Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File:                     4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier:          BWzsO8A7WAaEWiYdiGkaIAq1kJrSGRvxMysAok3Go+s=
Subject key identifier:   F0:65:79:3B:DE:EA:D6:ED:47:05:B1:52:CB:21:2A:D9:B4:2D:28:5C
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer:       /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial:       01962E2AD5739538EDB20E42882857DAD8C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number:          0F8D
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: 1d+L1issN4AHnIXrNNBuvHwMaXjMDxeKdWjBspsfSYg=)
                          2: 8VHFK74OMKQnD381WiG3ZZR7ozs.roa (hash: B7p/Hrvwz47SgwLmobk1ZKXWoI4oqfm1r3I4SkLnjp4=)
                          3: FzW7JoU60fLZt2V4T6FBU_g7_7M.roa (hash: qY7+Qky1B0UxdHy7k1LwwjYXXxPZ34Le32XJ4CBXqQk=)
                          4: UEAGL23cUguO7LaV9ntB8GG3vLI.roa (hash: HW/Eripbr/hRHy1giNb2s3DucUSazcSMRbltO/ThVTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d5:73:95:38:ed:b2:0e:42:88:28:57:da:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=f065793bdeead6ed4705b152cb212ad9b42d285c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:19:d8:19:97:d4:73:3b:0f:26:0e:98:12:6a:
                    1b:cc:39:8e:e2:87:e9:78:78:08:4f:de:b6:dd:8b:
                    d4:33:1e:d0:98:67:7f:11:c7:d6:4a:af:72:12:f6:
                    e9:50:bb:2b:4c:27:4e:d3:9c:39:fa:13:82:35:7e:
                    9f:74:ac:05:ba:df:3c:9c:4d:c1:81:f3:04:c4:be:
                    a7:ed:c9:ab:5c:fb:3a:08:39:b3:b1:d0:c7:dd:9b:
                    ad:b2:d7:48:9e:3d:da:b9:73:95:d5:d2:3e:fc:9b:
                    5c:3e:0a:7d:e7:19:44:72:3a:6f:28:76:82:52:e7:
                    b8:93:23:5d:5d:d5:45:2f:e9:4d:7e:93:19:d8:eb:
                    11:b7:eb:58:54:13:be:d7:83:84:76:83:7b:45:4f:
                    41:96:05:50:16:bf:7b:38:88:63:d4:08:b4:04:22:
                    24:60:47:fd:4f:d0:68:24:aa:b3:37:31:c8:ba:8e:
                    56:24:46:b4:23:ee:5f:7e:38:11:ac:89:b2:43:8a:
                    e3:41:fd:81:54:4e:ed:ba:83:f2:93:ed:1f:7d:b8:
                    98:3c:2e:5a:a7:a2:ef:14:be:8f:10:f3:dd:c3:52:
                    11:52:02:07:b9:0f:8e:8d:c9:49:4f:65:43:8f:c1:
                    1b:a3:a4:78:90:f3:db:53:01:84:51:cf:ee:79:07:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:65:79:3B:DE:EA:D6:ED:47:05:B1:52:CB:21:2A:D9:B4:2D:28:5C
            X509v3 Authority Key Identifier:
                keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:04:9b:20:cc:8f:60:3d:be:9f:bb:ce:12:62:40:9b:8b:18:
         4c:94:27:f3:3d:5a:f0:45:eb:1c:b7:79:ed:08:2f:03:20:63:
         bd:48:8e:39:b9:62:56:d8:38:4a:f2:50:1b:d3:0e:3d:49:86:
         7d:ae:e3:ee:46:7d:a8:e2:1f:77:9d:78:bd:0a:ae:64:71:66:
         97:cc:9b:36:cb:29:08:ee:e1:d4:3d:57:49:94:41:3b:2a:eb:
         44:a5:7b:21:4c:de:21:c8:1b:c7:d0:4c:2e:68:17:0d:a9:54:
         36:2d:b4:68:8a:34:f7:b2:53:a4:75:54:af:25:72:2f:85:11:
         92:67:73:21:42:2d:01:43:ca:60:09:3b:7a:f0:76:28:5f:d2:
         f5:6f:b4:d4:d8:38:90:f8:3f:5f:70:b2:a7:53:a2:eb:f1:fc:
         47:46:ad:35:f3:44:89:a1:7a:74:96:aa:92:b7:fc:14:df:60:
         2a:eb:1e:5f:6e:bf:d8:ec:e4:14:3a:6d:86:a3:fe:78:05:73:
         94:e6:5d:42:a3:96:94:d1:b0:6e:37:80:36:76:9e:bf:aa:ef:
         62:f5:0e:1d:ab:6e:bf:cc:03:a9:cc:c3:d7:3f:0f:7d:b2:29:
         82:8f:75:52:2a:58:37:a9:25:ea:a5:53:09:c2:4e:e2:b7:bc:
         c3:1b:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----