Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File:                     4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier:          8hLFHyTHu5R4Rmi+XXqQqQzpjMCnM23eJ1iej8UVnt8=
Subject key identifier:   EF:C3:26:16:2A:71:8D:ED:EF:24:DA:6B:6A:93:C7:D2:4E:70:ED:73
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer:       /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial:       01962F3D371BB61D19354A8EEDE292FE4C7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number:          0145
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: JvldOLFzufc7Lzo+Yf+VFoixXuyleVvOey/AhozA1As=)
                          2: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (hash: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:37:1b:b6:1d:19:35:4a:8e:ed:e2:92:fe:4c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=efc326162a718dedef24da6b6a93c7d24e70ed73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:ce:2f:14:2c:67:d9:ac:b5:2e:1d:6b:6a:
                    90:5d:e0:3a:97:ea:19:2d:6c:3e:c7:d5:58:77:60:
                    60:4e:0b:00:78:03:ef:2d:c9:69:6e:d5:33:05:99:
                    a2:79:0e:e8:04:1d:3a:4c:f1:12:2f:3a:9c:b9:8d:
                    f1:56:50:46:b8:5f:6d:7e:7b:0d:91:90:9b:d9:c5:
                    63:10:a2:67:05:ad:1f:88:9e:ff:58:16:1e:c1:8b:
                    62:f7:41:89:4a:04:e7:74:05:c0:49:2f:2b:e8:8d:
                    ae:8f:a2:e0:cf:56:c4:22:67:2c:00:e6:7d:42:8d:
                    5c:0a:4d:df:ec:e9:3b:c1:2e:83:38:75:ef:c1:e0:
                    d4:b9:c6:d6:c7:32:b9:da:e0:6a:d6:68:b3:ed:32:
                    71:84:4d:6f:28:ef:dc:5d:2c:70:88:2c:b4:cf:71:
                    61:e2:5d:c6:5b:61:ee:30:40:50:5c:e0:8c:d9:99:
                    8e:26:34:23:e5:d3:11:04:9e:50:1f:00:9f:b9:3e:
                    bb:f3:7d:81:fd:6d:2b:c0:36:23:c8:8a:53:5b:7c:
                    61:be:1c:f4:76:30:ae:c9:3d:d2:25:4b:43:84:c7:
                    40:4c:a5:c4:f5:6d:f4:21:22:85:b7:33:f9:35:21:
                    54:05:e4:0e:ee:77:cf:ac:e3:14:9f:40:b0:3f:52:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C3:26:16:2A:71:8D:ED:EF:24:DA:6B:6A:93:C7:D2:4E:70:ED:73
            X509v3 Authority Key Identifier:
                keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0a:b6:bf:b1:4f:e5:02:e8:98:bd:fb:e1:bb:74:1d:39:b4:
         d7:b4:d5:3b:4d:30:29:cc:54:0c:25:ac:6c:29:ce:f5:cf:d1:
         21:99:8e:60:39:34:5b:ba:4b:41:9d:a9:20:d6:65:94:97:bf:
         84:7e:1f:46:28:92:d4:f2:fb:c6:6c:ed:7e:c7:7b:b1:31:64:
         8c:36:6c:0c:28:73:41:a9:30:2e:16:be:c1:c8:26:30:ef:8c:
         83:ba:39:f8:60:9d:d8:87:35:a7:c8:a5:1f:c3:77:36:db:65:
         bf:e7:ac:1c:14:4c:55:ae:0a:22:34:a4:79:22:84:c5:34:8a:
         35:20:19:eb:b6:7d:98:72:ff:2f:95:42:14:90:73:24:63:56:
         87:3b:ad:e9:61:35:50:fa:aa:d0:cd:d9:1f:da:51:59:b1:53:
         4d:37:f3:9c:cb:03:48:8e:40:dd:bd:d8:78:a2:44:3a:2b:f6:
         53:56:41:81:5c:eb:b2:8d:b5:8c:58:0f:1a:ab:dd:0c:23:e9:
         35:87:e9:31:a1:4c:2d:55:82:a0:90:0a:aa:3d:43:99:ca:2a:
         f3:4c:8d:53:c7:51:ba:f9:54:83:9d:67:4f:3a:61:f1:7d:f4:
         8b:04:50:6d:e1:19:83:0d:53:44:f9:62:69:79:17:46:e6:47:
         75:8d:be:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----