Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File:                     4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier:          sW7jv/cpbCte7UZo26Xgqp1hjce97h8DTp0weT86jrU=
Subject key identifier:   D1:BE:C4:A0:A0:97:C8:4A:1B:6E:9C:2E:97:D6:0E:CE:F8:D5:71:D8
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer:       /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial:       01962F0691118CFB4B0B9423C0C507AD762A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number:          01BE
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: meECaNnpmQ6H7pXitSpArAAjjlAHJGUE5MpND7frias=)
                          2: sQlDLD71rwuQKEk9z1_BmhFOeQE.roa (hash: nNqb64nCN8cpCLQ5+ALkkO+gwOA+NXq21TqlMFS9bWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:91:11:8c:fb:4b:0b:94:23:c0:c5:07:ad:76:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=d1bec4a0a097c84a1b6e9c2e97d60ecef8d571d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:76:bc:0e:65:d5:b0:82:99:f4:01:78:79:
                    1c:d4:f1:ac:65:1f:2d:96:f4:ac:22:35:0c:6c:00:
                    d2:21:15:59:0a:88:74:d9:8e:a2:9d:18:4d:6c:fe:
                    a4:3d:b4:a1:e6:28:98:90:91:66:f1:ed:07:27:73:
                    df:7c:b3:c6:32:e3:eb:ce:bb:5e:13:8c:b1:26:36:
                    5d:6c:fa:94:23:13:4b:83:ad:b0:88:5a:3a:c7:1d:
                    38:1b:5d:06:b3:a1:82:67:e3:95:e4:4c:d4:8e:e8:
                    44:94:32:97:c8:9a:2a:8d:5a:44:bc:96:03:7e:c3:
                    9f:dc:5f:9f:c6:94:3c:5f:8c:7f:a3:a6:52:a6:b5:
                    fc:a7:4a:c9:0c:e4:8e:3a:5f:79:92:fe:36:01:17:
                    26:95:cf:a3:55:db:88:48:be:06:13:28:6e:fe:d2:
                    46:96:8c:96:b2:3f:88:fe:bd:7e:fe:b4:7a:1a:b8:
                    1f:af:b0:75:07:0c:df:5c:ba:07:01:61:d1:ba:6d:
                    fa:12:01:c7:de:8b:da:c3:27:b4:b3:51:48:fc:c2:
                    b2:6d:b9:26:7a:85:9d:6f:94:c9:ab:25:20:69:f3:
                    23:67:13:3a:2e:08:95:a5:f3:6d:06:f1:86:ea:4a:
                    2f:6c:d3:3b:0c:e4:25:8e:41:07:64:6f:0f:53:07:
                    d0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BE:C4:A0:A0:97:C8:4A:1B:6E:9C:2E:97:D6:0E:CE:F8:D5:71:D8
            X509v3 Authority Key Identifier:
                keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ec:a0:72:32:5e:ef:41:2e:8d:b0:68:15:db:2c:bf:93:7f:
         28:f9:de:bf:ec:b1:e0:50:d7:73:aa:b1:f5:e3:20:91:19:fd:
         8d:fa:25:9b:55:25:73:12:c6:43:6b:a2:2f:6e:99:5f:a3:76:
         14:2d:27:15:fc:be:76:ed:c9:78:af:80:44:8d:78:78:6b:6c:
         82:87:a8:5e:74:04:95:d0:cf:67:a8:f4:26:a2:49:4a:fd:40:
         3c:bf:99:97:ab:bc:43:e2:65:29:a0:86:74:04:3a:19:c4:29:
         66:12:14:c3:16:01:5e:d0:20:01:30:3f:65:3c:dd:9f:da:20:
         df:8e:89:cf:df:2e:e6:8c:9e:07:37:a9:18:bb:09:f8:eb:f4:
         43:e5:19:c0:d1:31:da:81:6a:53:c1:77:ee:47:47:1b:f7:5f:
         72:8c:8c:15:dc:1c:09:21:2d:53:03:98:5d:f7:92:91:d0:98:
         40:a3:aa:0d:24:cc:06:a7:60:e7:23:46:33:b8:51:a1:44:55:
         06:88:c7:b2:a3:b2:7d:f0:8b:2e:1f:30:a8:c6:05:d3:e7:c7:
         ca:d7:05:0f:b7:1f:40:21:60:ad:6c:11:0f:d4:ca:fc:4f:44:
         df:f0:4d:0f:4c:aa:94:7b:3b:33:80:5b:b1:75:4d:ca:fa:56:
         2f:6a:54:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----