Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File:                     4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier:          gBZD3vM+G5CEBiwKz6soT2t+B8FHjFHlICra2Tzxsww=
Subject key identifier:   B7:24:F6:E9:01:0F:97:E9:6C:91:2F:CC:B2:86:68:2F:12:60:0F:EA
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer:       /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial:       01962E2B26D5F1E5CDD5E10CC40E3525FAAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number:          101A
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: p5rTL2GY6tq3AxJ/j9PixJqL/wTctdK1FyrfPlA0yLg=)
                          2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:26:d5:f1:e5:cd:d5:e1:0c:c4:0e:35:25:fa:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=b724f6e9010f97e96c912fccb286682f12600fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d8:d0:ce:f2:5a:81:11:a5:74:36:17:0d:1f:
                    37:14:60:5e:7d:bc:6e:38:f3:48:9a:94:ca:1b:48:
                    ed:ff:1d:01:d9:87:9d:cf:6e:ae:35:e1:d2:af:5f:
                    9e:94:c6:99:de:05:c8:75:98:14:e7:e0:c8:ef:8f:
                    65:37:fc:6f:b5:eb:7d:99:ea:24:d1:1c:47:c6:00:
                    43:79:8e:40:13:7f:b6:86:86:d5:f4:d2:d0:e1:14:
                    58:69:f1:76:3a:38:fd:4d:59:36:a3:5d:10:b2:57:
                    72:d1:e9:54:51:2c:f5:99:e0:c5:a0:f0:4a:e0:69:
                    1d:61:97:da:1f:98:21:1b:6a:61:06:fd:45:0b:90:
                    9e:8b:78:73:d1:a0:1a:85:09:c8:bd:73:7e:d6:95:
                    8e:96:ef:76:98:fb:ca:4e:23:1c:9e:09:62:02:59:
                    49:9b:e7:de:02:98:45:23:f5:9f:ff:79:98:4e:05:
                    9c:fc:6b:7c:37:a9:4d:aa:a2:39:e6:fd:2f:1c:68:
                    71:e0:ff:b0:cc:5c:bf:c1:bd:84:21:05:05:91:0f:
                    2f:12:8f:df:f6:37:e4:74:8d:ae:f3:a4:e9:16:40:
                    db:ef:99:85:c8:a5:dc:d8:6b:30:99:a5:43:53:d0:
                    17:32:92:b6:68:7c:87:b6:95:b1:b1:d3:92:4f:a8:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:24:F6:E9:01:0F:97:E9:6C:91:2F:CC:B2:86:68:2F:12:60:0F:EA
            X509v3 Authority Key Identifier:
                keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6c:32:39:0c:82:14:70:89:93:d3:2b:f7:3a:46:db:55:46:
         8a:00:3d:e3:90:60:61:e0:ca:cc:8d:48:7f:75:ee:33:23:55:
         dd:db:9e:7a:0d:95:9e:9b:67:8b:ec:35:b6:d1:20:0a:02:ae:
         61:f8:38:cb:20:8b:05:12:f6:61:2a:10:93:90:1b:8f:3d:6f:
         c4:bc:be:62:d5:41:ad:1c:fb:d9:90:a9:ea:6c:66:6b:10:7e:
         f8:2c:37:17:22:88:bc:bf:9f:0f:ea:3a:5a:8b:60:18:ee:17:
         ed:ab:d1:54:75:c4:87:c2:7e:72:a9:bb:92:1e:fc:dd:d4:75:
         dd:ae:b8:f9:23:4a:11:9d:dc:f7:b7:c3:62:2e:d8:e8:44:29:
         ee:b8:a3:55:32:a6:54:c0:f8:31:b1:cb:2e:95:4a:85:cb:01:
         7e:eb:a5:a0:63:f1:77:10:68:c6:86:34:19:69:e3:f4:58:bf:
         d5:e1:3d:df:fb:b3:2f:e7:61:34:a5:9d:a6:36:47:cf:18:c9:
         02:50:97:e8:42:ed:34:ba:72:27:1a:34:fa:93:6d:3c:1c:79:
         09:fa:ed:4f:14:25:d1:49:d3:07:b3:2c:c1:18:06:89:a4:53:
         b2:1f:6e:35:65:0f:50:60:38:40:b9:0f:45:fc:1e:d5:9d:4a:
         71:e2:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----