Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File:                     4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier:          R7ylhAn8dA37XbcGUlSfJUob+SOQjP0E0aGKsZKRJv8=
Subject key identifier:   1F:8F:FA:D3:83:8E:45:E7:E1:58:1E:2C:E8:B0:7C:44:EA:86:35:2A
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer:       /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial:       01962F3D55D2ACB760464BF6B998D2BC65C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number:          0AE8
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: rJYKEwFK6eMK09tgCsQB56em9Az4BAZFtl8jw0wI2bc=)
                          2: E0ztfcYqRXNTHVQ8th7DBM0JCFs.roa (hash: LXPJ0gjb0to5N+vRXKqM1sCi601PFomLREP+hCV5J8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:55:d2:ac:b7:60:46:4b:f6:b9:98:d2:bc:65:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=1f8ffad3838e45e7e1581e2ce8b07c44ea86352a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b6:d1:e6:21:31:3a:27:3e:53:01:aa:f3:8c:
                    62:e6:01:98:c2:c8:43:81:3c:d1:6b:6d:e8:d0:6d:
                    59:68:d5:0e:be:64:2a:23:11:81:66:ff:77:88:6c:
                    e4:a7:c8:12:a4:f3:2a:39:2d:99:e7:8f:19:7a:c8:
                    b4:95:58:9b:a0:06:15:df:c0:24:7e:b8:52:ef:cc:
                    6c:cc:b4:55:2b:1a:44:56:9e:8c:cd:d6:43:b5:6e:
                    1c:6a:c7:4e:eb:9c:e8:f8:c1:8a:c6:cb:e5:ac:db:
                    9b:14:38:cd:51:be:7b:d0:8b:f1:d7:d3:c2:5d:5a:
                    1f:70:2b:20:eb:de:39:c6:35:c2:a2:5e:8a:6a:09:
                    77:e0:21:12:3c:2b:fb:65:84:21:70:0d:47:34:fe:
                    21:3c:29:e2:f4:aa:3e:ec:21:1e:ba:13:6d:37:f8:
                    ea:43:c2:a0:12:79:3c:01:98:2b:fb:75:cb:67:9f:
                    ff:97:e9:22:8f:eb:18:54:c9:e7:33:2d:f6:79:51:
                    d4:ab:5c:48:78:ab:bd:16:10:4d:f8:10:1e:c6:4f:
                    cb:0c:d4:99:dc:c1:40:79:8d:d7:56:62:32:12:75:
                    a2:6b:69:55:27:30:3d:53:af:62:c1:91:57:1d:e2:
                    ea:25:1a:40:85:f1:c2:b8:09:4b:59:fc:eb:5f:fe:
                    79:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8F:FA:D3:83:8E:45:E7:E1:58:1E:2C:E8:B0:7C:44:EA:86:35:2A
            X509v3 Authority Key Identifier:
                keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:15:17:c3:64:25:fc:b9:08:a7:62:81:3c:8a:ae:6d:2d:4f:
         f7:6b:b1:68:29:b7:cd:b1:00:9e:e0:9c:9d:c2:20:51:b4:93:
         d5:0c:d0:1c:24:cc:20:94:cd:cd:d3:3c:52:dc:65:89:ff:89:
         72:c2:48:33:e7:64:b9:46:44:1a:97:e8:c0:b6:cf:3c:c5:aa:
         68:7b:39:cb:ec:aa:5f:47:fe:74:a0:d8:e7:9d:19:51:32:2a:
         28:96:70:9f:67:e6:ed:e2:e9:cc:0b:95:b7:db:82:52:4d:ca:
         ce:18:31:79:3c:06:9a:d7:cd:3b:68:6d:fe:fa:08:b2:66:6d:
         d3:d7:24:30:17:f0:07:e3:f3:cf:23:dd:b7:70:a2:81:1f:dd:
         5b:b3:61:fe:d7:d5:90:9e:e7:66:42:37:73:11:f4:9f:ac:fa:
         04:32:73:91:99:b8:67:e3:44:35:02:4e:83:aa:fa:a3:69:5a:
         18:07:bf:8c:e1:8c:e9:ae:ad:a3:e4:cd:78:48:14:49:84:fb:
         65:d5:57:4d:88:87:ae:14:07:3a:e6:1e:57:fe:d9:b1:3f:65:
         77:42:11:c5:af:70:01:b5:42:27:6a:7b:b7:e1:b0:47:bd:12:
         6c:5e:18:92:f4:75:c9:42:4f:23:ea:26:b2:0c:3d:7d:68:c6:
         b2:b0:80:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----