Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File:                     4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier:          /3IEjLodwj9Fj6sSDuyhuezAdJDHLa6IlQ72a0rBJdU=
Subject key identifier:   72:0E:22:6E:49:CA:5F:1A:D8:2E:B2:91:28:1F:FB:10:D0:C1:E0:0A
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       01962DF3E84E90C015B97C461F0763F3E17C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number:          0DAA
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: 7aIdV/8u0X2+TacGDKJN8IxvtbaN7flFtJQjPZ2Bj4k=)
                          2: ZcIsus6k0U4n68vd2BlSmmX0JTQ.roa (hash: GGkzJjiRy+xG+nAGWUrXuzxUvFxqlSxJYvMRGhTfLjg=)
                          3: fO5bykwkTB3KiAZuWcyGEBGhJE8.roa (hash: 3HfGLaMktk6F2ghb5LrLG+rGBzaC5K9KjLNpttW6IrQ=)
                          4: wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa (hash: lm9Zbfc6llKnFMQrYcsYug5Fz4BrAVnfVm1lHsp7Cfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e8:4e:90:c0:15:b9:7c:46:1f:07:63:f3:e1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=720e226e49ca5f1ad82eb291281ffb10d0c1e00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:68:01:f2:7e:21:c7:25:1b:0b:0b:40:83:
                    81:2c:6c:88:eb:70:8c:f7:12:8b:37:52:8b:b1:ad:
                    6f:08:b7:b8:07:71:3d:12:90:cc:68:a6:65:d3:23:
                    12:40:6b:4b:ee:a9:e1:07:c4:64:9b:9e:de:47:ff:
                    29:d5:95:67:ae:1a:87:fb:7f:fe:a3:88:7f:cc:51:
                    a1:5e:c9:d9:06:d5:87:8d:24:b2:51:d5:9e:86:00:
                    d3:80:6f:a9:95:66:21:57:88:79:a5:05:a1:18:49:
                    52:78:50:2d:b6:f5:e6:8e:86:a3:5b:cd:7a:30:dd:
                    dd:38:32:7d:24:25:4a:b3:22:9f:0a:e0:6b:c5:3a:
                    44:41:b1:5c:b1:bf:76:32:75:8b:de:eb:e1:7f:e0:
                    1b:71:63:6f:55:83:c1:70:30:b7:68:ec:c1:9a:cb:
                    16:3f:60:2d:a6:29:01:40:e6:72:67:d2:b5:bc:96:
                    31:50:ee:78:19:01:8d:91:a2:c1:03:8d:3b:89:0d:
                    a6:bd:5e:05:0f:49:78:4d:5f:e3:74:7f:16:d3:26:
                    27:6d:f2:77:b2:98:9d:25:c1:7a:09:fd:08:76:eb:
                    56:52:82:2b:58:d1:d8:fc:a8:9d:c7:0e:6f:9a:7e:
                    09:69:bd:50:68:cf:7a:6d:a7:d5:f4:45:75:e9:55:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0E:22:6E:49:CA:5F:1A:D8:2E:B2:91:28:1F:FB:10:D0:C1:E0:0A
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:60:56:fc:52:07:87:a0:9c:a2:f2:4e:58:a4:a0:a9:5e:69:
         b8:f7:c9:ef:4f:21:10:72:6c:b3:1d:57:34:18:68:0c:54:32:
         59:22:83:6a:f8:e5:44:09:8b:c2:69:fa:ed:fc:31:85:c6:11:
         bd:dc:ef:0e:9c:3e:80:6d:a9:0c:a7:15:20:2b:09:48:6c:ea:
         6e:46:4e:70:6b:5f:c1:c8:5c:d1:79:14:27:51:06:d2:ca:3b:
         e6:c0:d4:e2:44:6c:de:3c:c3:a3:82:85:cb:d8:da:94:7c:b2:
         6f:10:29:74:fc:49:37:b3:aa:dc:57:05:af:3f:73:24:42:69:
         39:59:e5:ea:a1:4c:5b:db:de:b7:fd:cb:bf:31:83:bc:59:ef:
         7e:13:02:1c:74:b6:d4:65:3b:8c:d2:d8:c8:de:56:7e:0b:b8:
         13:21:24:78:45:85:27:cc:df:5e:f4:8b:27:26:fb:ef:2b:74:
         28:7b:ba:e8:06:25:ff:8c:09:51:99:0a:e0:e3:46:62:e4:c3:
         8d:3c:9e:e6:b3:82:0b:bf:97:d6:f8:dd:14:88:74:f4:26:e1:
         1d:db:59:5e:fd:33:23:4d:cf:5c:6b:f1:58:12:e6:a4:43:dc:
         0a:49:f0:5a:3e:37:19:9c:69:07:c2:dd:96:ba:0d:9f:c8:7f:
         c1:d6:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----