Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File:                     4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier:          urlS2yh5TRFz14quhvhSB9PP3QrT0hspj9QyXhB7KJU=
Subject key identifier:   18:67:A0:C0:95:BC:1F:15:CC:F9:B0:27:28:C7:4A:C2:A1:7A:41:FC
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer:       /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial:       01962F74DDD8ECBFCC7E112A58D9DC164741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number:          0C83
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: sysinolk0OmUqUurJ1fwZXaNCqKtFM9Eewa5+fAaBQg=)
                          2: Fl9jCud-UU_nsltrgxF4woEzDPA.roa (hash: t0KQ+pJmnr1NHNCgrJUYJH3j4t5bgDietQ+c+4tjYIw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dd:d8:ec:bf:cc:7e:11:2a:58:d9:dc:16:47:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=1867a0c095bc1f15ccf9b02728c74ac2a17a41fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5b:3d:d6:17:ec:ca:68:4b:c7:d7:df:4f:3d:
                    e4:d9:15:9e:ae:d5:55:54:28:0a:5f:98:d7:0a:eb:
                    d1:4c:1f:ca:68:5a:d4:fd:fd:d6:57:40:e0:4d:b1:
                    59:c5:fe:c4:b9:44:62:f8:0d:f4:29:5e:75:0b:da:
                    a4:13:78:07:e5:34:34:52:30:80:73:73:bf:e5:46:
                    de:71:ac:48:50:61:c2:0a:41:70:20:73:91:6b:d4:
                    08:a6:85:c5:e2:11:d2:96:91:14:f3:1d:0b:71:05:
                    23:00:dc:0d:9c:a6:16:53:8e:1a:82:00:58:47:0b:
                    0a:5f:7c:f2:38:ab:c6:ad:e9:b5:fb:ef:f5:b9:bd:
                    7f:e8:d1:11:79:4d:80:12:8e:d2:07:f0:49:44:76:
                    7f:0f:8b:3d:21:74:9d:13:9d:3a:f2:66:6e:19:ce:
                    d4:a1:89:0a:58:98:15:54:20:fc:68:3c:f9:92:24:
                    18:56:47:7a:58:74:9e:e0:4b:95:4d:17:f8:08:a3:
                    33:17:8a:74:70:90:3e:aa:39:4a:a3:12:78:50:65:
                    6f:e6:25:9c:74:b4:b6:91:ac:f9:c8:dc:86:69:f6:
                    49:78:b7:ee:1c:10:29:64:6d:4d:4c:80:d8:6f:8b:
                    cb:a5:91:71:de:19:8f:a2:1f:90:a8:c0:7d:b8:96:
                    75:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:67:A0:C0:95:BC:1F:15:CC:F9:B0:27:28:C7:4A:C2:A1:7A:41:FC
            X509v3 Authority Key Identifier:
                keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:79:5e:84:6c:c7:45:c9:9d:54:7c:2d:43:e7:e3:84:42:
         94:19:17:dd:f7:9f:a4:f5:b5:76:4f:1c:10:8b:5e:78:57:cb:
         c8:af:af:e8:58:82:ca:a7:7a:07:88:24:0f:51:65:a5:2a:e2:
         e4:26:78:77:6b:0a:e0:de:3c:20:10:ac:2f:8a:46:db:9c:3b:
         1d:ee:68:7a:c8:53:e8:74:0e:8f:fe:88:a7:03:eb:cd:c5:5a:
         30:82:67:41:2f:c7:3e:bd:c7:cb:6a:07:00:6d:60:df:d8:05:
         40:ca:77:08:2f:af:17:ea:85:89:b1:de:13:59:a3:2d:47:cb:
         1f:27:06:16:2f:7f:1b:a3:56:3b:2d:7f:95:d0:9a:8e:55:47:
         1c:9f:e2:40:e9:f8:f5:4a:fa:6c:ff:6b:96:76:6e:da:df:7f:
         ae:c2:cd:51:c3:1e:e0:47:44:ee:dd:a3:6f:c9:6f:9f:b9:38:
         d0:ac:12:97:c6:b4:13:ee:a5:28:d4:51:88:f9:5f:76:ce:62:
         80:1e:ff:11:7d:04:7b:89:d9:f4:dc:45:c4:84:41:5a:c8:d7:
         64:be:e9:ba:a1:33:01:2c:4c:f5:b6:f2:d3:34:d4:b1:6b:b7:
         86:5a:b7:a7:1d:f1:54:44:39:2b:de:48:2b:e3:d3:06:4b:85:
         8f:fc:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----