Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File:                     43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier:          66g8MRSg0xIgWSjz/PF1HDRJrbkB/qJxDuLt0/zLzMM=
Subject key identifier:   8E:62:B5:51:F0:DF:13:04:21:07:63:1F:35:83:82:8D:03:43:3B:E3
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer:       /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial:       01962ECF944B043929477EB08EDEE2E77756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number:          0943
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: dmOyRU/rwE6dCjyPMj4RUCF4mYFnEBQGInHvrZgJwA8=)
                          2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:94:4b:04:39:29:47:7e:b0:8e:de:e2:e7:77:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=8e62b551f0df13042107631f3583828d03433be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:bd:87:b6:a8:80:eb:ed:3e:39:d2:ea:73:
                    6a:d4:5a:08:c2:83:a0:c7:f4:47:1f:22:37:e2:02:
                    97:b0:50:ca:f7:e4:61:29:11:35:a7:7a:7d:91:3a:
                    e5:27:0f:98:f4:7a:83:15:79:90:55:07:c1:77:ef:
                    32:d7:b1:84:52:67:05:f7:29:f2:8d:c1:48:cf:d7:
                    5b:c1:9f:41:a6:09:bd:77:5b:4f:fb:1c:e2:eb:df:
                    31:45:a0:c1:94:92:21:c9:f7:94:22:8c:77:10:5e:
                    69:15:9d:1f:8f:70:a3:10:4f:4b:95:31:f5:45:8c:
                    e3:34:36:0c:f1:67:be:e1:fa:71:20:10:ee:6b:26:
                    5c:9f:b1:1d:0d:3b:0b:37:db:16:81:81:7b:36:4f:
                    c9:18:77:ca:51:34:45:57:92:ea:48:78:a6:37:52:
                    98:31:62:fa:ed:94:c1:9c:59:89:08:4f:6e:8e:9e:
                    e4:2e:4e:b4:03:88:b4:7c:18:9c:70:57:ec:8a:56:
                    7a:2d:86:f8:ad:aa:6f:5a:76:2d:e4:fa:94:1d:11:
                    9b:fd:cf:a0:b7:c0:26:5b:fa:eb:c3:f2:9e:af:17:
                    6b:ed:08:40:a6:97:ce:ad:83:e8:9b:78:3d:ff:61:
                    b4:53:9c:4b:29:99:83:74:09:e1:c3:73:b6:63:1b:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:62:B5:51:F0:DF:13:04:21:07:63:1F:35:83:82:8D:03:43:3B:E3
            X509v3 Authority Key Identifier:
                keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:06:9e:4d:db:8c:40:28:e1:e3:e0:d4:99:5b:7c:9d:de:74:
         eb:36:c3:46:e6:9a:67:09:a3:7e:6f:da:3c:de:10:4f:9d:bf:
         ff:91:f5:5a:cc:e3:88:b6:bb:9b:e7:ca:c9:e7:9d:12:75:ee:
         b3:de:29:34:4b:85:a6:32:db:c7:f2:68:b8:1b:74:52:11:76:
         d6:af:9a:9f:7a:bb:e3:82:6f:ab:75:01:04:be:07:33:83:e6:
         11:f3:24:c8:55:01:fa:88:8a:a8:b3:8e:87:47:d3:cd:09:c8:
         7a:6d:54:46:93:9d:31:9d:a5:d4:fd:3e:ae:83:97:c6:38:cb:
         8f:d5:bb:1d:c2:64:10:c8:fb:fd:be:f6:0c:41:a5:ce:97:fb:
         12:9a:a3:10:2c:e7:b1:de:39:4b:37:71:7f:98:8e:b9:1e:c0:
         0b:fe:7d:b1:07:cd:96:75:90:19:ff:df:26:ec:3b:8e:d9:52:
         76:c3:0b:2c:f6:f3:38:3c:7a:d5:d8:8f:a5:23:e0:7c:6a:4f:
         8c:ff:83:dc:00:34:9b:b3:31:48:70:9e:a8:9b:d3:72:2b:10:
         a6:98:3a:52:f6:82:a9:7d:26:ed:02:50:8d:5c:8f:05:d1:32:
         68:fb:95:ac:28:92:cc:45:f6:c3:04:1e:26:dc:07:e8:3a:e6:
         80:7a:13:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----