Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File:                     ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier:          Rq96cGSZwHrSO9MdnLgNHJTa8BnSEfcwbh0HA7Zs4+k=
Subject key identifier:   8E:83:32:79:82:F1:1F:41:C9:B8:E6:0A:E6:0D:D4:A5:22:A7:38:85
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer:       /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial:       01962F3DC21AB889A88CA8BD39E976219EEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number:          04DD
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: 4WSeXtyAwt7wlWcK2O+amBVUvGWXAJVyo53XpQ1zYrU=)
                          2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c2:1a:b8:89:a8:8c:a8:bd:39:e9:76:21:9e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=8e83327982f11f41c9b8e60ae60dd4a522a73885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:79:44:4c:56:64:79:6f:df:1d:b1:d8:7f:
                    08:23:59:52:4f:df:ab:5d:41:22:ed:2e:43:e8:8d:
                    56:4d:f5:00:64:54:cf:15:38:14:65:d1:1a:36:0c:
                    fd:2d:57:06:2e:75:29:e0:53:bd:e6:c3:43:b9:a7:
                    49:86:f6:5b:1d:8e:1a:2f:df:82:b3:0a:48:19:90:
                    c2:43:7c:64:42:03:de:3b:66:43:5e:90:0a:29:f9:
                    12:a8:20:38:75:0d:62:82:d7:4d:a3:79:f6:72:23:
                    be:05:f3:3a:3a:ab:80:06:67:39:9e:23:fe:13:88:
                    bd:7f:35:89:b5:5a:33:04:26:0e:85:e6:37:02:95:
                    32:7c:0a:24:d6:ff:44:9b:c4:d7:c7:87:48:f4:25:
                    6e:df:c4:21:d1:08:2e:22:d0:a4:25:ee:f8:d7:ee:
                    74:60:cb:e1:d3:08:ee:2e:36:e1:b6:e9:2a:0b:80:
                    68:3d:ba:1c:d3:e5:2c:14:bf:bc:06:4a:80:63:e0:
                    e0:c3:e5:e4:f7:fd:97:e5:06:94:b5:16:ff:40:f1:
                    91:dc:ca:16:71:6f:a0:0a:0c:71:22:31:65:8f:8b:
                    5b:49:06:c2:c5:62:bc:47:1d:fe:1b:da:af:a1:d2:
                    5e:32:d3:5c:2b:1e:1e:65:f1:55:38:7a:91:e6:f6:
                    d6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:83:32:79:82:F1:1F:41:C9:B8:E6:0A:E6:0D:D4:A5:22:A7:38:85
            X509v3 Authority Key Identifier:
                keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1f:d9:7b:75:6b:e4:90:36:81:75:1c:9e:72:5b:fe:57:bf:
         42:c1:0f:9d:63:e4:34:88:25:55:5a:bd:75:11:e4:19:fc:00:
         02:33:06:aa:5e:c8:3f:a5:9d:b3:ba:ec:8c:2a:5e:7e:14:96:
         75:7c:cd:37:7d:e1:df:e2:32:4c:b7:ec:f8:81:9f:11:7b:11:
         9b:71:ed:21:ec:01:09:92:bc:34:a1:d9:36:cf:09:20:c1:5e:
         6b:21:26:ad:6c:82:d3:45:2b:d4:53:54:df:61:21:22:68:d5:
         ae:5d:c6:c2:11:25:93:2f:a6:a1:34:6a:15:a1:cc:b6:28:a8:
         6f:fd:1e:a0:52:19:ec:da:dd:b2:1f:a9:63:00:21:58:41:b5:
         b1:ee:7a:66:27:76:f8:c5:74:d4:35:eb:cb:62:85:c4:d1:07:
         5e:5d:bc:9a:9a:42:71:2c:b6:fa:78:ef:23:65:25:c4:03:d9:
         19:66:e1:8b:9f:8f:bd:82:86:4d:44:f2:06:45:34:ef:99:07:
         50:da:2d:a8:de:0b:c5:42:1c:9e:51:0b:cf:89:cd:15:75:ae:
         f2:25:74:09:4c:7b:03:e3:f5:59:c9:b5:e7:6f:f3:97:ca:cc:
         36:cb:04:04:1e:ae:17:d1:7b:83:8f:4c:71:d2:38:1f:a4:d8:
         29:17:58:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----