Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
File:                     4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json)
Hash identifier:          1zl8MFZCORbBhlcXKZyg2gicQP00vnHLL5Fj98Jci1A=
Subject key identifier:   A4:71:E0:58:06:65:32:D3:E6:BD:C2:47:39:7C:3E:EB:7D:F8:72:0E
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Certificate issuer:       /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial:       01962FAB765838B9495E855C610AE841659A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
Manifest number:          09B5
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: FkTsXPAUeZ7iBCDTEFSQT2PbmgO9xcbf8LKFgq5tb60=)
                          2: O0VEzp-OH_xjiLZy3Uqgd8JheUQ.roa (hash: bRkZXZhDlUd4TGWoN3UvYTMqPRoPQQ3RohAzYIARoRY=)
                          3: Zqne7w4Tvp4dVwqTAIVn_ejmVzM.roa (hash: 0xC/Fcc0rzUx3NsMcFdemExDKk2Y+Hc3aVGnwBXOWlA=)
                          4: exE6Ut3mUQ9a9aNWDZix4WcMzvE.roa (hash: L1gAescOmgvvCSriS7QJBXICpNWmr7dIsSMrsFotRNw=)
                          5: oXaw6fDaPf-aCFWq6--7fP8PfNo.roa (hash: T/GzBAIF7xC4cPBnpxI0RpkOSIvxEnLWEiEZKvaP0H0=)
                          6: uVDY6PyUuy1nXZci6asUkfr791g.roa (hash: souJp5O+Y8ld96qNW2UmMguzsgXAcLNBUoBdApPqkIw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:76:58:38:b9:49:5e:85:5c:61:0a:e8:41:65:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=a471e058066532d3e6bdc247397c3eeb7df8720e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:7d:4f:36:fb:c9:2c:80:4a:d5:08:fb:d4:
                    0c:9a:fb:d7:65:2b:a0:4e:78:f1:e7:4a:29:69:8a:
                    de:ee:5b:e3:22:4f:68:4e:5e:2e:cf:b4:6c:41:91:
                    eb:39:24:1d:ec:a8:ad:a0:14:0c:8f:40:d8:7a:f6:
                    4b:22:f0:8d:48:bf:8a:b4:88:04:a6:3c:d5:50:2e:
                    88:63:03:02:fe:7c:3f:e0:1d:84:4e:55:4b:89:1b:
                    01:9e:c1:86:84:7f:d9:6c:eb:43:3d:97:93:6c:d7:
                    f1:05:0c:42:9c:28:f3:e6:1a:b9:de:91:74:73:a4:
                    26:34:c3:cd:a6:06:97:87:5c:c7:d8:5f:49:27:cb:
                    ba:f6:18:83:2e:16:11:00:5a:d0:6d:20:dd:1a:2a:
                    a0:d9:c4:a3:ef:f6:5a:6a:e2:fb:ed:e1:60:a1:2d:
                    3f:bb:ea:69:de:fc:df:ae:63:6f:7c:8f:d7:f1:44:
                    96:0a:5d:44:be:14:37:e4:32:82:47:b2:7f:22:15:
                    76:db:db:67:09:91:4d:7a:72:86:cc:3f:dc:2c:ca:
                    62:3c:3a:29:6b:d7:ae:c3:ee:a4:af:81:9d:46:a6:
                    c5:58:ff:92:0c:d1:2d:0e:02:58:e8:05:e9:53:88:
                    77:0b:07:6e:2f:b3:04:14:79:c6:e3:92:b6:d1:b2:
                    a5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:71:E0:58:06:65:32:D3:E6:BD:C2:47:39:7C:3E:EB:7D:F8:72:0E
            X509v3 Authority Key Identifier:
                keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9c:e4:31:31:de:9f:78:9f:6e:a9:d9:a1:2a:a0:91:5a:82:
         6e:84:25:55:34:c1:a7:f9:39:b7:88:b8:c9:5b:28:e4:eb:bc:
         10:88:a7:2e:d4:39:84:39:aa:cc:b5:5a:f6:45:97:63:c2:5d:
         93:82:f7:73:dd:70:eb:e1:aa:7b:5f:1a:ed:57:3a:3f:9c:c6:
         74:45:dc:60:ff:25:d1:c7:59:0e:d8:2b:cd:79:2a:bb:ac:8a:
         4e:e4:41:92:f2:bd:6e:aa:36:de:2a:6a:ed:c9:97:32:96:49:
         e5:cd:cd:6d:58:e7:9d:b9:bd:cc:18:2a:91:49:4a:30:9a:44:
         1d:95:f8:29:62:06:94:7a:89:9d:03:2b:98:9a:3b:32:d5:66:
         a0:5c:72:3d:8e:80:cc:71:e6:3b:66:2a:b2:24:12:56:1f:52:
         ae:d0:4d:a3:e0:61:b8:a0:a0:74:b8:18:a6:ff:62:8f:37:d6:
         15:a8:00:e6:ea:56:41:76:07:f2:77:b7:32:fd:67:cd:c8:83:
         fd:00:4c:59:a1:4a:3a:8e:3b:2c:d3:50:7d:19:8c:1c:fb:6c:
         e7:f3:85:b6:e6:b1:65:a4:c7:5f:43:b5:50:33:46:66:9f:56:
         ce:b4:a3:ae:61:be:dd:3c:da:4d:6f:74:f4:75:79:04:6f:4c:
         53:89:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----