Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File:                     4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier:          DstjYJIayx9ds3xCKIuBuzYQLDPDkmDUqorRfn2PXXQ=
Subject key identifier:   B4:CA:4A:9E:14:7C:FF:8C:2C:D3:43:60:D9:E1:33:20:8E:A6:AE:5D
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer:       /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial:       01962F3D714DB14E52F6DE3654D4BBC5E54C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number:          02D5
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: zwGt3DD7dY3QYiql7KnqsHR48YwbbRE9ELZtUqGKsVc=)
                          2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:71:4d:b1:4e:52:f6:de:36:54:d4:bb:c5:e5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=b4ca4a9e147cff8c2cd34360d9e133208ea6ae5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:b6:0b:d0:81:ca:f2:3c:04:95:6d:55:ad:
                    bb:e2:d1:9e:48:c8:6e:6f:0c:e3:98:1a:fd:17:24:
                    8a:82:c4:f2:02:9c:7a:af:cc:ac:66:c3:fc:5c:b8:
                    f8:78:d5:72:b5:d2:40:7e:62:5d:cb:13:9f:a3:50:
                    1e:6a:a0:c7:c9:86:ae:00:fb:a5:19:0e:8c:a5:73:
                    90:60:8b:47:10:d2:85:9e:fe:5a:69:53:31:c3:85:
                    c1:4e:10:0c:12:e7:89:25:6e:72:83:27:9f:dc:0a:
                    b8:5f:46:34:6a:6e:d7:9e:ad:0e:5d:61:cf:22:d5:
                    b4:c4:7a:d8:3f:39:c6:6e:b8:4d:39:6c:18:91:24:
                    07:24:a4:73:f7:7a:2d:7e:86:5d:39:c9:7e:c9:dc:
                    1d:3a:5b:94:b8:f2:23:cf:a5:20:87:ec:ea:71:d6:
                    91:6d:fc:02:1a:e4:3c:9f:b5:5a:13:cf:d6:7f:1e:
                    ec:bd:d6:08:27:aa:b1:cf:40:53:b2:04:8d:9f:65:
                    f1:c0:41:91:64:37:91:00:cb:5b:b3:9c:86:1a:a4:
                    90:02:7f:09:7c:b8:77:0f:e7:e5:e2:a8:a5:d1:4c:
                    97:ac:9f:d2:f6:b1:82:24:e9:4c:b6:41:81:85:8d:
                    ca:cb:b0:08:c6:73:fe:5b:02:de:ca:f5:6e:45:ac:
                    89:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CA:4A:9E:14:7C:FF:8C:2C:D3:43:60:D9:E1:33:20:8E:A6:AE:5D
            X509v3 Authority Key Identifier:
                keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d4:52:f2:ce:34:0a:51:bd:b4:26:82:68:c1:79:8a:e8:22:
         05:70:2b:dd:ca:91:d9:a1:65:26:95:25:b1:04:c0:84:a5:f4:
         31:16:c9:98:6d:81:c6:a6:dc:67:d6:60:38:7f:0a:8d:3c:23:
         11:97:9d:97:09:b8:12:60:3c:51:56:59:63:f1:45:7d:dc:44:
         19:c7:24:77:62:cb:2a:ed:10:53:0d:b0:7b:0d:37:4b:3b:d1:
         6b:ed:ad:ff:31:11:59:26:a6:f1:1e:5a:b3:56:da:b8:0a:18:
         0a:66:af:10:7c:01:42:e6:8c:f0:c2:fa:04:9f:87:1d:7c:c3:
         a3:94:f8:d1:95:e7:2e:9a:b2:69:7d:f8:ac:a8:0a:3e:a5:30:
         94:6d:09:99:41:a7:74:ca:3c:b5:15:4c:1e:ef:47:6a:cc:02:
         14:0c:53:cf:ac:bb:12:70:2e:7f:88:cb:dd:a2:42:a7:90:5f:
         2e:d9:cf:f8:96:e7:f5:53:74:08:40:d1:67:2a:be:d1:ee:93:
         0f:d9:be:1d:e7:fc:00:86:8c:4a:9d:16:36:f2:22:e2:60:25:
         95:c7:01:27:26:8d:c0:7d:42:9c:98:d4:57:ce:3c:02:f6:87:
         06:88:e1:73:77:a2:f9:81:bb:80:d6:4f:14:f4:1e:e2:f6:68:
         17:87:e6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----