Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File:                     4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier:          sk+AMSzaGLRnXo6g92eoa38tEhsIimKgQRPSE04/SAE=
Subject key identifier:   18:59:9E:A5:30:82:A2:52:2D:5E:A1:99:13:BE:C0:FF:A7:09:B4:B1
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer:       /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial:       01962F3D44B394A2F5B64B84F8A71C056E81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number:          08AC
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: e8L5Y6q9s8qx1XawQJnib/tLC8BTXnweprpxBkjesvQ=)
                          2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:b3:94:a2:f5:b6:4b:84:f8:a7:1c:05:6e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=18599ea53082a2522d5ea19913bec0ffa709b4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:5f:65:28:b1:56:b1:56:7e:22:ee:80:6d:
                    60:2b:ab:4d:ce:12:30:22:8f:5b:03:76:a1:07:28:
                    c7:26:ff:41:c1:45:96:0f:8c:a8:a2:e4:80:70:a9:
                    a4:da:81:62:dd:66:31:4c:be:35:fd:22:9f:c0:1b:
                    63:e5:0e:b9:70:37:cb:6e:51:98:ec:63:17:1a:f2:
                    71:e8:17:86:8b:15:f8:c1:ce:97:17:30:d6:26:14:
                    e9:42:3d:5a:17:5c:0c:b0:cd:51:6b:77:35:a1:10:
                    50:1a:ec:24:77:93:49:24:28:04:42:ce:ee:57:e3:
                    7f:ec:85:70:ef:4f:5c:d4:08:fb:3e:db:97:cb:3d:
                    7c:ac:31:b1:79:00:3c:bd:18:3f:b0:26:ca:6c:78:
                    22:cd:e9:13:82:df:0d:b9:e9:bf:27:d0:e8:b0:1c:
                    fa:03:22:13:62:78:39:dd:e6:20:a9:7e:11:f3:05:
                    ad:8c:8f:10:ce:56:70:ed:1c:7b:d8:ee:06:a5:c2:
                    eb:ac:7c:e0:da:cb:5f:87:7e:92:dc:1c:a4:42:c4:
                    cb:09:54:a5:e5:cd:67:cd:15:70:23:0e:2b:78:11:
                    e9:69:19:3d:90:73:c8:f9:79:56:70:82:7a:d6:07:
                    9c:82:b2:5b:9b:fe:7f:22:e2:e5:e4:d3:16:41:af:
                    49:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:59:9E:A5:30:82:A2:52:2D:5E:A1:99:13:BE:C0:FF:A7:09:B4:B1
            X509v3 Authority Key Identifier:
                keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:ba:11:8c:03:89:8b:b0:61:35:d5:58:b7:8f:76:83:5f:
         8d:32:2d:25:f6:4f:51:e8:23:e5:c4:79:eb:c8:c6:de:38:e5:
         7a:31:0c:0c:81:ab:0d:76:cb:ad:fc:a3:0c:c6:88:17:11:98:
         12:8c:62:6f:f5:2c:9a:7f:02:eb:7d:45:63:ff:0b:6b:c6:08:
         f1:bd:44:13:6c:e7:80:cf:bd:8c:2c:84:e3:56:5b:6e:1e:5a:
         2e:14:44:87:03:81:ff:fe:5a:9c:db:ba:99:79:59:79:e6:9e:
         4c:77:69:d5:c3:57:f0:b8:5f:09:d6:df:93:e8:d2:d6:4b:c7:
         db:aa:c5:f0:01:ca:38:d7:b6:47:25:82:ec:5d:79:e7:df:11:
         09:a4:25:86:bf:5d:ac:33:4e:e6:55:a5:56:81:86:b1:26:07:
         02:02:ed:d3:f0:ce:12:1c:f6:2e:8f:e4:64:85:29:2f:07:bb:
         9e:ac:ef:aa:06:d1:c6:95:7f:4e:84:59:23:d1:85:d4:21:3f:
         9e:11:63:43:a4:f8:cf:15:4e:1a:aa:c0:00:78:09:eb:f8:79:
         4b:49:6e:f7:d9:f5:8f:71:23:85:ad:bd:6e:6a:df:e8:9f:50:
         9d:2e:93:30:28:b8:dc:96:93:e0:d1:94:04:64:4e:cb:d0:f4:
         0e:c2:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----