Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File:                     xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier:          Ze6NWHbow/aV3FZBcnqqZgOpZTIAP2hLRhFVsr/zf40=
Subject key identifier:   8B:50:F7:62:8E:C4:9F:2A:97:14:28:61:CB:28:3A:E4:3C:77:9B:C0
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer:       /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial:       01962FAB9C2426666A8C25833A2097223BCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number:          14BB
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: E8OPd8A6_dgzaBqnWV201n06rXs.roa (hash: hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=)
                          2: XY1Eges0ofwvvFCGnxnMTZuzqq0.roa (hash: 4lDMbdxSfWLvbOB4pHjSTKQ4KFN1x9vtL2R0MqxD430=)
                          3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: aOFrJ8dGnZ8oAgldvWmVfeG71PH7v5h0dyKG8BEwH4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9c:24:26:66:6a:8c:25:83:3a:20:97:22:3b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=8b50f7628ec49f2a97142861cb283ae43c779bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:73:10:11:b5:61:f8:f9:1f:dd:0b:62:ab:e5:
                    a3:ae:ba:a2:79:66:3b:c0:76:28:ae:19:18:ec:cc:
                    9a:e1:69:1a:c4:a1:f9:bc:21:c5:13:32:23:01:6f:
                    ca:21:c7:bb:ac:f6:55:7c:16:35:9d:e7:85:aa:59:
                    8c:8c:16:a7:78:dc:1a:bc:5f:3b:c8:48:97:db:00:
                    40:a1:66:39:e4:77:04:65:53:64:53:92:7e:ce:bf:
                    16:43:79:6d:e3:e1:4b:81:95:43:be:d5:c1:02:9a:
                    31:d7:9b:d7:e6:5d:52:cb:d4:d7:8e:82:36:57:2a:
                    d2:09:94:c1:4a:d1:18:48:dc:7c:36:22:3c:6d:48:
                    56:79:18:e7:10:ef:b4:3c:5a:49:1b:c4:a8:47:48:
                    e0:37:3a:0a:d9:46:68:7b:92:dc:21:38:7b:35:67:
                    8c:61:55:a5:cb:0a:4c:d3:87:38:a3:55:48:56:f9:
                    a4:c1:68:0e:ae:81:a3:75:1a:75:fb:f2:05:af:1b:
                    1d:1d:23:d7:be:e5:01:31:61:b1:8f:4b:67:25:b9:
                    bb:6e:6d:b7:f6:00:cf:a5:4a:84:af:7f:8c:e6:d0:
                    10:48:20:04:4a:61:2e:f7:1e:91:da:0f:02:2f:6a:
                    de:44:be:0c:c4:07:eb:42:b7:8b:16:ae:94:3b:2a:
                    fe:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:50:F7:62:8E:C4:9F:2A:97:14:28:61:CB:28:3A:E4:3C:77:9B:C0
            X509v3 Authority Key Identifier:
                keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b2:db:fc:d2:89:dd:10:52:54:b4:03:62:ce:a8:36:2a:b7:
         06:52:e6:09:04:c4:4f:5c:07:6f:67:a8:e6:31:99:ff:21:c3:
         c9:dc:81:9a:ff:93:f0:51:49:e3:4c:62:40:1a:23:f7:76:6d:
         1c:a4:12:09:80:b1:0b:63:a0:db:4b:8f:8a:12:44:3a:b5:10:
         76:bb:bc:5b:ac:4d:e2:1f:ae:c2:b9:09:ba:3b:31:19:e6:85:
         61:c9:29:8b:64:22:51:08:4d:11:dd:66:d3:95:24:61:d9:b5:
         cb:da:e9:3a:6e:f3:5b:05:2c:d0:31:b9:34:a3:ff:3f:f5:14:
         35:5a:81:6e:71:e9:95:92:ce:48:0c:5c:e3:07:fb:29:cf:65:
         2c:21:6c:cf:b0:a6:74:e2:48:9f:78:fa:7e:c9:76:0c:73:78:
         82:60:1a:cc:80:df:03:9b:12:e7:e0:77:09:26:0c:c3:90:46:
         11:19:01:48:3d:52:7c:2f:bf:1d:1f:e7:ca:37:f2:66:21:b7:
         34:37:c1:b7:bc:91:6f:2f:2a:81:a3:4c:90:ca:8a:a2:dc:d3:
         39:eb:4e:32:b0:32:36:ed:ba:6c:69:d0:56:b2:13:12:a6:91:
         76:28:69:26:91:2b:28:5d:72:3f:1b:a5:06:55:2b:06:82:a8:
         0a:5d:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----