Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File:                     Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier:          gG3sYexmeCuf5Thd5yYeMAGVQkBzTiHIQq6GjQrolTo=
Subject key identifier:   1B:18:7C:C3:71:32:F0:46:F6:7A:35:A4:15:84:9B:CF:A7:E3:6A:C3
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer:       /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial:       01962F7486E4F65F4AC0499038F047DD5B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number:          02F5
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: l5wpnp/aaMu88zKOx3Sq+AkhXPsY4OsaUt4ExprO65Q=)
                          2: hXFvDfauLNPAF9WisFevrAfOB1o.roa (hash: +PM39yo15WknA3d/avFILeomoy0TBmCYWA48pwr5g+I=)
                          3: si-C49_gCXDqHgV15BpjmdVSEiE.roa (hash: M/s+DA7HYj5VOC6CBgokuKGD9N5LSw7UMOrHEdp5Yqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:86:e4:f6:5f:4a:c0:49:90:38:f0:47:dd:5b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=1b187cc37132f046f67a35a415849bcfa7e36ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:37:e2:7a:14:cb:6e:a3:2d:33:5c:4f:8d:
                    87:4f:0a:bf:15:03:a3:72:eb:ee:fe:30:f3:16:49:
                    b0:d6:07:83:ea:34:9c:cd:61:85:6d:dc:c5:77:ca:
                    5d:67:62:d7:72:ee:0b:c2:45:83:65:4e:68:6a:3f:
                    03:7b:63:52:11:66:80:84:09:52:08:f0:52:fd:d6:
                    28:b8:6f:53:8d:3b:ec:22:fa:82:d0:19:dc:9f:ae:
                    c7:3d:42:ad:da:fa:06:cd:86:05:0d:02:c3:93:25:
                    ab:7f:e1:27:f3:89:4c:e4:8e:71:4a:4b:4e:f8:81:
                    a4:4d:1c:67:bc:92:be:ca:c0:76:68:84:ce:72:05:
                    ba:0b:29:6a:99:96:2b:71:43:17:8c:40:22:e6:da:
                    e9:43:02:a8:d8:97:e6:a1:75:75:55:b8:dd:4f:de:
                    92:4d:b7:d7:3b:43:d3:f5:61:07:5a:6c:06:d0:c8:
                    b9:38:91:57:a6:63:19:cc:40:bd:d8:3b:4f:3b:39:
                    aa:30:54:20:24:03:3b:0c:e2:a7:3d:30:93:87:67:
                    30:f7:25:30:f9:d0:79:27:70:c8:75:db:21:ea:4c:
                    92:a9:c9:1d:35:e7:39:23:50:7f:22:54:55:e1:4c:
                    ac:cb:fb:dd:b1:ae:ed:ab:71:36:a4:2d:77:cc:32:
                    57:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:18:7C:C3:71:32:F0:46:F6:7A:35:A4:15:84:9B:CF:A7:E3:6A:C3
            X509v3 Authority Key Identifier:
                keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ac:93:db:d3:54:19:e1:23:8a:12:77:18:7d:53:fc:51:77:
         de:27:d6:6a:5e:31:86:a5:bd:49:29:81:7e:24:77:d4:dc:36:
         bd:65:53:76:e1:e5:6a:b4:ee:a5:8d:99:1f:1e:07:01:1f:f4:
         54:fc:0e:83:93:30:fb:4e:34:ae:eb:d9:b4:0e:de:69:f2:d4:
         60:66:84:dd:b4:65:3a:da:a7:24:6a:7d:ff:6f:42:dd:bd:cc:
         c7:39:ae:65:d4:bf:37:73:63:b7:e6:8d:77:c4:dd:eb:8d:70:
         80:9c:0f:ca:c6:b5:e0:19:56:0c:87:73:c2:78:5d:ed:8c:43:
         57:c3:8b:01:ab:13:12:e2:c8:fa:f3:6e:cd:da:cb:6d:8a:e7:
         11:cc:7a:e2:d0:f3:6e:31:3e:4d:2f:c8:2a:79:ac:b3:d5:bb:
         37:26:31:a4:9e:7f:10:32:be:59:2c:f8:04:a6:e1:af:c1:fe:
         79:f7:ee:d8:f2:1d:cc:28:ea:51:7b:a3:0e:10:08:78:82:db:
         61:ff:fa:76:89:83:24:9f:19:d0:cf:90:2a:f6:21:11:11:d4:
         00:9a:85:3c:eb:40:0c:0e:ba:5a:ab:73:a3:86:0c:80:b5:a0:
         8c:b2:c2:61:26:13:b8:83:9a:45:03:f8:d1:5b:2c:62:6f:f0:
         f1:63:6f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----