Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File:                     s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier:          m01Q8u5JiSA/fw888/8LolQM8RaeNIxxSHYk8TR/YRE=
Subject key identifier:   E4:62:96:D1:EA:3B:B9:16:8D:80:D7:2C:A5:EB:75:02:28:DB:32:5A
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer:       /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial:       01962E2ACCF06556648D12571C187491E03E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=)
                          2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: /ObDgTT298adFWPEGAo2ShpktA+C+8mpYxlc67CgXE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cc:f0:65:56:64:8d:12:57:1c:18:74:91:e0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=e46296d1ea3bb9168d80d72ca5eb750228db325a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ff:bf:ac:ba:13:ed:33:a5:6d:63:76:9e:1f:
                    98:67:55:75:e6:07:c3:8c:7b:5f:ab:6a:04:75:9f:
                    a8:aa:ff:b1:f1:15:c0:5f:cf:75:8f:ba:f1:0b:81:
                    9f:aa:16:ce:f3:97:12:53:8d:48:2c:00:60:75:12:
                    86:77:11:c7:53:3a:ee:37:b2:49:65:47:64:3c:2c:
                    32:d3:ac:be:31:73:ee:01:56:a0:ec:5d:77:52:32:
                    5c:ed:e7:7f:9a:e8:b9:3a:7a:da:3d:3c:25:21:9e:
                    f8:dd:30:51:17:fd:fb:d3:6c:5c:e8:3a:34:c0:b2:
                    d8:94:6d:5a:e1:4e:a1:a6:c7:0e:38:d7:72:cf:ec:
                    f1:07:d8:5a:7d:78:62:7f:83:79:be:2f:9c:71:85:
                    d6:32:b3:56:bf:03:c5:ad:36:0d:77:15:02:cd:d0:
                    86:18:6f:3c:ca:77:07:8a:83:2f:2d:49:95:f2:6e:
                    aa:c2:14:7d:ee:d3:74:ea:98:7f:40:04:df:52:98:
                    45:0b:c6:56:33:d8:6d:6b:79:4a:fb:2b:8c:ee:2b:
                    49:e8:45:d2:68:7d:36:ae:02:b4:60:5c:c7:49:4a:
                    dd:06:da:6e:ba:0f:26:e5:71:ac:c2:11:bb:98:7b:
                    6a:12:76:43:cf:15:87:38:97:71:29:f7:28:c3:f0:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:62:96:D1:EA:3B:B9:16:8D:80:D7:2C:A5:EB:75:02:28:DB:32:5A
            X509v3 Authority Key Identifier:
                keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:0c:ab:6f:f3:57:d3:8b:e3:83:b9:ae:19:47:4e:96:56:47:
         4f:9b:fd:24:c4:21:90:44:07:ac:b8:56:87:36:ea:86:44:e2:
         2d:01:40:77:42:3d:87:95:52:9a:2f:3e:68:e3:bd:5e:f3:a2:
         08:ea:0a:9c:d0:51:a5:dd:04:dd:82:78:16:05:f0:a7:56:4f:
         18:f5:e2:75:a7:59:2b:e1:8d:6d:4f:bf:27:84:32:f5:0b:ac:
         33:92:cc:e9:69:30:3c:fe:95:18:0b:4e:e1:23:37:53:93:73:
         1c:37:0f:52:9f:fb:fd:e1:ef:2b:f0:a4:d2:0b:d3:a6:24:8b:
         7e:98:f6:aa:eb:ac:cb:b6:ec:87:fd:e4:28:e0:cb:3e:62:22:
         ba:f5:45:21:07:15:bf:0b:84:6a:a6:ac:5c:bc:3a:c7:78:dd:
         b9:91:7b:19:93:8c:2d:d7:0d:f9:ae:6e:8c:d6:96:d3:c7:e8:
         8a:c0:e5:6d:c2:8b:fa:da:59:3a:24:b2:4f:df:b6:b7:dc:f7:
         d5:6e:31:08:86:6f:eb:6c:a0:a9:27:8c:ce:3c:61:e8:5c:27:
         0f:ca:27:40:13:79:c1:a3:31:fb:9d:76:29:a1:c6:de:d9:78:
         d3:6c:d9:f0:40:b0:33:fe:30:78:8a:c9:77:33:e3:0d:c7:12:
         03:24:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----