Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File:                     I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier:          25aj6L6WHphq1P4Z7zq2i0IQsIHGjVwJRdWa3/ak9B8=
Subject key identifier:   A4:EA:AE:4E:83:07:BD:36:03:3B:52:F8:7B:B1:B5:81:0F:1F:BD:DC
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer:       /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial:       01962E2AC9D90946388321E1D61B39661512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number:          34
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: aryc8zvmfgYMIQ5ZaJQKB5uTbKswuKv6S6GM+pUzsh0=)
                          2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c9:d9:09:46:38:83:21:e1:d6:1b:39:66:15:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=a4eaae4e8307bd36033b52f87bb1b5810f1fbddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:99:94:2a:07:39:fc:1e:9f:f2:2c:8f:9d:2b:
                    52:27:f2:f3:54:8b:1c:20:d6:72:00:a0:3e:71:4c:
                    04:90:63:18:5c:b8:1c:d3:6d:82:10:9f:f1:40:bc:
                    c0:86:4b:01:ad:4d:88:9f:f0:ce:1e:d0:4c:ab:89:
                    23:5d:44:03:90:21:73:47:67:43:8c:57:63:9f:cd:
                    0b:30:1b:13:b8:8b:ed:3f:85:75:07:34:c4:24:54:
                    ed:81:5d:bd:52:44:b7:30:98:0a:7a:27:5b:45:5f:
                    54:1d:34:39:ca:9a:28:f2:43:f7:2b:f5:90:6b:cd:
                    cc:e4:10:4b:9b:7a:86:72:07:e1:65:85:f4:0e:da:
                    2d:43:02:60:8d:33:7f:65:50:ad:f8:c6:e0:65:c6:
                    34:34:f0:5e:44:c9:4f:93:43:0f:35:1c:4e:fc:6e:
                    e6:c1:e9:4a:a4:3d:a3:b9:7c:64:6b:80:71:0d:da:
                    84:1c:a2:55:8d:6f:4f:ef:a0:9e:d3:ba:60:06:42:
                    44:2e:f3:e4:be:66:b0:3d:61:ce:34:72:83:15:a7:
                    bd:3e:d9:f6:16:7b:bd:de:a5:74:36:99:4e:83:c1:
                    d4:28:20:ce:7d:eb:30:f9:fa:8f:a8:25:d6:7f:24:
                    9a:e8:4b:21:bf:c6:4d:40:d8:8f:e6:24:b8:18:25:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EA:AE:4E:83:07:BD:36:03:3B:52:F8:7B:B1:B5:81:0F:1F:BD:DC
            X509v3 Authority Key Identifier:
                keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:27:55:bc:ed:c8:14:14:0b:95:48:8b:61:41:c4:d0:01:20:
         47:27:4b:7b:c3:4a:e1:e5:50:ab:24:76:15:18:98:7d:d1:97:
         f5:c9:45:b1:fe:bc:ce:8d:36:8a:6a:aa:9d:cb:89:26:75:b0:
         1e:69:35:2e:49:43:86:2f:52:cf:27:79:55:53:42:4a:be:26:
         72:e5:f9:27:62:d3:62:fe:fc:c1:be:59:80:35:0c:24:f8:a5:
         f4:ef:f0:4d:e6:23:a7:02:db:f3:7c:84:de:bc:a8:63:72:1e:
         f3:dc:99:f8:f6:a2:d6:8c:1a:eb:57:01:34:b4:20:6d:02:c5:
         96:c4:8c:5e:18:ef:5c:54:4c:52:f0:ae:13:2e:84:aa:2d:af:
         99:fa:07:da:46:83:9e:cf:05:88:e5:72:44:19:10:91:e5:c0:
         57:06:bf:eb:f7:4d:df:ea:bd:71:e1:64:16:99:00:88:27:c6:
         c6:58:b6:5c:0c:0b:89:40:7a:5e:1a:89:0b:d4:13:ab:dc:70:
         ac:87:b2:56:8c:06:e6:ce:b5:51:a9:78:64:cb:a1:3a:3d:54:
         36:54:3a:36:34:2c:6f:d1:25:dd:70:73:81:20:a8:9b:8c:c8:
         f0:ff:86:07:5b:6e:93:cb:68:6e:bf:a0:3e:22:9f:e3:ba:b7:
         c8:df:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----