Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
File:                     RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json)
Hash identifier:          kJbeQ6lw3L9jzJsP5Cb7JK6oONE3Cmq8TXuJ+3XWCXI=
Subject key identifier:   3C:AC:32:B0:90:EE:D7:38:5F:C9:7E:80:D2:C3:62:30:42:8C:D8:F7
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Certificate issuer:       /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial:       01962E98B50E6730419295C3C44D13F4A40C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
Manifest number:          0FE2
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: 1bxktkx6yVbEC0UXOvgw5Ldtczc/ls63BTQoJhpbMCI=)
                          2: j6btVEkYHnL9gWowTqe50VXUUIk.roa (hash: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b5:0e:67:30:41:92:95:c3:c4:4d:13:f4:a4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=3cac32b090eed7385fc97e80d2c36230428cd8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:be:4b:1c:05:83:e6:62:e9:02:9e:31:da:
                    c6:2b:99:59:4f:14:9c:80:dc:fa:d5:dd:e6:f2:91:
                    1d:21:4c:24:f0:07:d0:a0:58:da:58:ba:a6:2c:8f:
                    6e:61:b3:d4:65:fd:3e:3f:48:24:1a:3f:10:57:8c:
                    77:2f:cc:ef:46:1c:dd:e6:c8:31:e9:0b:74:1e:66:
                    ad:6f:14:53:67:34:68:6f:3d:09:e2:42:18:3b:68:
                    bd:ee:6e:48:0e:13:84:f0:a6:a6:7d:ff:92:3b:35:
                    a5:67:ee:8a:8d:10:e7:d4:12:eb:bd:8c:69:06:0d:
                    84:ec:3e:d8:92:19:7d:32:c9:ec:0c:e5:d5:57:7f:
                    a1:38:6d:43:7d:96:57:d3:06:dc:f0:85:ed:2d:54:
                    dd:a3:0e:9a:49:a3:9c:77:53:14:3f:4b:90:c5:41:
                    23:29:a3:42:d1:7b:26:39:ad:60:26:91:14:02:8f:
                    19:20:64:2c:4a:f6:09:a0:5d:72:b6:ae:f6:cf:e4:
                    70:f6:5b:46:0a:b6:06:55:22:5f:44:58:6e:26:4f:
                    1f:d6:da:9a:5e:dd:71:6a:bc:3d:2d:24:0f:7d:46:
                    8f:21:8a:9f:bb:08:81:09:64:b4:c6:00:dd:23:02:
                    fb:ed:54:23:ba:44:a2:ab:2f:d4:3b:46:4e:d2:d3:
                    a9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AC:32:B0:90:EE:D7:38:5F:C9:7E:80:D2:C3:62:30:42:8C:D8:F7
            X509v3 Authority Key Identifier:
                keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:45:32:35:31:36:6a:a8:4e:91:74:64:06:cc:08:21:c8:
         b6:4f:56:bb:a1:e2:40:cc:42:85:6c:8e:ac:7b:08:99:47:ed:
         6a:4c:9d:c5:11:df:47:32:7b:18:16:48:98:1d:ab:48:d8:2e:
         0a:9e:c7:be:62:85:d9:d0:cc:02:ee:ee:13:ed:dd:b7:83:eb:
         25:67:c7:64:db:62:9c:ea:78:14:2a:b0:86:30:cf:4d:a8:38:
         f5:db:81:b3:69:5f:c7:e2:cd:c9:8d:58:e9:3c:4f:cb:b4:35:
         91:f4:21:5e:db:d3:05:a3:91:dc:ed:2a:c0:68:89:e9:79:ef:
         29:91:08:ec:87:71:25:ad:57:de:0b:6a:58:ba:8c:66:a5:f2:
         b2:b5:97:56:70:f9:d9:03:38:1f:f9:e0:9e:e8:20:9c:37:8d:
         4a:4d:ce:ae:6b:fe:3f:3d:d5:33:06:61:ad:1f:5e:77:03:04:
         cb:21:d7:6f:cd:59:b0:4c:26:b4:54:1d:2f:bd:4b:5c:43:3e:
         ea:b6:ef:1f:eb:d7:ee:e5:b6:01:9a:27:05:aa:f0:77:fd:b2:
         0e:39:1d:3d:f2:bf:3a:b8:33:b9:71:31:4b:30:74:2a:22:d3:
         f8:44:e4:ab:af:9b:9a:ec:7b:91:97:2e:be:1a:e1:ba:f2:b1:
         ca:c4:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----