Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
File:                     4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft (raw, json)
Hash identifier:          NHPsKtSG5wsS/Coy/wbC8R0MNHiwAhhRnfwE8LiQFUk=
Subject key identifier:   D2:22:00:88:B9:B7:2E:64:27:37:DF:9B:D5:6F:46:6B:D3:AF:C4:F2
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Certificate issuer:       /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial:       01962DF3F0047DCA78D1506FC03075457421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl (hash: UI2ju0gKxLYv8aZIxxAUJ09ChVRrIdcCI2B6FbigA8M=)
                          2: GfCJvI9nayXOG-c9-kNZYMtGvRY.roa (hash: iErUIkofrDIWovm2VEktlTu0LGFlXqiT+Jb2IEFCjN4=)
                          3: b6PxSRMMpYMDelZhlHVJswnGzlY.roa (hash: 2hbPovorwIzKGKG+8Z0PbXVcSz91V4CX1uoPUPOxcMk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f0:04:7d:ca:78:d1:50:6f:c0:30:75:45:74:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=d2220088b9b72e642737df9bd56f466bd3afc4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:15:ba:85:34:9c:e0:60:04:5e:d0:be:fa:e6:
                    69:a6:59:86:1b:ae:dd:a4:71:e9:52:15:76:9a:1d:
                    8b:63:a8:84:f9:1c:57:5f:63:e5:ae:9e:da:1c:08:
                    c5:b1:3d:43:18:0b:45:50:cd:d7:cd:97:a0:9a:82:
                    66:19:66:f8:2b:72:7a:56:b8:2c:3d:d7:42:f4:c8:
                    0d:26:8f:ec:8a:c0:ce:36:34:e5:46:11:94:61:ca:
                    e9:66:a8:13:32:08:7d:cb:6b:15:29:70:3b:6f:cb:
                    a1:0f:fc:ce:fd:e7:b4:4f:74:a0:2f:0d:ac:a5:66:
                    44:4c:db:7f:0a:e9:35:d1:09:45:91:c9:02:72:35:
                    d2:71:5a:39:64:42:61:39:7e:3c:58:e5:d8:de:40:
                    3e:6f:58:44:4d:95:67:58:5f:61:79:0b:eb:28:75:
                    66:a4:4a:13:63:03:eb:05:f7:6f:b2:74:2c:56:3e:
                    c4:36:4b:af:1a:be:c0:09:f4:29:fc:6f:22:2f:69:
                    3d:98:20:e0:fe:1d:a6:d9:8d:38:c8:8c:e8:be:fe:
                    93:ea:b9:27:e3:85:00:94:dd:78:93:5c:51:bc:a0:
                    3d:7f:61:e2:73:40:d7:7a:c1:4b:68:f4:f1:9a:b9:
                    48:cb:6a:f9:04:a5:74:d3:45:ef:8f:95:60:83:82:
                    f4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:22:00:88:B9:B7:2E:64:27:37:DF:9B:D5:6F:46:6B:D3:AF:C4:F2
            X509v3 Authority Key Identifier:
                keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e1:26:6b:6b:b2:27:7c:15:89:15:a9:31:d1:a4:3f:01:47:
         cc:38:81:a8:d7:33:b5:0d:4d:08:90:5a:23:a4:a8:d9:8c:7b:
         26:39:77:16:3d:81:55:15:33:77:1d:ec:69:5d:f5:d6:d3:24:
         47:32:f6:b7:dd:f3:f3:65:b0:54:42:68:42:3b:b3:93:5b:74:
         66:27:73:d5:3b:5a:c2:86:20:a0:bb:4b:a3:e8:39:ff:0d:a6:
         7b:db:35:b5:33:79:1a:a2:a2:8d:70:13:34:e3:54:e8:6f:2b:
         22:ef:37:10:cc:07:81:05:fa:9e:4d:37:b0:a7:42:7a:45:38:
         7b:7a:7d:8c:99:88:8c:6a:3b:42:84:98:fb:d5:1e:6d:d1:94:
         f8:0b:01:f6:e2:31:bb:b5:52:cc:0f:48:b6:6d:2a:08:b3:b4:
         5b:a3:2c:9c:4c:0e:3a:b3:37:41:50:86:b1:df:6d:e5:42:89:
         7e:a7:1c:26:93:d0:cc:50:d8:1a:7b:5e:55:5c:a7:a5:84:b7:
         f5:cf:31:fd:a9:5e:b2:94:57:c5:78:23:77:35:c1:6f:07:a6:
         36:b2:b3:ab:a2:17:0a:36:36:85:15:61:57:38:13:db:ad:85:
         fe:aa:5c:1e:f6:e1:84:ad:09:aa:d7:8a:d4:b3:57:98:75:19:
         16:69:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----