:f4:89:b5:72:00:03:f6:bc:4a:4b:d6:
                    79:00:1a:67:e1:8d:3b:06:3c:f4:b5:68:7b:e8:73:
                    56:91:a6:26:b4:61:07:05:52:56:1b:e2:74:39:32:
                    22:4c:b3:48:3a:69:7c:2b:2b:2f:7b:ce:b0:20:b1:
                    23:6b:b7:95:dd:f8:54:88:52:82:b4:1b:5d:d2:62:
                    d4:38:3d:29:8d:13:9e:28:1b:25:20:bc:ed:66:92:
                    aa:e0:f8:0a:f3:68:ff:b9:c2:4d:11:74:8e:30:de:
                    2f:b5:88:60:60:70:c8:27:be:fe:bd:00:38:2d:78:
                    ea:ea:cd:b2:3a:09:5b:62:29:dc:ea:fd:19:c4:6b:
                    05:21:b2:f7:c4:69:2e:62:09:20:9c:c3:b1:72:0f:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E9:A4:2C:21:00:24:7F:2C:99:1F:6A:F8:59:05:88:00:E6:90:66
            X509v3 Authority Key Identifier:
                keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6d:2a:a3:66:ac:c5:ec:ce:87:85:a6:c8:90:61:84:cf:c9:
         11:61:b9:7a:07:03:e2:f5:ec:c1:2f:fa:29:7d:c4:65:89:27:
         90:fd:57:a8:2d:fd:f0:73:55:f3:ea:ba:df:ff:e5:5b:0f:f7:
         39:b2:19:99:dc:42:bd:b3:7d:76:4b:4b:11:5c:90:96:7e:94:
         fa:12:da:b6:ce:77:ad:89:ab:64:07:a6:73:77:14:2c:7d:b9:
         75:e1:02:ea:9f:4c:b5:c1:d6:41:ca:e7:17:b9:55:b1:3a:f6:
         b4:94:f6:f9:8f:4b:a6:5c:44:7e:09:b8:57:59:6e:93:72:6d:
         5b:b9:d8:5c:20:f2:b3:eb:30:fb:ff:52:0d:7e:63:7f:ce:35:
         7e:3a:5d:30:1e:1d:5d:96:13:e1:2f:eb:90:d7:12:8b:73:2d:
         d6:42:68:f2:89:53:04:48:0c:1f:92:57:88:58:b4:2b:ea:2f:
         17:7c:3a:4d:39:15:80:4e:5e:1d:61:e6:f7:0a:de:40:77:77:
         e6:0f:21:37:20:01:34:6a:82:5d:56:70:f6:b3:68:ea:99:4d:
         7f:ec:22:7e:72:f9:38:85:83:57:f4:73:1f:0f:ce:00:be:c5:
         d8:fe:e0:d6:0a:a4:e9:68:16:23:62:a7:4e:37:94:8b:dd:6b:
         36:b5:ac:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----