Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File:                     4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier:          XGD0d73i8szqGeg8HyxWVLtdfPpfES1m55ZbXXo9dvs=
Subject key identifier:   78:E4:6E:4C:BC:88:3F:39:F2:78:6F:B4:72:D9:7D:88:4E:6A:6C:27
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer:       /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial:       01962DF3E8AC91860BBF1BF2123D18352DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number:          123A
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: ivnBExOrTr8jv6iuIxfl+HlMhBgftCFHn9smY6oFUCM=)
                          2: wo2zdFr365giMD5GmJjbyQ_qVBY.roa (hash: Sf7Mc4QUihOBo0PCO1f1MqbHphMDfRs2qmYoA4b7koM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e8:ac:91:86:0b:bf:1b:f2:12:3d:18:35:2d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=78e46e4cbc883f39f2786fb472d97d884e6a6c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:dc:04:f6:46:a9:44:0d:ef:52:17:75:01:
                    39:58:64:b9:4d:69:55:c7:aa:04:f2:8f:ee:35:17:
                    86:a6:2f:07:12:cb:bd:d3:81:9e:97:25:56:ff:1a:
                    97:ba:a6:fc:3c:02:dc:07:6a:cf:74:23:67:45:84:
                    6d:cb:97:e2:40:bf:5e:25:58:9e:9c:24:43:4d:5a:
                    1b:9d:5c:d5:3d:ef:a4:78:19:55:e0:2a:71:2e:e6:
                    09:e0:27:10:b5:f5:85:d5:1a:c1:99:45:3b:b0:82:
                    ad:49:31:07:f5:02:14:dc:bc:aa:80:f1:bf:80:c1:
                    f4:8e:c3:b1:b9:81:65:27:fd:59:d6:91:37:65:f5:
                    f8:ef:5d:34:4c:40:26:33:3a:83:2d:03:0f:3e:5e:
                    0b:88:19:c5:51:72:dd:9f:64:77:8f:bf:ad:d6:d8:
                    9b:6a:9c:41:a6:df:09:68:0c:6c:ab:08:4d:7c:5f:
                    10:66:3c:b0:ab:1d:d4:ed:68:56:9b:c7:8d:a3:b9:
                    e3:84:64:ce:09:8a:9b:43:e4:8d:25:31:dd:db:1f:
                    88:89:3a:37:cf:2d:9b:ca:c7:ce:62:0e:6c:e8:76:
                    eb:36:14:e8:9d:59:f6:2c:31:86:97:50:c1:ed:56:
                    0a:b7:c5:41:e8:b5:59:07:37:39:a2:86:10:35:6e:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E4:6E:4C:BC:88:3F:39:F2:78:6F:B4:72:D9:7D:88:4E:6A:6C:27
            X509v3 Authority Key Identifier:
                keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:05:42:5c:80:bd:65:f1:01:8b:71:eb:03:70:db:a8:7e:
         19:47:13:85:24:4f:64:69:b4:a8:f3:9f:bf:66:d0:af:44:38:
         40:d7:58:86:f4:ce:1d:f8:11:29:c3:9f:10:89:df:9d:78:d0:
         4e:8e:89:da:bf:6d:fa:a9:13:2b:06:c0:2c:17:cb:fe:25:08:
         4b:87:9f:cf:b4:f6:19:40:1c:13:ed:3a:92:16:dd:75:a7:e8:
         69:0c:c8:f2:6d:ff:2c:e0:02:39:13:3c:54:b0:05:eb:f7:18:
         da:f1:cc:f6:4d:c9:6f:15:55:cb:fd:2a:59:42:36:2d:8b:40:
         b0:a0:d3:b8:fb:3b:5e:c2:02:0e:ca:e4:b2:a1:9c:b6:08:dc:
         95:46:a2:46:f4:f4:71:c5:b9:36:b7:0b:84:e3:e5:fb:e4:37:
         d2:b6:48:19:66:a8:2c:e8:e1:07:21:d1:35:87:92:86:0f:45:
         4e:16:57:9d:00:b3:76:a9:7a:29:cc:46:1c:4e:e0:46:3a:93:
         a0:a9:5b:5e:fb:83:65:45:c3:7a:39:ae:ad:5e:e0:78:91:be:
         e1:6c:63:a2:e4:7e:a1:a8:38:bd:1e:51:6a:a8:56:8f:2f:06:
         1a:ad:b8:39:72:9c:35:20:8d:93:5d:58:9f:d8:ba:04:e6:05:
         ce:c8:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----