Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.mft
File:                     5Aue0z6KNDKWgp6PpKmrqIoNk9M.mft (raw, json)
Hash identifier:          wyinst8rQ8pK7/ycf5AnovlhquLZR/pP+oTjYWlH06g=
Subject key identifier:   DE:2E:CF:7D:52:F9:1F:8D:84:35:7F:3F:63:84:43:A7:D1:98:B0:39
Authority key identifier: E4:0B:9E:D3:3E:8A:34:32:96:82:9E:8F:A4:A9:AB:A8:8A:0D:93:D3
Certificate issuer:       /CN=e40b9ed33e8a343296829e8fa4a9aba88a0d93d3
Certificate serial:       01962F74217068116D368C173423F79C5B88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Aue0z6KNDKWgp6PpKmrqIoNk9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: 5Aue0z6KNDKWgp6PpKmrqIoNk9M.crl (hash: lAUdhlVAaqocuQJmBRccs86xh72aN+FOGJ+hKh6/GBs=)
                          2: VzaL4SfU0VtN573XkVIrhRZKPPo.roa (hash: AazUeb8NpzadkJeXDWygeenQmuY07lhkTA54bLVd50A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:21:70:68:11:6d:36:8c:17:34:23:f7:9c:5b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e40b9ed33e8a343296829e8fa4a9aba88a0d93d3
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=de2ecf7d52f91f8d84357f3f638443a7d198b039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:c4:f4:d9:55:a2:31:6b:69:ff:29:da:d8:
                    39:c3:f0:0b:a4:71:69:a0:41:25:b7:e4:3c:3d:4c:
                    42:c9:5d:6c:31:9e:c0:e0:ce:41:3e:53:9b:e7:ed:
                    05:a0:b6:d3:ce:ac:99:ca:eb:29:0e:be:76:24:f8:
                    72:02:0f:85:b0:69:cf:57:c6:07:5f:96:f2:4a:12:
                    95:d8:fe:f3:87:87:ce:7d:24:12:bb:0e:2d:a3:0a:
                    8e:51:d2:46:e2:8a:f6:28:08:ae:58:4c:fb:69:eb:
                    73:0f:d6:88:a1:c9:eb:1f:62:53:0a:b6:23:fe:32:
                    7e:d7:f7:a7:0f:e9:35:35:49:bf:b5:e2:a9:97:0a:
                    56:be:66:cb:62:a0:1b:9b:d0:ed:7e:93:a3:55:53:
                    6a:f0:d8:3f:c0:5e:33:cd:68:cd:b2:6d:44:cd:69:
                    04:6f:63:b9:bc:ac:fc:55:66:1e:02:5e:3a:c2:8b:
                    23:98:8a:c9:17:b5:3d:bb:58:8b:5b:60:10:83:46:
                    4f:d4:fa:03:a0:d9:94:62:f2:a6:f8:ab:20:b5:1b:
                    3e:20:db:5b:af:79:b0:be:f8:51:75:9f:cc:8a:d1:
                    dd:a5:cd:1a:95:de:ac:d4:58:13:e8:5e:b2:91:0a:
                    58:07:e1:c2:a0:2e:d7:46:7b:70:8a:61:7c:08:2f:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2E:CF:7D:52:F9:1F:8D:84:35:7F:3F:63:84:43:A7:D1:98:B0:39
            X509v3 Authority Key Identifier:
                keyid:E4:0B:9E:D3:3E:8A:34:32:96:82:9E:8F:A4:A9:AB:A8:8A:0D:93:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Aue0z6KNDKWgp6PpKmrqIoNk9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6e7437-7b10-4ed1-bd3b-be56d1cf73c4/1/5Aue0z6KNDKWgp6PpKmrqIoNk9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0e:c2:5e:e8:df:6b:f2:4b:6d:6f:7a:a9:ad:9c:06:f6:22:
         86:07:42:cf:80:c9:8a:11:95:12:60:2a:82:79:46:ae:3f:fa:
         67:eb:e0:67:fa:08:c8:50:5d:c6:b5:2e:e6:05:b6:b7:26:1c:
         d7:cb:3e:68:66:b3:f4:c7:2e:9a:2a:6c:41:04:1c:31:44:1d:
         0b:20:d9:0a:3a:ac:11:c7:63:2b:bb:dd:fe:71:88:cb:0e:4f:
         67:3f:40:6d:1e:c8:fd:ec:e2:dd:57:0d:c4:b6:16:52:8a:67:
         3e:01:a2:61:0c:0a:d4:71:fb:37:e0:b0:d8:c9:95:ec:3f:84:
         2e:fc:cf:69:54:3b:e5:e2:7e:5d:10:6f:ef:ad:bc:78:91:90:
         66:a2:fa:28:05:e4:90:77:a5:75:4e:bc:50:a7:43:20:c3:44:
         d1:b0:b5:be:b7:ba:97:ec:ef:ef:f1:fc:73:dd:ff:7f:c3:e2:
         fe:1e:cf:e9:f7:6a:b0:bb:6d:26:49:cd:08:0e:5e:38:b2:44:
         35:d6:4e:15:15:8e:91:2a:22:2f:27:4c:b6:9d:01:19:d5:f0:
         9d:06:d5:16:fa:ff:22:28:20:7d:ea:64:2b:e9:0b:88:f8:0b:
         d7:97:35:58:cb:0f:fa:1e:d3:9a:0e:bf:2e:42:04:05:35:3d:
         df:d6:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----