Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File:                     04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier:          Y9iX8KWE2X17nL3fXt9J4OUNYLVwHZjKq50+DZJvmo0=
Subject key identifier:   74:4D:75:C8:1A:1C:90:81:67:95:DB:C0:4D:56:BE:E6:98:89:72:2E
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer:       /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial:       01962FAB953329E83E798CBCD5D52DDC6DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number:          094C
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: XvMTtLhwrMI9oFphjPqZzFuhoc1lVc84cSwZVusCh4c=)
                          2: AIQGxZR891rSmBVRWPkroU6qIS4.roa (hash: tOfNhd24yOv+46VKBC0lmSjrIB+LKTxW7Tn9fRNCeag=)
                          3: XrqeZlVPArjVN5_uF6vXdWiqnXY.roa (hash: HzAhZpTtsFcjrQoG9BcE+tsdXOYDnX7JekwCMYp1Fu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:95:33:29:e8:3e:79:8c:bc:d5:d5:2d:dc:6d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=744d75c81a1c90816795dbc04d56bee69889722e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7f:b5:6e:9d:cc:34:f5:2f:5e:0b:f2:a6:27:
                    d9:82:0f:b1:75:83:f2:0a:d0:59:77:8f:86:f7:78:
                    03:88:ac:c6:8e:f2:02:c9:1e:5a:14:ae:b1:e8:bf:
                    b3:f6:af:ce:ea:74:e2:e3:e1:99:aa:43:4c:f7:d5:
                    d7:67:7d:18:27:d9:51:be:a0:c4:2e:d0:92:43:8d:
                    74:07:8a:db:e3:3d:df:39:c2:5a:50:fe:ca:6a:26:
                    3a:9d:a4:f3:96:de:21:a3:02:d0:54:4b:d2:0d:90:
                    bf:78:5f:20:9d:86:76:df:eb:c3:15:98:2b:97:7a:
                    8a:12:e7:19:f3:a5:a0:f2:e9:ec:9b:20:88:9f:52:
                    8e:61:43:00:cd:d2:94:4b:87:bc:f0:65:72:d4:c1:
                    e6:0e:3f:43:6b:2e:82:2a:42:3b:0b:cd:a7:6a:53:
                    ee:63:56:e9:5c:44:6d:f4:77:ed:a4:8b:de:37:51:
                    48:1a:0b:c0:b7:8c:ae:87:c1:60:25:6f:70:73:99:
                    c4:63:30:4d:ef:d5:56:d7:5a:71:7f:37:c2:87:b9:
                    3d:e0:00:2b:5e:89:d4:e7:63:cc:3b:a7:29:38:55:
                    cc:d6:c1:7b:09:97:51:a3:10:a8:a5:eb:3f:2d:15:
                    63:b0:0f:b0:a9:dc:c9:c3:1a:30:db:4f:24:bd:0f:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4D:75:C8:1A:1C:90:81:67:95:DB:C0:4D:56:BE:E6:98:89:72:2E
            X509v3 Authority Key Identifier:
                keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a6:33:8e:60:33:6d:f1:5c:25:1b:f6:b1:21:49:49:e9:e7:
         bd:4d:61:25:95:cb:99:e0:da:aa:40:5e:65:18:fc:b6:fc:b8:
         c3:51:86:16:88:11:a8:04:dd:20:11:c4:37:0c:2c:b3:d9:b3:
         b7:82:30:de:55:30:63:8b:b7:8e:08:03:63:2f:74:5e:01:85:
         53:8a:32:77:ca:b1:b6:17:44:91:09:d5:0d:17:d9:55:fd:a6:
         88:77:95:a0:cd:b5:09:e5:de:28:8e:72:22:ee:c0:c1:55:3c:
         9c:10:dd:59:55:db:1e:58:13:11:e3:c0:55:97:65:0e:fb:28:
         0d:0e:43:53:91:5d:17:48:2e:34:61:77:84:6a:1c:dc:17:cb:
         fa:7e:86:60:a6:f7:46:3a:71:c4:8f:70:98:ba:80:60:2d:76:
         e1:52:67:02:e6:17:2f:22:61:c9:3f:72:a5:ca:7c:bd:49:68:
         eb:07:98:63:fa:fd:47:f5:94:ac:cb:09:81:ae:fd:d6:62:fb:
         61:bb:2f:82:76:68:4a:84:c2:20:78:ba:79:a1:34:6a:5c:d3:
         56:19:53:75:5e:21:74:55:7c:ef:fe:57:eb:72:7a:eb:4d:3b:
         2e:c9:18:54:de:c2:e8:58:ee:68:c4:a7:c3:89:88:0a:f0:9b:
         df:f0:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----