Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File:                     4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier:          A+IXzlCgeGvZXIOq+bYtdX3VV7oRHKAFXw2WUvnMzbo=
Subject key identifier:   54:A9:FF:CE:CA:27:1F:5B:F8:14:58:BA:C0:A6:F1:56:05:21:03:5E
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer:       /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial:       01962DF3B856B91C771A0966FAD586A722C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: gfIkyD6BM+kEnVFEYEU0uieHtGRFBGykw39Pw5r+Ej8=)
                          2: LKQwgiepoVu5_u8taIAcRutuJ-s.roa (hash: g/2UuKpKO1KSqMbVUrFxetjbdTbJKbXQ9uje0qgEhYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b8:56:b9:1c:77:1a:09:66:fa:d5:86:a7:22:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=54a9ffceca271f5bf81458bac0a6f1560521035e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:8c:f2:38:37:92:fb:32:fe:39:48:58:f9:
                    e8:13:9a:98:6c:61:a0:71:c1:67:74:e2:63:1c:4a:
                    6f:07:4f:b9:0a:9b:74:61:05:96:31:51:8b:60:14:
                    56:27:90:21:a5:a5:24:2d:b5:22:14:57:82:71:f1:
                    ae:47:0d:2b:0d:da:fd:2f:89:6b:e7:83:a0:c5:37:
                    a9:3e:4c:4c:69:eb:f0:06:69:43:b8:55:8c:7b:d0:
                    40:87:f5:97:b1:d0:4a:0f:b9:0f:a3:c8:b2:29:07:
                    b5:6e:29:25:7a:18:c2:3c:49:7e:87:44:c5:11:a8:
                    14:e3:c2:2b:24:09:c1:51:3e:4b:c7:0a:d3:85:e1:
                    fa:c5:85:05:a8:3a:45:b1:ad:8a:cd:49:0a:b9:92:
                    b0:d9:ca:bf:b7:08:92:5b:37:e6:ba:b8:d1:60:bb:
                    ee:ed:77:ca:6b:00:cb:df:15:ec:f1:60:68:c9:00:
                    51:8d:69:31:83:5d:ed:52:8c:1b:6f:3e:df:13:b3:
                    ca:77:c5:5d:4a:02:d8:51:05:89:d7:13:14:1d:85:
                    47:c6:28:59:35:8f:3a:93:b4:c5:14:d3:e7:9e:de:
                    88:de:a0:fb:77:1d:98:24:2a:43:e2:3d:81:bc:1e:
                    ef:6b:8b:29:aa:10:3b:4c:e5:9b:25:a5:05:ea:9f:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A9:FF:CE:CA:27:1F:5B:F8:14:58:BA:C0:A6:F1:56:05:21:03:5E
            X509v3 Authority Key Identifier:
                keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:42:9c:2e:5a:b2:8a:f4:0f:1e:99:88:9a:de:43:72:67:91:
         cf:2c:71:52:fa:96:c8:73:ee:ed:ba:b1:6c:1b:14:59:5d:21:
         a4:63:5d:d8:91:2b:1d:f0:2d:1e:da:88:ef:7e:e6:76:3e:22:
         3d:33:d8:30:7a:d5:69:91:b2:72:d6:02:0f:6d:e7:51:38:d9:
         5d:0b:e3:c6:1b:44:b8:6c:c6:0a:55:15:d9:da:e8:f2:b4:19:
         54:da:24:3a:ef:b5:9a:a6:54:4e:e4:49:4d:5d:3f:34:8e:f8:
         9e:f5:77:8e:1a:d6:24:55:4a:ec:49:0d:ab:c6:84:7f:a2:af:
         3c:52:ef:7a:22:a1:d3:5e:16:53:59:b4:46:a7:23:f9:b8:38:
         58:68:e7:cd:9f:c8:a2:5d:a7:66:21:06:46:d9:33:e5:e7:5a:
         49:68:3f:60:5a:8d:db:f1:ad:a2:7b:8f:a9:31:ff:7b:20:0f:
         cd:28:62:ad:72:c9:cd:01:4f:35:f5:24:62:60:ca:0b:d4:55:
         33:98:27:bc:bd:79:84:c5:86:b7:e8:39:40:01:1f:80:f5:a8:
         6c:fb:bc:bd:53:00:b7:d8:45:e6:7b:c9:39:90:4d:c9:60:bc:
         95:8f:21:ee:57:20:37:fd:59:b2:14:28:67:4d:44:ea:09:cd:
         4c:85:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----