Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
File:                     5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json)
Hash identifier:          4XP3RD93Ex+JcssdQz/IQXnH13t0SGoS+sV+6f28XQY=
Subject key identifier:   7C:DE:3F:0E:86:9B:55:55:DE:DE:1D:39:A2:A6:A9:3B:92:23:7F:8D
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Certificate issuer:       /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial:       01962E2B0AC1B3FD7036B8FE8E9640A9D6D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: 3fE32OSVcW+8sCpmvaQLQozzGZM9u8mQHH6gmyE4v0w=)
                          2: Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa (hash: FohmZC9RjfkLWGSkIiIa2VtU1w5u6RfcN+tDaynMZcc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0a:c1:b3:fd:70:36:b8:fe:8e:96:40:a9:d6:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=7cde3f0e869b5555dede1d39a2a6a93b92237f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:55:5a:73:39:09:b2:57:7d:7e:4a:49:f9:
                    4e:56:8b:f4:5f:01:16:98:60:b7:50:e4:e2:a3:55:
                    b6:ee:33:10:6d:94:28:fe:a3:61:36:ff:8f:8d:b2:
                    cf:a0:cf:ff:f3:88:fe:5e:64:64:aa:60:7f:c1:09:
                    17:a4:67:01:cf:fc:c3:ae:2e:bf:d6:ad:5d:9d:3d:
                    2a:b5:3b:ae:1d:be:6d:1e:7e:f5:83:e9:82:f3:d3:
                    dc:7a:38:9c:93:c5:07:2e:34:e0:cd:68:ea:8e:b6:
                    d6:30:bc:af:38:98:35:98:66:6a:24:15:0a:45:b9:
                    2a:dc:2c:a7:f5:4c:ee:ca:01:2b:90:4e:92:bd:87:
                    7b:e5:6c:9d:f2:08:05:cb:24:0b:e5:67:11:66:40:
                    6d:42:f3:e5:17:94:57:7e:26:a9:4f:50:ce:11:f4:
                    9f:80:43:0e:f1:69:ac:3f:8d:f7:82:0e:e5:8f:27:
                    ca:6e:c3:02:56:8b:57:16:4b:1d:4a:72:c6:44:fb:
                    9f:c1:01:a8:96:1a:c7:e5:5a:56:33:16:75:9b:cb:
                    95:31:7a:00:be:b8:3f:38:10:26:19:70:8c:b9:04:
                    ec:c5:66:42:40:94:3d:52:03:3c:ab:b7:dc:c6:53:
                    fb:a7:f8:78:e3:63:e1:a6:b6:bb:27:af:f1:6b:86:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DE:3F:0E:86:9B:55:55:DE:DE:1D:39:A2:A6:A9:3B:92:23:7F:8D
            X509v3 Authority Key Identifier:
                keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b9:98:c7:a5:20:9f:3b:bd:7f:77:99:c9:cf:63:b2:b5:50:
         a6:c2:ac:ec:0a:56:87:54:bc:01:63:14:b3:98:22:c4:46:a4:
         eb:5e:d9:4f:4e:e3:7b:a9:70:24:5b:f0:49:db:b1:25:e1:e4:
         a7:1e:0e:26:ff:b4:2f:d3:24:d9:15:d3:33:07:f5:02:38:d1:
         38:b0:5b:ce:4e:c4:f7:a6:41:b8:81:9e:1c:33:90:f4:51:04:
         52:d3:33:d8:57:cd:10:08:2f:e4:49:f5:71:d2:73:3f:32:6b:
         a1:b5:72:14:de:30:1f:70:1c:07:27:b1:5e:b0:75:53:4a:09:
         c8:12:10:a8:74:8b:d6:20:c3:74:03:a4:4b:2f:8b:47:b2:cb:
         bc:2c:96:df:50:cc:c5:90:4f:97:3d:94:f1:c2:99:a0:06:74:
         ac:ad:04:52:ca:ec:eb:03:b3:6e:07:38:89:a1:e6:40:2a:e9:
         ed:d7:78:d5:f6:60:a4:59:0f:fc:1e:83:f7:92:59:c2:cd:d2:
         64:e4:bc:e2:a1:4f:3f:c4:f2:31:e3:6e:8e:1d:76:ad:82:5e:
         45:85:db:31:49:c5:c5:02:8c:13:c3:b1:f0:0e:ef:fd:17:62:
         aa:69:b5:89:1f:38:5c:08:c9:29:06:29:3a:46:ad:37:95:48:
         7d:ff:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----