Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File:                     4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier:          FWKZDzeF9WId74nbyxQgYiml8HLfYS1SV8pQRlnHYaE=
Subject key identifier:   F1:5A:9C:D7:84:9E:11:D0:AF:31:20:4A:4C:3A:E4:3C:63:B2:B5:E6
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer:       /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial:       01962E61CFEA2B3E39E738F378E8A3B9922B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number:          0821
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: gjZZGcTDHXjDV7+kpcIr95J1h1YiRLyrGUrGcQAnepw=)
                          2: A2XZpMhjoSl2eIpUcSwowos8QQA.roa (hash: 7IQHzb+LeNjLi41+XbYgKffdbEsxRoe4BI+dUjjQXH8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cf:ea:2b:3e:39:e7:38:f3:78:e8:a3:b9:92:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=f15a9cd7849e11d0af31204a4c3ae43c63b2b5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:81:7d:53:fb:1f:f1:4e:4b:de:e4:ba:b8:
                    16:1e:98:69:82:4f:41:d5:99:ae:11:0e:13:7b:68:
                    94:e6:4e:ad:eb:61:86:fe:ff:06:a9:cb:84:75:63:
                    2a:16:91:4b:d6:23:e6:b6:27:df:58:e3:95:df:6a:
                    e0:4e:5b:20:1b:99:e8:31:4d:db:b2:d2:af:26:3c:
                    f6:06:8b:d3:1c:3c:6d:e2:48:e7:09:8f:6b:d4:00:
                    c0:8c:e3:c6:43:c5:b1:be:6b:98:61:da:02:f4:3b:
                    7a:70:15:ab:d9:96:da:eb:82:6b:62:60:40:e1:01:
                    9a:58:c2:31:15:16:ed:ee:7c:13:5a:84:90:81:af:
                    ca:90:96:b1:65:9f:55:cf:18:ba:fe:24:f2:c2:27:
                    9f:e3:ff:bd:e9:8e:22:b5:3e:78:c6:ab:01:4d:59:
                    60:f9:03:28:79:52:7c:66:95:cf:83:df:2c:67:43:
                    50:4c:03:76:b2:d9:48:63:78:b7:32:3f:31:bb:62:
                    0b:60:df:c8:40:ca:d9:38:b0:40:49:9a:fd:12:6c:
                    8f:cc:1f:01:0f:23:dd:b4:5b:89:20:51:c1:c9:1e:
                    c4:c4:ff:7c:ed:75:76:9e:a0:8a:c9:bd:64:a3:15:
                    1e:e5:98:66:b4:97:63:9f:24:f9:89:03:5a:20:c4:
                    a2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5A:9C:D7:84:9E:11:D0:AF:31:20:4A:4C:3A:E4:3C:63:B2:B5:E6
            X509v3 Authority Key Identifier:
                keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:37:95:b0:dc:44:33:cf:84:65:54:97:e9:8c:95:c3:4f:dc:
         26:c5:79:62:d6:df:08:c9:57:cb:f5:44:7a:59:08:91:20:0e:
         62:2c:89:e0:d1:b3:fd:bc:c8:d3:3b:bf:35:cb:07:c5:0d:0f:
         45:64:d8:d2:4a:5d:04:ab:3f:58:eb:75:53:30:d8:82:b3:94:
         87:ce:28:bf:18:78:85:39:1a:c6:21:2c:a0:f4:e1:46:3d:61:
         35:73:19:eb:03:af:43:80:2a:2c:18:18:58:ce:25:b6:8d:dc:
         c5:e2:cb:75:b9:03:1c:3f:41:c2:2e:da:fe:bf:57:18:2d:e6:
         69:3f:f6:19:c8:74:b6:66:e5:98:cd:fb:be:5c:8f:97:05:c0:
         7d:9a:78:b0:49:56:f1:ba:f1:00:93:22:07:fc:d8:8e:f0:8d:
         17:b4:05:02:73:b9:ee:54:2f:b2:9a:52:8f:e8:b5:f8:02:15:
         d0:29:85:78:2a:76:94:d0:4c:28:f8:b3:cf:bf:87:6b:b9:2d:
         91:ad:3e:5e:da:b5:11:42:90:7f:a2:a7:ec:94:5d:8a:a7:b0:
         b1:54:2c:67:05:9c:b2:5f:30:4c:d1:9a:96:24:d3:44:ff:02:
         09:55:31:cd:b3:08:f8:12:5c:b7:24:cf:49:96:57:ec:36:65:
         8d:6d:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----