Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File:                     xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier:          +cHc11Ix44TkN/0sNck58E8X090YAq83nA+JVJq40B0=
Subject key identifier:   9F:50:21:BD:8C:73:26:CA:D2:50:B4:5C:2E:68:8F:7E:A9:CA:39:1C
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer:       /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial:       01962DF41DF441EDF6E9002C52926FC87C49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
                          2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: sID1cdoiUmc6iJvY9ZH6qlA9IvRjAIIGCySMFR5/TsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1d:f4:41:ed:f6:e9:00:2c:52:92:6f:c8:7c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=9f5021bd8c7326cad250b45c2e688f7ea9ca391c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:8f:7b:b1:7d:f2:c6:40:c0:5e:0b:fd:8d:
                    ef:c9:11:e9:dc:cb:5c:3e:43:d4:f0:b0:d6:0c:ea:
                    73:2d:f8:c1:04:80:28:89:dc:78:4c:6b:8d:04:30:
                    11:c9:99:45:f2:c6:5f:93:1c:6e:97:8e:27:19:cd:
                    bc:b9:fa:ad:25:fe:b4:a1:e7:95:85:88:f0:63:5a:
                    f0:aa:91:15:8d:47:9f:69:0a:33:1b:cc:5f:5c:d2:
                    65:28:2c:29:4c:00:01:7e:cd:2f:0b:44:39:dc:7f:
                    c4:47:a3:ca:e1:cd:44:0e:98:a2:a4:57:dd:e8:30:
                    92:9f:7a:02:e4:45:13:25:88:68:f7:3f:07:46:00:
                    4c:e0:d2:09:d4:8e:38:37:a2:37:3a:b8:7c:31:ae:
                    c1:75:21:c7:93:a2:c1:0e:ea:ba:3e:49:2b:bb:b6:
                    5f:3d:0a:e8:bf:10:a6:74:6d:0d:6a:3f:65:0f:70:
                    8a:ce:3c:f4:8d:e8:7b:24:3f:ac:c5:d5:ba:68:25:
                    f9:cc:35:08:fb:60:e5:42:d9:45:3d:0e:e0:5a:46:
                    c6:c7:a6:d5:11:40:a3:cf:5b:a9:f5:fa:e9:58:a6:
                    f0:46:44:6f:73:12:8b:76:26:e4:a0:27:3a:1e:9d:
                    79:c5:a7:25:e0:5f:1b:4c:dc:7f:bc:53:10:ac:6f:
                    aa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:50:21:BD:8C:73:26:CA:D2:50:B4:5C:2E:68:8F:7E:A9:CA:39:1C
            X509v3 Authority Key Identifier:
                keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8c:b2:49:8b:86:28:90:47:5a:8e:c5:b2:46:a4:a1:85:21:
         4b:3c:4c:29:07:61:c5:9f:a7:d7:ee:2a:a6:72:73:44:91:5e:
         ff:1c:53:4b:2a:b4:6d:6a:7e:6f:98:4a:d0:7f:cb:f0:b1:9c:
         39:b2:89:c4:30:09:02:ac:66:63:f7:e7:a2:95:5c:c1:6e:25:
         23:cf:fb:fa:50:be:0a:4e:19:4d:ac:a0:dc:cb:48:4b:4c:3a:
         ec:71:d4:43:a4:e3:09:b2:99:2a:ba:d7:dc:d5:14:5e:46:86:
         54:14:5f:a2:02:12:f5:93:f5:61:20:3b:46:08:50:f2:69:80:
         d4:fe:66:22:78:46:2d:79:23:e0:29:22:39:61:e9:cf:7b:9f:
         ed:f7:80:dd:d9:75:f8:5c:c4:11:69:ba:bc:57:72:5c:fb:c3:
         6a:ce:0e:67:27:59:2a:94:c1:a8:ee:22:b2:5f:7e:5f:b4:fb:
         df:2c:3a:c6:f9:0c:11:ec:14:07:d0:2f:3a:21:9e:18:bf:7a:
         5f:ef:ce:38:39:20:f0:c1:ae:30:55:56:a7:5f:87:fb:d0:15:
         a2:34:d3:8a:57:c2:14:70:84:80:d7:33:aa:94:27:b7:bb:f3:
         30:fa:a8:94:7d:91:50:79:74:a0:4c:7b:28:01:93:40:8b:26:
         a4:6d:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----