Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File:                     4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier:          wO+v+VM4kmX1OyUyXwNeCjppe4tVPgzZsYEOsPFyRFI=
Subject key identifier:   17:29:66:DC:05:C4:40:B3:64:0D:29:43:27:37:81:B2:5B:1F:2E:BB
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer:       /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial:       01962DF3DE624B16882E00E398B062EB5A4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number:          13BB
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: gIsDoAEPZZBJhBzaOQNZXrR0c/tRwu4jnsU6aMDmce8=)
                          2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
                          3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:de:62:4b:16:88:2e:00:e3:98:b0:62:eb:5a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=172966dc05c440b3640d2943273781b25b1f2ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:19:58:2b:4d:f2:d2:98:9e:39:63:67:b2:
                    2f:02:98:ef:8f:a3:38:4e:7c:3a:03:ec:b3:20:46:
                    bb:66:4f:bd:39:20:e9:74:8d:2e:bb:b9:7f:ef:9e:
                    27:80:4a:8e:66:af:23:9e:ba:c1:57:f7:42:2e:1e:
                    04:c8:7d:3f:ec:ae:17:71:2d:2f:16:c1:b7:83:0e:
                    5e:44:47:8d:a9:4f:c8:fa:01:bc:ee:4d:27:ae:e2:
                    8f:b4:10:23:9b:4f:01:cd:d5:ec:3c:ca:ff:62:fc:
                    7b:14:f5:d5:31:72:4e:83:08:05:5e:3e:bc:62:d8:
                    7e:52:42:37:dc:ff:99:8d:6f:8f:8c:7b:21:4b:2e:
                    50:1a:0a:d6:45:4f:e3:a6:58:ce:ac:22:13:35:25:
                    f0:0a:80:8a:bf:4f:ac:48:e6:0e:99:d5:ef:8a:5d:
                    92:31:f4:84:70:c8:76:d1:c1:11:67:12:83:84:d3:
                    44:71:e3:43:e5:13:43:80:72:a0:d0:c0:09:42:a7:
                    13:ca:e9:bc:25:f5:9a:38:6a:bf:a9:bd:c1:1c:90:
                    73:ef:e8:e8:15:cf:eb:63:53:b7:bd:b5:9c:12:4a:
                    86:4c:c3:13:83:2a:b8:da:f0:c5:34:73:54:ff:96:
                    70:c8:4e:43:12:2d:6e:f1:e9:39:78:8d:2b:50:c3:
                    07:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:29:66:DC:05:C4:40:B3:64:0D:29:43:27:37:81:B2:5B:1F:2E:BB
            X509v3 Authority Key Identifier:
                keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:af:14:62:eb:79:36:46:f4:b6:ea:17:7f:08:8d:1b:c2:77:
         6c:02:15:91:56:b4:0d:94:f5:0e:81:cd:0d:75:f0:33:80:7f:
         38:7c:31:f9:ec:be:a3:30:64:9f:e1:61:a1:c8:93:be:06:be:
         04:64:4b:ec:a8:a8:dd:50:86:37:10:7e:40:1b:bf:12:38:c6:
         bb:e6:ba:5a:92:b7:6b:3e:0d:31:7c:ff:98:b5:3c:9a:2f:76:
         ca:ce:87:10:a3:7a:6a:55:a3:51:1b:0c:d6:ac:98:f5:09:3a:
         78:9c:87:14:0c:ba:84:1b:75:26:e8:bc:0c:ea:96:a1:84:76:
         4c:50:00:cd:68:7e:9d:28:49:a7:d2:a1:9f:9f:dd:8e:3e:fb:
         ec:e4:b1:08:9c:86:32:6b:63:dd:66:8c:97:4b:73:31:98:ba:
         17:84:dc:5f:d8:20:94:49:15:eb:46:21:b1:79:2f:dc:fb:ef:
         e7:d5:a9:44:8f:48:53:89:31:39:6d:d3:cb:31:61:db:53:50:
         84:92:c1:ec:1e:06:3a:cd:d0:2a:da:5c:92:27:2f:94:ae:fe:
         92:37:df:11:1b:34:80:ba:5e:39:c9:0d:17:91:de:85:9f:4d:
         e6:7d:f4:fd:56:dd:d7:61:d5:9a:cb:c8:d8:c3:17:b9:9a:5e:
         44:f0:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----