Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File:                     4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier:          pJAx+k02nKniWaqmf3KnxSxOfBp+SjG7QQoT1szoQh8=
Subject key identifier:   05:1C:3C:56:D5:D1:BA:FD:B0:30:82:20:C5:65:A8:DF:E8:AD:20:F2
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer:       /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial:       01962F06D318064B74CB477FC3862907AA92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number:          088F
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: QYzzhTeeEXDjbSUg8m4D7cBLXD4XVtcQEW8ku1XNST4=)
                          2: QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa (hash: N6OU5OMUXPa8ri34/Wuotfq2VOjXlYSfy+37I0hPZzM=)
                          3: qswjHcqLBQY9Z2nmcWTR62TphaY.roa (hash: p4pPSzszW4Gf4Jz9O3n/L0PF3Vv3naASMu8aongMgFA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d3:18:06:4b:74:cb:47:7f:c3:86:29:07:aa:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=051c3c56d5d1bafdb0308220c565a8dfe8ad20f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:1a:26:3b:00:88:44:e0:ba:e2:d9:dc:88:
                    0e:d6:01:f4:f8:50:74:d7:66:23:84:0c:90:34:fa:
                    6d:23:0c:c3:d4:db:d4:ca:c9:6d:10:9d:84:7e:da:
                    1c:5b:9a:bc:75:67:3a:9f:66:f4:95:cc:ce:58:d8:
                    36:45:48:10:06:c2:0f:7e:af:4b:f0:84:08:2a:b8:
                    57:c7:bd:df:d7:2c:7f:98:85:63:85:48:ba:5d:e8:
                    99:6b:5b:f0:15:ac:ef:bd:bc:27:aa:cb:e5:6a:fb:
                    f8:14:bb:25:b0:42:0c:d7:65:11:5a:99:d2:92:10:
                    39:c3:2e:59:cf:ff:cc:cf:77:e7:79:ea:3a:53:a4:
                    9a:41:1b:6b:61:e7:95:7a:c2:05:92:83:3b:10:fc:
                    97:ed:8b:13:40:bb:41:b4:b4:8e:c0:44:d3:6e:55:
                    99:9d:87:79:9a:0a:2c:f7:3d:6a:50:49:95:0a:78:
                    41:75:40:fa:61:ac:0a:0f:a1:ef:64:7a:2b:bb:d5:
                    77:63:34:02:60:fe:bd:a1:30:5a:d8:65:92:b3:49:
                    a8:bf:3c:60:c5:67:bf:f7:08:fa:1c:fa:d1:41:2f:
                    6e:35:98:6f:d1:d5:f2:95:bf:0f:19:58:ea:48:f9:
                    7f:18:ed:3f:9c:79:aa:bf:e3:db:81:df:32:8e:ce:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1C:3C:56:D5:D1:BA:FD:B0:30:82:20:C5:65:A8:DF:E8:AD:20:F2
            X509v3 Authority Key Identifier:
                keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1b:29:fa:91:6a:5c:ac:01:93:8f:ef:a6:1b:43:cd:7b:37:
         9e:71:36:12:ec:c5:33:ed:fe:8e:48:52:01:aa:b1:36:f3:ae:
         6f:84:77:5a:e9:40:20:98:50:cf:cb:2d:44:c3:87:c7:90:d9:
         4e:bb:7f:53:45:e6:af:3c:13:87:86:55:b2:31:b6:31:8e:0d:
         d6:60:2f:ee:a9:fc:63:60:60:02:3e:1d:ee:a6:d0:5b:88:8e:
         29:bf:56:fe:ec:46:92:b8:0e:bb:9a:a0:bb:5c:6d:93:8d:d6:
         7c:ce:5a:fe:46:3d:f9:d2:87:93:81:7f:08:48:80:b2:23:37:
         a1:b7:a2:ea:db:03:87:8a:f6:79:4c:e4:8d:bb:8d:88:fc:ec:
         24:1c:f6:55:b9:87:5e:7a:36:4a:36:77:20:8f:e4:da:16:82:
         ea:49:78:de:bc:77:f1:aa:fc:4c:ee:0a:75:0a:80:47:96:28:
         01:3b:a4:34:d5:b2:c9:11:ed:18:f8:11:3b:76:6d:71:ba:ea:
         fd:aa:1a:f4:4c:4e:c9:ec:60:3b:d9:b0:92:34:81:86:1d:08:
         01:ea:01:73:92:a6:8f:8d:11:74:ed:a8:9a:6d:a6:42:03:e9:
         57:42:34:93:ec:32:94:38:9f:46:4d:86:e8:76:e1:22:ec:73:
         ea:66:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----