Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
File:                     494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json)
Hash identifier:          7ZvprXUDpE/MHFEU0NgVKmDi9X711VmFGw0t+Y9nuIQ=
Subject key identifier:   9F:6B:20:B5:1A:11:F9:E7:9F:72:38:39:4B:71:17:8E:BF:12:4C:D1
Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
Certificate issuer:       /CN=e3de21b0636c614ebf43664798012afd56c5ee86
Certificate serial:       01962F748736C9850A7D05F3A5B76CEADB08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: xc4MEZiC/HlDg24bGsl/W+HbQulVyAp3rW4uy8rWN+8=)
                          2: iWeqg2fM-bOr0nrPrGbQuhoU9AI.roa (hash: FKxgaCA0gKFSYvzHrPdwz/du8IpMEpojl7Ooe7Yry+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:87:36:c9:85:0a:7d:05:f3:a5:b7:6c:ea:db:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=9f6b20b51a11f9e79f7238394b71178ebf124cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:53:95:8c:b0:3d:24:8f:5c:9e:9f:8c:1f:
                    4d:cf:6c:f9:d0:f2:14:4c:7d:61:e4:c9:a3:52:d9:
                    32:9b:d1:04:c3:06:2b:3b:1c:3c:81:16:99:48:cf:
                    83:ab:fd:84:d7:90:31:63:ef:14:9f:89:49:8b:14:
                    70:cf:b9:19:b9:bd:57:49:48:27:9b:84:2a:69:fa:
                    a7:57:d3:f2:b3:7f:27:0f:26:f0:38:b6:b2:3c:b7:
                    0c:b3:87:c8:8d:ba:f9:51:fb:3b:58:10:92:b4:45:
                    12:6c:80:e3:38:cf:0f:98:f0:5c:a9:f0:0a:8f:d7:
                    5e:3e:5b:28:e1:c1:6f:8e:00:45:b8:34:e5:d7:9f:
                    7a:2a:47:8b:dc:96:33:9d:2e:22:1f:9b:92:dd:7c:
                    58:f9:39:97:20:bd:51:16:35:b7:76:24:06:3f:76:
                    5d:f6:7e:d4:43:aa:ff:28:8b:e8:df:91:c2:06:42:
                    5b:51:d4:65:b2:d4:fb:da:e0:9d:b4:9b:b5:0f:07:
                    be:73:e4:5f:b8:9b:2f:f2:65:e7:1a:9c:bd:ba:ef:
                    44:e3:65:91:a1:4e:bd:56:f9:0f:ff:12:39:15:2e:
                    85:09:53:9a:2e:d8:3c:58:b0:b6:b4:89:64:ce:84:
                    f3:83:82:db:91:70:14:33:1f:6e:9c:81:d8:5f:c9:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6B:20:B5:1A:11:F9:E7:9F:72:38:39:4B:71:17:8E:BF:12:4C:D1
            X509v3 Authority Key Identifier:
                keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:10:a7:e7:ce:ad:4c:bf:f4:97:3b:7d:6e:d7:fd:7f:66:d3:
         23:21:ad:93:96:0c:22:81:e5:b4:bd:50:81:bb:ff:57:45:fa:
         d7:34:80:3f:80:14:09:68:66:89:88:20:0d:ae:49:b2:49:b2:
         1a:b3:66:3f:c0:fa:01:13:84:b5:0b:5a:29:a7:17:c3:51:a9:
         c7:0e:b5:12:73:f5:d1:73:c9:38:69:13:46:35:27:c0:11:bb:
         7a:e7:9e:8d:13:6b:de:b4:5e:18:ff:3c:eb:be:28:17:32:2c:
         da:af:05:d7:0d:1b:43:93:9b:a0:67:2f:36:74:47:ad:c9:27:
         58:18:1d:74:63:0b:f2:51:95:bd:b9:7f:db:0b:4a:ca:22:ee:
         73:bc:9e:af:2c:cb:b4:3d:c7:a3:ef:2c:1b:6d:34:58:fd:d8:
         3a:63:f5:38:b3:b9:e5:7b:e0:c1:c9:7c:c6:00:8e:05:b0:69:
         e0:b0:e8:ed:65:23:13:04:0e:82:39:47:a9:1f:45:01:7a:7b:
         fc:58:b9:b5:50:36:69:13:05:a9:27:ba:e2:9f:f7:46:e0:8f:
         61:f3:bc:04:03:d7:19:10:59:1e:7d:c9:84:ce:86:d4:40:e6:
         f9:5d:d8:e0:69:13:fd:8c:95:3c:18:63:bf:15:37:2c:5d:a0:
         fc:a7:89:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----