Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
File:                     c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json)
Hash identifier:          ao4qxCYeUvXmMi2peNJ2ooFGjG/fqyJUr0Ej3NBsT8s=
Subject key identifier:   E8:BD:1B:46:90:E1:C1:89:46:9C:3C:B5:41:ED:63:20:94:D5:E2:53
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Certificate issuer:       /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial:       01962E991630750FD6A2CC57645C1DC65784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
Manifest number:          0C1B
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: RBq_sIlJapW_qBhhOYs3cfjmb6g.roa (hash: fg25CTdh4wWfSSlLDFZZPAEIB6IEQNMofjk6UtMoVYc=)
                          2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: WqCu4SrXN3qLKjlQnbyw5fyVYh/VIqx9GGWtKAlTLWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:16:30:75:0f:d6:a2:cc:57:64:5c:1d:c6:57:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=e8bd1b4690e1c189469c3cb541ed632094d5e253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:89:e0:c6:ea:03:3a:e9:86:0b:28:53:28:
                    ec:ff:9b:ec:1d:13:ea:3c:1a:8d:c6:82:45:5d:a4:
                    90:59:fa:a6:48:c1:9d:a9:18:3a:73:92:24:11:90:
                    65:78:9c:24:2a:04:68:7c:2a:21:eb:67:17:e8:2a:
                    a4:26:af:ee:ee:56:66:3d:80:1d:b2:48:0b:58:ab:
                    6c:f5:43:6a:37:04:ad:2f:ee:41:db:e9:e7:db:7f:
                    33:83:ed:6f:a1:d6:12:43:a4:5a:21:8c:18:d7:cd:
                    69:8f:1c:5d:24:d0:a3:db:a9:2a:e9:e4:10:40:7f:
                    09:4f:30:aa:74:49:74:df:9e:92:de:01:c1:f2:c3:
                    de:e8:07:dd:15:e3:aa:b6:79:38:20:ee:2d:75:56:
                    23:41:db:d1:3c:f8:13:bd:6b:a0:d4:52:03:27:39:
                    44:eb:02:27:85:d4:2b:98:7c:4e:2b:b0:5f:4f:75:
                    58:1a:18:a7:79:eb:0f:3e:33:f7:ef:9e:ff:79:b4:
                    0d:1c:5b:c0:4a:7b:85:7f:72:a7:be:35:9d:31:72:
                    64:da:fb:aa:6a:d8:c8:d2:7b:5b:00:a0:c4:65:a1:
                    87:1c:cc:35:df:50:9e:95:2a:c2:7f:00:14:3f:97:
                    ee:49:a2:32:ca:45:5c:0c:07:20:1e:af:6c:59:23:
                    29:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BD:1B:46:90:E1:C1:89:46:9C:3C:B5:41:ED:63:20:94:D5:E2:53
            X509v3 Authority Key Identifier:
                keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:85:95:0b:dd:e6:46:fb:d1:db:7d:4a:a7:27:99:87:3d:f7:
         33:df:59:a8:77:88:1d:35:ab:c7:8f:28:c8:6f:53:c7:94:37:
         dd:09:46:78:31:61:bd:70:fb:7e:70:b8:6a:0d:fd:a7:3d:bb:
         54:7c:b7:47:4a:88:71:bb:d9:a4:7f:6e:b7:51:07:5f:ab:e8:
         47:d2:61:4b:d8:ba:3b:61:a4:a0:5b:c9:08:d8:2f:d7:ba:0c:
         0a:a9:bc:48:4c:19:12:77:42:41:c6:76:4f:4a:74:79:51:0f:
         cc:b9:3d:40:dc:80:96:34:b8:7c:f8:de:96:40:43:e3:8f:a3:
         4f:03:ca:50:91:92:b4:cf:27:8a:52:b7:b5:05:74:18:01:85:
         62:de:88:9d:60:fe:27:d6:7f:79:cd:74:01:ce:17:e0:ad:8a:
         a9:fe:a6:46:c7:e5:2e:4c:5f:e9:26:da:c1:a7:5a:86:f2:12:
         b1:36:84:f7:50:9e:e5:7e:88:a2:93:51:b0:7e:b1:a8:3f:58:
         69:93:b2:9f:46:b3:7a:ef:c0:85:8f:19:62:00:17:36:46:ec:
         3e:c1:fe:74:de:68:96:f7:4a:70:a2:8a:37:78:82:01:06:77:
         73:71:35:b4:24:61:c4:7c:65:0b:ef:e3:a4:0d:e5:8d:cd:9f:
         a9:33:9b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----